Registro públicoModerado
Informe de salud del softwareesquema 0.27.0 · métricas 1.13.0 · 2026-07-27 18:13 UTC
DND-IT / action-releaser
Flexible GitHub Action for versioned releases powered by git-cliff
DND-IT/action-releaser tiene un índice de salud de 58 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Engineering Quality (90/100) y la más baja, Community & Adoption (12/100). Se actualizó por última vez hace 11 días. Una sola persona concentra la mayor parte del trabajo reciente.
58
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
58
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
Tamedia TechnologyOrganización
13 seguidores33 repositorios públicosdesde jun 2016
Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación |
|---|---|---|---|---|---|
| Go | github.com/dnd-it/action-releaser | v0.4.0 | - | 21 | hace 11 días |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
76
Actividad de desarrollo
60Moderado
Cómo se puntúa
| 28.8/36 | Recencia de push — último push hace 11 días |
| 4.8/36 | Cadencia de commits — 7/52 semanas con commits |
| 16.4/18 | Volumen de commits — 66 commits en el último año |
| 10/10 | OpenSSF Scorecard: Maintained — 16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Datos de entrada utilizados
| commits_last_year | 66 |
| human_commit_share | 0,697 |
| days_since_last_push | 11 |
| active_weeks_last_year | 7 |
Disciplina de publicación
100Excelente
Cómo se puntúa
| 27/27 | Publica versiones — 20 versiones publicadas |
| 36/36 | Recencia de las versiones — última versión hace 11 días |
| 27/27 | Cadencia de publicación — una versión cada ~10,4 días |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
Datos de entrada utilizados
| releases_count | 20 |
| latest_release_tag | v0.4.0 |
| releases_from_tags | no |
| days_since_latest_release | 11 |
| mean_days_between_releases | 10,4 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
12
Popularidad y adopción
1Crítico
Cómo se puntúa
| 0/60 | Estrellas — 0 estrellas |
| 0/25 | Forks — 0 forks |
| 0/15 | Observadores — 0 observadores |
Datos de entrada utilizados
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
25Crítico
Cómo se puntúa
| 22.5/22.5 | README |
| 0/22.5 | Licencia — no se detectó ningún archivo de licencia |
| 0/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
60
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 3.9/22.5 | Distribución de commits — el principal contribuyente firma el 83% de los commits |
| 2.7/13.5 | Amplitud de contribuyentes — 2 contribuyentes |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0,826 |
Cómo se puntúa
| 40.1/46.8 | Resolución de issues — 86% de issues cerradas |
| 37/38.3 | Aceptación de PR — 29/30 PR decididos fusionados |
| 1.5/15 | OpenSSF Scorecard: Code-Review — Found 2/18 approved changesets -- score normalized to 1 |
Datos de entrada utilizados
| merged_prs | 29 |
| open_issues | 1 |
| closed_issues | 6 |
| issue_closed_ratio | 0,857 |
| closed_unmerged_prs | 1 |
Propiedad y custodia
61Moderado
Cómo se puntúa
| 30/30 | Respaldo de la propiedad — propiedad de una organización |
| 0/20 | Dominio verificado |
| 8.2/25 | Alcance del propietario — 13 seguidores de DND-IT |
| 23.2/25 | Trayectoria — 33 repos públicos, cuenta de ~10 años |
Datos de entrada utilizados
| followers | 13 |
| owner_type | Organization |
| is_verified | — |
| owner_login | DND-IT |
| public_repos | 33 |
| account_age_days | 3696 |
Mantenimiento de paquetes
100Excelente
Cómo se puntúa
| 25/25 | Publicado y resoluble — 1 paquete(s) en go |
| 35/35 | Recencia de publicación — última publicación hace 11 días |
| 20/20 | Historial de versiones — 21 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
Datos de entrada utilizados
| packages | github.com/dnd-it/action-releaser |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 11 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
90
Prácticas de ingeniería
94Excelente
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 2 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 16/16 | Configuración de linter |
| 9.6/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 19 out of 19 merged PRs checked by a CI test -- score normalized to 10 |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | sí |
| has_precommit_config | sí |
Documentación
85Excelente
Cómo se puntúa
| 30/30 | README |
| 25/25 | Directorio de documentación |
| 0/15 | Sitio de documentación / página del proyecto |
| 10/10 | Descripción del repositorio |
| 10/10 | Topics — 1 topics |
| 10/10 | Wiki |
Datos de entrada utilizados
| topics | backstage |
| has_wiki | sí |
| homepage | — |
| has_readme | sí |
| has_docs_dir | sí |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
42
Postura de seguridad
42En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 19 out of 19 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0.8/7.5 | Code-Review — Found 2/18 approved changesets -- score normalized to 1 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 0/2.5 | Licencia — license file not detected |
| 7.5/7.5 | Maintained — 16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — sin datos |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4,2 |
Excluidos de la puntuación (sin datos o no aplicable): signed_releases. Los pesos restantes se han renormalizado.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
84
Contexto y guía para agentes
85Excelente
Cómo se puntúa
| 45/45 | Instrucciones para agentes — CLAUDE.md |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 40/40 | Historial de commits legible — 46 de 46 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 888 |
Cómo se puntúa
| 12.6/18 | Arranque con un solo comando — go.mod (convención del toolchain, sin ejecutor de tareas) |
| 22/22 | Pruebas automatizadas |
| 11/11 | Configuración de lint / formato |
| 11/11 | Verificación estática de tipos — Go (tipado estático) |
| 10/10 | Entorno reproducible — Dockerfile, lockfile |
| 10/10 | Práctica demostrada con agentes — 4 de los últimos 66 commits con autoría o crédito de agente |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | go.sum |
| has_dockerfile | sí |
| typed_language | sí |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | sí |
| typecheck_configs | — |
| agent_commit_share | 0,061 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Legibilidad del código para modelos
100Excelente
Cómo se puntúa
| 45/45 | Código verificable por tipos — Go (tipado estático) |
| 55/55 | Tamaños de archivo manejables — 0/16 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | Go |
| largest_source_bytes | 15.666 |
| source_files_sampled | 16 |
| oversized_source_files | 0 |
Datos clave
0estrellas de GitHub
2contribuidores
66commits en los últimos 12 meses
11días desde el último push
20versiones publicadas
1factor bus
1issues abiertas
Goecosistemas de paquetes
Advertencias de recopilación de datos
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
OpenSSF Scorecard 4.2 / 10
4.2agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 19 out of 19 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 1 | Code-Review | Found 2/18 approved changesets -- score normalized to 1 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 0 | License | license file not detected |
| 10 | Maintained | 16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/d | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Dependencias directas 2
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| Go | github.com/google/go-github/v68 | v68.0.0 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
Todas las dependencias no recopilado
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"backstage"
],
"is_fork": false,
"size_kb": 206,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 102653,
"Shell": 10994,
"Dockerfile": 893
},
"pushed_at": "2026-07-16T14:48:51Z",
"created_at": "2026-03-26T20:59:18Z",
"owner_type": "Organization",
"updated_at": "2026-07-16T14:48:00Z",
"description": "Flexible GitHub Action for versioned releases powered by git-cliff",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": null,
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://www.tamedia.ch",
"name": "Tamedia Technology",
"type": "Organization",
"login": "DND-IT",
"company": null,
"location": "Switzerland",
"followers": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/19909911?v=4",
"created_at": "2016-06-13T13:26:53Z",
"is_verified": null,
"public_repos": 33,
"account_age_days": 3696
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-16T14:47:41Z"
},
{
"tag": "v0.3.4",
"kind": "patch",
"published_at": "2026-05-29T13:27:00Z"
},
{
"tag": "v0.3.3",
"kind": "patch",
"published_at": "2026-05-29T09:10:47Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2026-05-15T11:30:06Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-05-15T09:24:55Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-05-15T09:17:08Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2026-04-17T09:25:43Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2026-04-17T06:43:50Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-04-16T07:39:54Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-04-14T10:35:53Z"
},
{
"tag": "v0.1.10",
"kind": "patch",
"published_at": "2026-04-14T02:51:10Z"
},
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2026-04-13T19:30:42Z"
},
{
"tag": "v0.1.8",
"kind": "patch",
"published_at": "2026-04-09T04:45:09Z"
},
{
"tag": "v0.1.7",
"kind": "patch",
"published_at": "2026-04-07T12:42:52Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2026-04-07T11:48:09Z"
},
{
"tag": "v0.1.5",
"kind": "patch",
"published_at": "2026-03-31T15:22:59Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2026-03-31T14:33:03Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2026-03-31T13:55:36Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-03-31T12:58:15Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-03-31T07:23:33Z"
}
],
"recent_commits": [
{
"oid": "66b64d29ed2237d7ab1005c263d16c0dbb963b08",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.4.0 (#36)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-07-16T14:47:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08b49dbc6a9812007f3317afb599613af7fdeca2",
"body": "* fix(releasepr): keep release branch ahead of base to prevent PR auto-close\n\nIn gated (release-mode: pr) flow, updateReleaseBranch force-reset the release\nbranch to the base SHA and then added the prepare-release commit in a second\nref update. Between the two updates the branch head had 0 commits a\n[…]\nte the multiline changelog output last, after all scalars, and extend the\nheredoc delimiter until it never appears as a line in the value so arbitrary\nchangelog content can't break parsing.\n\nFixes #35",
"is_bot": false,
"headline": "fix: gated-release auto-close and lost release-published output (#37)",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-07-16T13:38:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2018aa15b946eb67000e56880100b0b1c538d0b7",
"body": "Change the calver strategy from YYYY.MM.DD[.N] (calendar date plus an\noptional same-day suffix) to YYYY.MM.N, where N is an incrementing\ncounter that starts at 0 and resets each month. This matches the\nstandard CalVer YYYY.MM.MICRO scheme (PyCharm, Ubuntu, pip).\n\n- NextVersion derives the version fr\n[…]\nDOS item 1).\n\nBREAKING CHANGE: calver versions are now YYYY.MM.N instead of\nYYYY.MM.DD[.N]. Repos already on calver will see existing day-based tags\nreinterpreted as counters for the transition month.",
"is_bot": false,
"headline": "feat(calver)!: use YYYY.MM.N format with monthly counter (#33)",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-07-15T08:54:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "92d123c49ddda92f7fe83c0b6834017b66832a27",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.4 (#32)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-05-29T13:26:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be63490eb21244fac7d7e591a91617e36bf8d05d",
"body": "…… (#31)\n\n* fix(semver): handle empty tag-prefix correctly by removing hardcoded template pattern\n\nThe built-in cliff-templates/semver.toml was hardcoding tag_pattern = \"v[0-9]*\",\nwhich prevented git-cliff from detecting unprefixed tags (e.g. 0.1.0) when\ntag-prefix was empty (the default). Fixed by \n[…]\nake effect.\n\nIncludes regression test TestSemverEmptyPrefix to ensure unprefixed tags are\ndetected when tag-prefix is empty.\n\n* docs: clarify cliff-config default behavior\n\n* fix: add integration test",
"is_bot": false,
"headline": "fix(semver): handle empty tag-prefix correctly by removing hardcoded …",
"author_name": "Davide Cammarata",
"author_login": "DCamma",
"committed_at": "2026-05-29T13:26:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6c24f8ba95c00921135b4eb4492a079298c115de",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.3 (#30)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-05-29T09:10:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fd02a7a20bfdf57f8439c794719a545633ab2eb",
"body": "The \"v\" default added in ca8d2b4 broke existing users who rely on the\nempty default: their past tags (e.g. 1.0.0 without a prefix) are no\nlonger matched, causing version detection to restart from scratch.\n\nRevert to the pre-ca8d2b4 behaviour — tag-prefix always defaults to \"\".\nUsers who want the con\n[…]\nstSemverDefaultsToVPrefix\nwhich tested the now-reverted behaviour. Update TestLoad_NoFile and\ndocs to reflect the empty default.\n\nCo-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: revert semver tag-prefix default to empty string (#29)",
"author_name": "Davide Cammarata",
"author_login": "DCamma",
"committed_at": "2026-05-29T09:09:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "628875117a7ffe93e51f1bd3719ac9bdae50e6b8",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.2 (#28)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-05-15T11:29:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1537629db705d06a25d51c1ad7d76544d9406d22",
"body": "changelog.Generate previously used --latest in direct mode, but the new\ntag is created *after* this function runs, so --latest resolved to the\nprevious tag and emitted that release's commit range — release notes\nwere one release behind. Always use --unreleased in both modes.\n\nCommit b0f0afb fixed th\n[…]\negration regression\ntest. Drop TestGenerate_rangeFlag, which re-implemented the conditional\ninline and so couldn't catch this bug.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: use --unreleased for changelog generation in direct mode (#27)",
"author_name": "Davide Cammarata",
"author_login": "DCamma",
"committed_at": "2026-05-15T11:25:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "09d885326456b761987232e42a07e44e75b49e9b",
"body": null,
"is_bot": false,
"headline": "docs: update todo file",
"author_name": "DCamma",
"author_login": "DCamma",
"committed_at": "2026-05-15T11:14:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a61c8baf2436b6be43b4b2af339ee6a4fa76840c",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.1 (#26)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-05-15T09:24:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3532899fc399f5dfbd8a8fd62a25a71e7852b307",
"body": null,
"is_bot": false,
"headline": "fix: issue with last release (#25)",
"author_name": "Davide Cammarata",
"author_login": "DCamma",
"committed_at": "2026-05-15T09:23:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cac5783bb19323b650b8d5af4b7805f8f0eb4a1",
"body": "* chore(main): release 0.3.0\n\n* chore: fix version\n\n* chore: fix version\n\n* chore: fix version\n\n---------\n\nCo-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>\nCo-authored-by: Davide Cammarata <cammarata.davide.ti@gmail.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.0 (#20)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-05-15T09:16:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17de363140e22ae1949664220034c3360cf101ff",
"body": "The action.yaml default for tag-prefix is \"\" and GitHub Actions can't\ndistinguish \"unset\" from \"explicitly empty,\" so users writing the\nminimal workflow\n\n - uses: dnd-it/action-releaser@v0\n with:\n version-strategy: semver\n\nend up with bare-number tags (e.g. 0.1.0) and main.go skips\n--\n[…]\nan pin the previous\nbehavior with an explicit empty prefix once we add an escape hatch, or\nset a different prefix in .release.yml.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: default tag-prefix to \"v\" under semver (#23)",
"author_name": "Davide Cammarata",
"author_login": "DCamma",
"committed_at": "2026-05-15T09:10:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4a930354a8dde0ba0f9d3e55d8c6a3e9dad230f9",
"body": "fix: use bundled cliff template for changelog rendering",
"is_bot": false,
"headline": "Merge pull request #22 from DND-IT/fix-default-cliff-config",
"author_name": "Davide Cammarata",
"author_login": "DCamma",
"committed_at": "2026-05-15T09:06:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d163602bfbc10ff3f777f9fe21c3fe791ab70e47",
"body": "changelog.Generate only passed --config to git-cliff when the user\nexplicitly set cliff-config, so direct mode fell back to git-cliff's\nembedded keepachangelog default (emoji headings, \"## [unreleased]\"\nsection). The bundled cliff-templates/<strategy>.toml was wired in for\nversion bumping but never \n[…]\ndled template's plain headings — the\nold test only checked the changelog was non-empty, which passed even\nwith the wrong template.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: use bundled cliff template for changelog rendering",
"author_name": "DCamma",
"author_login": "DCamma",
"committed_at": "2026-05-15T08:17:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0e59d3ccb432d1ec5551432a9caa2d4af9c57c43",
"body": "The dry-run path was emitting the would-be tag in the action's `tag`\noutput, while leaving `release-url` empty. That mismatch tricks\ndownstream steps into believing a tag was created when nothing was\npushed. Match the (already-correct) `release-url` behavior and leave\n`tag` empty too. The would-be tag is still logged for visibility.\n\nFixes the TestDryRun integration assertion that the tag output is\nempty in dry-run mode.",
"is_bot": false,
"headline": "fix: leave tag output empty in dry-run mode",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-18T06:00:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bafc174bf8ddaf889133b16fb69f0e46cb0dbb9",
"body": "The integration job was failing with \"gzip: stdin: not in gzip format\"\nbecause curl piped non-gzip content into tar. Two root causes:\n\n1. Unauthenticated curl to api.github.com gets rate-limited on busy\n runners; the script then resolves an empty LATEST and downloads a\n 404 HTML page.\n2. curl -s\n[…]\n and tar --strip-components=1 directly into /usr/local/bin\ninstead of relying on `find` to locate the binary.\n\nNow integration tests exercise the same git-cliff version that ships\nin the Docker image.",
"is_bot": false,
"headline": "ci: pin git-cliff install in integration job to match Dockerfile",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-18T04:52:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d86ae0896fa818f84fb058692c364b388e9632c",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.2.3 (#19)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-17T09:25:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "441c23c6fb9c888e783da5a99afbfa92b0695162",
"body": "GitHub's \"List pull requests\" endpoint does not populate the boolean\n`merged` field — that field is only returned by the single-PR GET\nendpoint. Iterating list results with `pr.GetMerged()` therefore always\nreturned false, so DetectMerge silently treated every closed PR as\nunmerged and never matched\n[…]\n returns.\n\nUpdate the test fixture to mirror the real LIST response (sets\nmerged_at, omits the boolean merged) so this regression cannot recur\nwithout a test failure.\n\nFixes DND-IT/action-releaser#17.",
"is_bot": false,
"headline": "fix: detect merged PRs via merged_at, not the boolean merged field",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-17T09:24:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d0233022febe3015bc5e451044a58596f0a564d8",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.2.2 (#18)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-17T06:43:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc3b8e6e64ded01bd57917a7185f7ec98369e0ee",
"body": "Mirrors CI: go fmt, go vet, go mod tidy, golangci-lint, and\ngo test -race ./..., plus standard whitespace/yaml/large-file hooks.\nCatches lint and test failures before they hit CI.\n\nRunning the hooks once also picked up:\n- gofmt drift across 5 pre-existing files (no behavior change),\n- a missing trailing newline in cmd/action-releaser/main.go,\n- an unchecked fmt.Fprint return in the new DetectMerge tests.\n\nInstall locally with: pre-commit install",
"is_bot": false,
"headline": "chore: add pre-commit config and run hooks",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-17T06:08:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0328f3cc99d640e4c96a543685cd65000f9737d9",
"body": "Replace event-file based DetectMerge with an API-based lookup so release\ndetection works on any trigger (push, pull_request, workflow_dispatch),\nmatching how release-please operates. Also commit CHANGELOG.md to the\nrelease branch under the service path, so merging the release PR fires\npath-filtered \n[…]\nthe deleted event-parsing tests with httptest-based coverage\n of DetectMerge filtering (empty list, non-merged, non-release branch,\n missing pending label, valid match, first-match-wins, 500 error).",
"is_bot": false,
"headline": "feat: detect release PR merges via GitHub API",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-17T03:54:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "414b89376e75a14c0df07589cd0abc8e1af6f7fa",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.2.1 (#16)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-16T07:39:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bed71f99d6c497f0177e553177a456aa9f64f94f",
"body": "…an original",
"is_bot": false,
"headline": "fix(test): use 2x input size so truncated+suffix is always shorter th…",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-14T10:37:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0d840fb62a85f425f4bab39def613cb6a55f183",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.2.0 (#15)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-14T10:35:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ad990825b7cef130b6d386a15362d4b0807c718",
"body": "… not byte constant",
"is_bot": false,
"headline": "fix(test): correct truncate assertion to compare against input length…",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-14T09:06:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a316f8eaae2c82002704210f7581532e0e8e547",
"body": "…-rolling\n\nBREAKING CHANGE: version-strategy no longer accepts \"date-rolling\" or\n\"numeric-rolling\". Use \"calver\" (calendar versioning, YYYY.MM.DD[.N])\ninstead of \"date-rolling\". Numeric-rolling has no replacement.\n\n- Rename DateRolling → CalVer, strategy name \"date-rolling\" → \"calver\"\n- Delete Numer\n[…]\ne cliff-templates/numeric-rolling.toml\n- Update config validation, factory, IsValidVersion, TagPatternRegex\n- Update all tests and integration tests accordingly\n- Update action.yaml, README, CLAUDE.md",
"is_bot": false,
"headline": "feat!: replace date-rolling/numeric-rolling with calver, drop numeric…",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-14T08:57:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6db969baec605fd3a35732528e3e99f998611a28",
"body": "- Add release-mode input (direct vs pr) with full gated workflow example\n- Add include-path input to inputs table\n- Document all new outputs: release-published, release-pr-url,\n release-pr-number, pr-created, release-mode, and clarify tag/release-url\n semantics\n- Add release-mode to .release.yml per-repo config example\n- Expand \"How It Works\" to cover both direct and PR mode flows",
"is_bot": false,
"headline": "docs: update README for release-mode pr, new outputs, and include-path",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-14T03:18:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b71f451d52d9cd2b567b11b82fec58cbbb192164",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.1.10 (#14)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-14T02:50:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17cd822f2c8b37bf1cf9bfca5e5be23556985e7b",
"body": "- release-mode: echoes the active mode (\"direct\"/\"pr\") so downstream\n jobs can branch without re-reading inputs\n- pr-created: true when a new release PR was opened vs updated;\n useful for one-time notifications (avoids duplicate alerts on\n every push after the first)\n- tag: now populated in pr mode with the proposed tag so consumers\n can reference the upcoming release before merge",
"is_bot": false,
"headline": "feat: add release-mode, pr-created, and tag-in-pr-mode outputs",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-13T19:52:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "343569559642d251a10856e01409db86b106b093",
"body": "release-url now only contains the published GitHub Release URL.\nIn pr mode (before merge) it is empty; consumers should use\nrelease-pr-url or release-pr-number instead.\n\nCloses #13.",
"is_bot": false,
"headline": "feat: split release-url semantics and add structured PR outputs",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-13T19:49:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74a2b4ba1ba707e9f8fb78d6233f26fd83970f35",
"body": "Replace delete+recreate with UpdateRef(force=true) in updateReleaseBranch\nso GitHub never sees a deletion on the release branch head — which would\nauto-close any open PR on that branch.\n\nAlso add release-published, release-pr-url, and release-pr-number outputs\nto give downstream workflows unambiguous signals about what actually\nhappened without fragile URL-shape matching.\n\nCloses #12.",
"is_bot": false,
"headline": "fix(releasepr): force-push branch on update to avoid closing open PR",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-13T19:49:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "daf30a621ec3ee42d277b4fc085a4625f514d6b9",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.1.9 (#11)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-13T19:30:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0f0afbe0d8182f0a350f1237b489511e62ed875",
"body": "In release-mode: pr no tag is created before git-cliff runs, so\n--latest resolves to the previous release's range. Switch to\n--unreleased to capture all commits since the last tag.\nFixes #10.",
"is_bot": false,
"headline": "fix: use --unreleased flag for git-cliff in PR release mode",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-13T19:29:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65c283f49390caa1eb760a6309fbfb939f4c1b30",
"body": "Co-authored-by: tamedia-fission[bot] <238147500+tamedia-fission[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.1.8 (#9)",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-09T04:44:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0df573f8907ba150270cf9c768bd31dc286d4207",
"body": "* chore: pin action.yaml image to versioned GHCR tag\n\n* ci: use go-version-file to match go.mod version\n\n* ci: install golangci-lint from source to match Go version\n\n* fix: resolve errcheck lint errors\n\n* fix: resolve errcheck lint errors in releasepr_test\n\n* fix: override env vars correctly in integration tests\n\n* ci: install git-cliff binary directly instead of via action\n\n* ci: fix git-cliff binary extraction path",
"is_bot": false,
"headline": "feat: pin action.yaml image to versioned GHCR tag (#8)",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-04-09T04:43:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2ab186a900512227bd50f4f44ea84a44e4e797d",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.7",
"is_bot": false,
"headline": "Merge pull request #7 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-04-07T12:42:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab486c578a03c2209616592ffff76cc019db0c61",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.7",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-07T12:32:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf084b887f671f69c7a11209ba3074e2b2e24dc",
"body": "Tries .release.yml first, falls back to .release.yaml.",
"is_bot": false,
"headline": "feat: support .release.yaml in addition to .release.yml",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-07T12:31:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d601ea9fb943cf392ad92c41f10a0c7de899973",
"body": "The action.yaml default of \"v\" was always passed as INPUT_TAG_PREFIX,\nwhich clobbered any tag-prefix set in .release.yml. With an empty\ndefault, .release.yml values are respected as intended.",
"is_bot": false,
"headline": "fix: change action.yaml tag-prefix default to empty string",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-07T12:23:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2d5b9e4b5a155261deeb2c9e6cd103b1910333d",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.6",
"is_bot": false,
"headline": "Merge pull request #6 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-04-07T11:47:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f79d62f0b1b283259476d51a5ce4075ed33b2af",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.6",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-04-07T11:47:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "340d4fa550511a46bb04e7065df5ba17aec3a951",
"body": "Most repos don't want a tag prefix; those that do can set it\nexplicitly via .release.yml or action inputs.",
"is_bot": false,
"headline": "fix: change default TagPrefix from \"v\" to empty string",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-04-07T11:46:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b73a080088fa33c4d3f7c259e7b7f03de639b21d",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.5",
"is_bot": false,
"headline": "Merge pull request #5 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T15:22:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c762399b85ac9af22c0bf3c2a7d2475e31f41e45",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.5",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-03-31T15:19:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd4bed6bdc151b629710f264db97da82271a8207",
"body": "git-cliff --bumped-version with --include-path fails to see unreleased\ncommits after the latest matching tag, returning the current version\ninstead of the bumped one. This caused action-releaser to skip releases\nwith \"no release needed\". The --tag-pattern flag alone correctly scopes\nversion boundary detection; --include-path is only needed for changelog\ngeneration.",
"is_bot": false,
"headline": "fix: remove --include-path from git-cliff --bumped-version",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T15:19:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2b6671b8792a8fc4ca4f7eb2b88f94fc57f4626",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.4",
"is_bot": false,
"headline": "Merge pull request #4 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T14:32:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10ff2a5a0df56b8ed887e3c0af5725c98a78e672",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.4",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-03-31T14:31:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1d3f46d5adf15928461c4e2d6149f175ae2d76b",
"body": "Release branches are now named per-service (e.g. release/go-service)\ninstead of per-version (e.g. release/go-service-v1.14.0). Since the\nbranch is force-updated to baseBranch HEAD + manifest on each run,\nthe PR diff is always just the manifest commit — no accumulated\ncommits from other services polluting the PR.\n\nAlso fixes findPendingPR for monorepos: filters by branch name so\neach service finds its own pending PR, not the first one with the label.",
"is_bot": false,
"headline": "fix: use stable release branch names to prevent noisy PR diffs",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T14:30:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad16f30fef181c40a095a243c1882160d9eafa97",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.3",
"is_bot": false,
"headline": "Merge pull request #3 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T13:55:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f779880af9195750140a10bc989098f8d646d04",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.3",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-03-31T13:45:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e568c4b04c441b7d0faa0ec7a5a9950cfe601ac5",
"body": "Adds an include-path action input that passes --include-path to git-cliff,\nscoping commit scanning to a specific directory. This ensures version\ncalculation and changelog generation only consider commits touching the\nservice being released, preventing incorrect bumps from unrelated commits\nin monorepos using per-invocation pipelines (without the packages config).",
"is_bot": false,
"headline": "feat: add include-path input for monorepo commit scoping",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T13:45:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "878b0e485c9b970063d51be8c13be19856504b1f",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.2",
"is_bot": false,
"headline": "Merge pull request #2 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T12:58:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4acf8ede664c3bd2668f1ce85f8a20fc5b1c90e6",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.2",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-03-31T12:56:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd7da3313fbfcfc9987ae106551cd6ffdc892a2e",
"body": "Tags are now validated after prefix stripping: the remainder must match\nthe expected version format for the strategy (semver, date-rolling, or\nnumeric-rolling). Additionally, git-cliff always receives --tag-pattern\nto scope its version boundary detection to the current service's tags,\npreventing it from using unrelated tags like go-service-v1.13.0 when\nreleasing python-api.",
"is_bot": false,
"headline": "fix: strict tag-prefix matching to prevent monorepo cross-contamination",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T12:56:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18c6f7aa0eedb04142dcedebc57f310ee5ea93bb",
"body": "…ponents--action-releaser\n\nchore(main): release 0.1.1",
"is_bot": false,
"headline": "Merge pull request #1 from DND-IT/release-please--branches--main--com…",
"author_name": "Samuel Wibrow",
"author_login": "swibrow",
"committed_at": "2026-03-31T07:23:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fffd3f58127e123bfb407b496eb514592b538912",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.1",
"author_name": "tamedia-fission[bot]",
"author_login": "tamedia-fission[bot]",
"committed_at": "2026-03-27T08:33:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c189e23892a1b76f9898f8edf38faaa0a130187",
"body": null,
"is_bot": false,
"headline": "fix: use token-embedded remote URL for git push auth",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T08:33:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ccad4d6b4d34b64efe47ad351d42dc7c2af4763c",
"body": null,
"is_bot": false,
"headline": "fix: configure git auth for tag push in Docker containers",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T07:22:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d6ada270cbf9e4e69c3e980e3a62d516cde4125",
"body": null,
"is_bot": false,
"headline": "fix: add safe.directory for Docker container workspace trust",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T07:12:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c651d57629147ae71204bc47ba57274ca72c5c2e",
"body": "…DRY_RUN)\n\nDocker actions receive env vars with hyphens preserved, unlike JS actions\nwhich convert hyphens to underscores. Check both forms for compatibility.",
"is_bot": false,
"headline": "fix: read Docker action inputs with hyphens (INPUT_DRY-RUN not INPUT_…",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T07:08:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4e9eed774e9a725b0ca51d675558f47ad11dfc3",
"body": null,
"is_bot": false,
"headline": "fix: use Dockerfile for action image until first GHCR publish",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T07:05:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bff03a0f14ae88bedd835f748f8e0721aca0c71e",
"body": "New release-mode input: \"direct\" (default, existing behavior) or \"pr\"\n(create/update a release PR, release on merge).\n\nIn PR mode, commits accumulate on main and the action creates a release\nPR with the changelog preview in the body. Merging the PR triggers the\nactual release. Labels (autorelease: pending/tagged) track PR state.",
"is_bot": false,
"headline": "feat: add release PR mode for gated releases",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T06:57:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c34635ff3446b47164aef21889ec156316d9e4be",
"body": null,
"is_bot": false,
"headline": "docs: add README with usage examples and configuration reference",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-27T05:12:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6009e9f7ba6b0442ba5b9ac5b00bacbe63706386",
"body": "Go binary baked into Docker image with git-cliff for changelog generation.\nSupports three versioning strategies (semver, date-rolling, numeric-rolling),\ndry-run mode, per-repo .release.yml config, and monorepo support.\n\nRelease pipeline follows org standard (release-please, GHCR, floating tags).",
"is_bot": false,
"headline": "feat: initial implementation of action-releaser",
"author_name": "swibrow",
"author_login": "swibrow",
"committed_at": "2026-03-26T16:35:18Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 20,
"commits_last_year": 66,
"latest_release_at": "2026-07-16T14:47:41Z",
"latest_release_tag": "v0.4.0",
"releases_from_tags": false,
"days_since_last_push": 11,
"active_weeks_last_year": 7,
"days_since_latest_release": 11,
"mean_days_between_releases": 10.4
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/dnd-it/action-releaser",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/dnd-it/action-releaser",
"is_deprecated": false,
"latest_version": "v0.4.0",
"repository_url": "https://github.com/dnd-it/action-releaser",
"versions_count": 21,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-16T14:47:29Z",
"latest_version_yanked": null,
"days_since_latest_publish": 11
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 15666,
"source_files_sampled": 16,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 888
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/google/go-github/v68",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v68.0.0"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 29,
"open_issues": 1,
"closed_ratio": 0.857,
"closed_issues": 6,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "swibrow",
"commits": 38,
"avatar_url": "https://avatars.githubusercontent.com/u/15628653?v=4"
},
{
"type": "User",
"login": "DCamma",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/8792770?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.826
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"release.yaml",
"test.yaml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "19 out of 19 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 2/18 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "66b64d29ed2237d7ab1005c263d16c0dbb963b08",
"ran_at": "2026-07-27T18:13:15Z",
"aggregate_score": 4.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-16T14:49:15Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-16T14:47:30Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 21,
"created_at": "2026-04-21T09:18:35Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/DND-IT/action-releaser",
"host": "github.com",
"name": "action-releaser",
"owner": "DND-IT"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"security": 42,
"vitality": 76,
"community": 12,
"governance": 60,
"engineering": 90
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 76,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"commits_last_year": 66,
"human_commit_share": 0.697,
"days_since_last_push": 11,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 11 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "66 commits in the last year",
"points": 16.4,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 66
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 20,
"latest_release_tag": "v0.4.0",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 10.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "20 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 20
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~10.4 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 10.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 12,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": true,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 60,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 16,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.826
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 83% of commits",
"points": 3.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 83
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"merged_prs": 29,
"open_issues": 1,
"closed_issues": 6,
"issue_closed_ratio": 0.857,
"closed_unmerged_prs": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "86% of issues closed",
"points": 40.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 86
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "29/30 decided PRs merged",
"points": 37,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 29,
"decided": 30
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/18 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"followers": 13,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "DND-IT",
"public_repos": 33,
"account_age_days": 3696
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "13 followers of DND-IT",
"points": 8.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 13,
"login": "DND-IT"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "33 public repos, account ~10 yr old",
"points": 23.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 33
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/dnd-it/action-releaser"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 11
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 11 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 11
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "21 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 21
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 90,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 16,
"status": "met",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "19 out of 19 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"backstage"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "1 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 1
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 42,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 42,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "19 out of 19 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/18 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 84,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 888
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "46 of 46 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 46,
"sampled": 46
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.061,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 11,
"status": "met",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "4 of the last 66 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 4,
"sampled": 66
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 15666,
"source_files_sampled": 16,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/16 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 16,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T18:13:31.665584Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/DND-IT/action-releaser.svg",
"full_name": "DND-IT/action-releaser",
"license_state": "absent",
"license_spdx": null
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — Go.