TykTechnologies/graphql-go-tools tiene un índice de salud de 44 sobre 100, lo que lo sitúa en la banda Débil. Su puntuación más alta es AI Readiness (68/100) y la más baja, Community & Adoption (28/100). Se actualizó por última vez hace 40 días. Una sola persona concentra la mayor parte del trabajo reciente.
44
global / 100
Débil
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala estandarizada de 1 a 100. El resultado global parte de su media ponderada, calibrada contra la distribución del registro público para que las bandas tengan significado percentil; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe un límite «En riesgo» de 34.
44
Excepcional93-100El nivel más alto del registro (≈ el 5% superior); cumple prácticamente todos los criterios evaluados
Excelente80-92Sólido en todos los frentes; carencias menores
Bueno65-79Saludable; carencias limitadas y manejables
Moderado50-64Aceptable con carencias notables; se recomienda revisión
Débil35-49Debilidades sustanciales en varias áreas
En riesgo20-34Debilidades significativas; su adopción exige cautela
Crítico1-19Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
El resultado global ponderado 46 se calibra a 44 en la escala publicada del índice (calibración del registro 2026-08-02).
Dependencias indirectas libres de avisos conocidos — el conjunto transitivo no es separable de las dependencias de desarrollo y prueba en este alcance
27.5/40
Sin avisos pendientes — 3 paquete(s) con avisos sin atender más allá de 90 días; el más antiguo publicado hace 782 días
Datos de entrada utilizados
source
osv
advisories
89
affected_packages
12
assessed_packages
116
unassessed_packages
0
affected_by_severity
critical 1, high 5, moderate 3, unknown 3
direct_affected_packages
3
Excluidos de la puntuación (sin datos o no aplicable): Dependencias indirectas libres de avisos conocidos. Los pesos restantes se han renormalizado. Se cotejaron 116 dependencias resueltas con OSV. Este repositorio no publica ningún paquete que el índice resuelva, por lo que se evaluó en su lugar el grafo de dependencias del repositorio. Ese grafo mezcla fijaciones de desarrollo y prueba con las dependencias distribuidas, de modo que solo se puntúan las dependencias declaradas en tiempo de ejecución; los hallazgos transitivos se informan como contexto y quedan excluidos de la puntuación. No se analiza la alcanzabilidad.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Tiene un peso deliberadamente pequeño (4%): las herramientas para agentes son una señal real de mantenimiento, pero un repositorio sin ninguna puede alcanzar igualmente 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Community profile unavailable
Más detalle
Historial de estrellas y forks 0 ★ / 5 ⇿
0Estrellas
5Forks
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Cada punto abarca 4 días.
OpenSSF Scorecard 4.1 / 10
4.1agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-08-04 05:55 UTC
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 41 paquetes directos y 75 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
Registro
Paquete
Versión
Relación
Go
github.com/99designs/gqlgen
0.17.20
directa
Go
github.com/99designs/gqlgen
0.17.22
directa
Go
github.com/andybalholm/brotli
1.1.0
directa
Go
github.com/buger/jsonparser
1.1.1
directa
Go
github.com/cespare/xxhash/v2
2.1.2
directa
Go
github.com/coder/websocket
1.8.12
directa
Go
github.com/dave/jennifer
1.4.0
directa
Go
github.com/davecgh/go-spew
1.1.1
directa
Go
github.com/eclipse/paho.mqtt.golang
1.2.0
directa
Go
github.com/evanphx/json-patch/v5
5.1.0
directa
Go
github.com/go-test/deep
1.0.8
directa
Go
github.com/gobwas/ws
1.0.4
directa
Go
github.com/golang/mock
1.6.0
directa
Go
github.com/google/go-cmp
0.5.8
directa
Go
github.com/google/uuid
1.1.1
directa
Go
github.com/gorilla/websocket
1.5.0
directa
Go
github.com/hashicorp/go-multierror
1.1.1
directa
Go
github.com/hashicorp/golang-lru
0.5.4
directa
Go
github.com/iancoleman/strcase
0.2.0
directa
Go
github.com/ibm/sarama
1.42.1
directa
Go
github.com/jensneuse/abstractlogger
0.0.4
directa
Go
github.com/jensneuse/byte-template
0.0.0-20200214152254-4f3cf06e5c68
directa
Go
github.com/jensneuse/diffview
1.0.0
directa
Go
github.com/jensneuse/pipeline
0.0.0-20200117120358-9fb4de085cd6
directa
Go
github.com/mitchellh/go-homedir
1.1.0
directa
Go
github.com/ory/dockertest/v3
3.10.0
directa
Go
github.com/pkg/errors
0.9.1
directa
Go
github.com/r3labs/sse/v2
2.8.1
directa
Go
github.com/santhosh-tekuri/jsonschema/v5
5.3.0
directa
Go
github.com/sebdah/goldie
0.0.0-20180424091453-8784dd1ab561
directa
Go
github.com/sebdah/goldie/v2
2.5.3
directa
Go
github.com/spf13/cobra
0.0.5
directa
Go
github.com/spf13/viper
1.3.2
directa
Go
github.com/stretchr/testify
1.7.1
directa
Go
github.com/stretchr/testify
1.8.4
directa
Go
github.com/tidwall/gjson
1.11.0
directa
Go
github.com/tidwall/sjson
1.0.4
directa
Go
github.com/vektah/gqlparser/v2
2.5.1
directa
Go
go.uber.org/atomic
1.9.0
directa
Go
go.uber.org/zap
1.18.1
directa
Go
gopkg.in/yaml.v2
2.4.0
directa
Go
dario.cat/mergo
1.0.2
indirecta
Go
github.com/agnivade/levenshtein
1.1.1
indirecta
Go
github.com/azure/go-ansiterm
0.0.0-20230124172434-306776ec8161
indirecta
Go
github.com/cenkalti/backoff/v4
4.1.3
indirecta
Go
github.com/containerd/continuity
0.3.0
indirecta
Go
github.com/docker/cli
28.4.0+incompatible
indirecta
Go
github.com/docker/docker
28.4.0+incompatible
indirecta
Go
github.com/docker/go-connections
0.4.0
indirecta
Go
github.com/docker/go-units
0.4.0
indirecta
Go
github.com/eapache/go-resiliency
1.4.0
indirecta
Go
github.com/eapache/go-xerial-snappy
0.0.0-20230731223053-c322873962e3
indirecta
Go
github.com/eapache/queue
1.1.0
indirecta
Go
github.com/fsnotify/fsnotify
1.4.9
indirecta
Go
github.com/go-viper/mapstructure/v2
2.4.0
indirecta
Go
github.com/gobwas/httphead
0.0.0-20180130184737-2c6c146eadee
indirecta
Go
github.com/gobwas/pool
0.2.0
indirecta
Go
github.com/golang/snappy
0.0.4
indirecta
Go
github.com/google/shlex
0.0.0-20191202100458-e7afc7fbc510
indirecta
Go
github.com/hashicorp/errwrap
1.0.0
indirecta
Go
github.com/hashicorp/go-uuid
1.0.3
indirecta
Go
github.com/hashicorp/hcl
1.0.0
indirecta
Go
github.com/huandu/xstrings
1.2.1
indirecta
Go
github.com/imdario/mergo
0.3.12
indirecta
Go
github.com/inconshreveable/mousetrap
1.0.0
indirecta
Go
github.com/jcmturner/aescts/v2
2.0.0
indirecta
Go
github.com/jcmturner/dnsutils/v2
2.0.0
indirecta
Go
github.com/jcmturner/gofork
1.7.6
indirecta
Go
github.com/jcmturner/gokrb5/v8
8.4.4
indirecta
Go
github.com/jcmturner/rpc/v2
2.0.3
indirecta
Go
github.com/klauspost/compress
1.16.7
indirecta
Go
github.com/lib/pq
1.10.6
indirecta
Go
github.com/logrusorgru/aurora/v3
3.0.0
indirecta
Go
github.com/magiconair/properties
1.8.0
indirecta
Go
github.com/masterminds/goutils
1.1.1
indirecta
Go
github.com/masterminds/semver
1.5.0
indirecta
Go
github.com/masterminds/sprig
2.22.0+incompatible
indirecta
Go
github.com/mattn/go-colorable
0.1.13
indirecta
Go
github.com/mattn/go-isatty
0.0.16
indirecta
Go
github.com/microsoft/go-winio
0.6.0
indirecta
Go
github.com/mitchellh/copystructure
1.0.0
indirecta
Go
github.com/mitchellh/mapstructure
1.3.1
indirecta
Go
github.com/mitchellh/mapstructure
1.5.0
indirecta
Go
github.com/mitchellh/reflectwalk
1.0.0
indirecta
Go
github.com/moby/docker-image-spec
1.3.1
indirecta
Go
github.com/moby/term
0.0.0-20201216013528-df9cb8a40635
indirecta
Go
github.com/nvveen/gotty
0.0.0-20120604004816-cd527374f1e5
indirecta
Go
github.com/opencontainers/go-digest
1.0.0
indirecta
Go
github.com/opencontainers/image-spec
1.0.2
indirecta
Go
github.com/opencontainers/runc
1.1.5
indirecta
Go
github.com/pelletier/go-toml
1.6.0
indirecta
Go
github.com/pierrec/lz4/v4
4.1.18
indirecta
Go
github.com/pmezard/go-difflib
1.0.0
indirecta
Go
github.com/rcrowley/go-metrics
0.0.0-20201227073835-cf1acfcdf475
indirecta
Go
github.com/rogpeppe/go-internal
1.11.0
indirecta
Go
github.com/rs/cors
1.7.0
indirecta
Go
github.com/sergi/go-diff
1.1.0
indirecta
Go
github.com/sirupsen/logrus
1.8.1
indirecta
Go
github.com/spf13/afero
1.1.2
indirecta
Go
github.com/spf13/cast
1.3.0
indirecta
Go
github.com/spf13/jwalterweatherman
1.0.0
indirecta
Go
github.com/spf13/pflag
1.0.3
indirecta
Go
github.com/tidwall/match
1.1.1
indirecta
Go
github.com/tidwall/pretty
1.2.0
indirecta
Go
github.com/xeipuuv/gojsonpointer
0.0.0-20190809123943-df4f5c81cb3b
indirecta
Go
github.com/xeipuuv/gojsonreference
0.0.0-20180127040603-bd5ef7bd5415
indirecta
Go
github.com/xeipuuv/gojsonschema
1.2.0
indirecta
Go
go.uber.org/multierr
1.6.0
indirecta
Go
golang.org/x/crypto
0.18.0
indirecta
Go
golang.org/x/mod
0.9.0
indirecta
Go
golang.org/x/net
0.17.0
indirecta
Go
golang.org/x/sys
0.16.0
indirecta
Go
golang.org/x/text
0.14.0
indirecta
Go
golang.org/x/tools
0.7.0
indirecta
Go
gopkg.in/cenkalti/backoff.v1
1.1.0
indirecta
Go
gopkg.in/yaml.v3
3.0.1
indirecta
Avisos de dependencias 12
Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 116 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 12 tienen avisos conocidos, de los cuales 3 son directas.
Paquete
Versión
Relación
Gravedad
Avisos
Corregido en
golang.org/x/crypto
0.18.0
indirecta
crítica
36
0.52.0
github.com/buger/jsonparser
1.1.1
directa
alta
2
1.1.2
github.com/docker/cli
28.4.0+incompatible
indirecta
alta
2
29.2.0+incompatible
github.com/docker/docker
28.4.0+incompatible
indirecta
alta
10
29.3.1
github.com/opencontainers/runc
1.1.5
indirecta
alta
12
1.13.0
github.com/sirupsen/logrus
1.8.1
indirecta
alta
2
1.9.3
github.com/eclipse/paho.mqtt.golang
1.2.0
directa
moderada
2
1.5.1
github.com/vektah/gqlparser/v2
2.5.1
directa
moderada
2
2.5.14
golang.org/x/net
0.17.0
indirecta
moderada
18
1.26.3
github.com/klauspost/compress
1.16.7
indirecta
desconocida
1
1.18.7
golang.org/x/sys
0.16.0
indirecta
desconocida
1
0.44.0
golang.org/x/text
0.14.0
indirecta
desconocida
1
0.39.0
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 23016,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 8310927,
"HTML": 3358,
"Shell": 3050,
"Makefile": 1780,
"JavaScript": 480714
},
"pushed_at": "2026-06-24T14:13:11Z",
"created_at": "2019-04-16T10:52:56Z",
"owner_type": "Organization",
"updated_at": "2026-07-29T15:06:27Z",
"description": "graphql golang go parser lexer linter proxy",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://tyk.io",
"name": "Tyk Technologies",
"type": "Organization",
"login": "TykTechnologies",
"company": null,
"location": "London",
"followers": 229,
"avatar_url": "https://avatars.githubusercontent.com/u/16121529?v=4",
"created_at": "2015-12-02T16:44:37Z",
"is_verified": null,
"public_repos": 250,
"account_age_days": 3897
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2019-04-08T06:53:10Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2019-04-07T16:03:33Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2019-04-01T19:04:02Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2019-03-24T17:37:44Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2019-03-18T07:58:41Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2019-03-06T07:41:48Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2019-03-06T07:41:48Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2019-03-06T07:37:20Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2019-03-06T06:43:17Z"
},
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2019-03-02T13:29:09Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2019-03-02T12:09:55Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2019-03-02T13:29:09Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2019-02-20T08:29:27Z"
}
],
"recent_commits": [
{
"oid": "dae0d8d8d0389e10f42476f31d0840835ed125e7",
"body": "… (#447)\n\n## Description\n\nFixes a regression introduced by #446 ([TT-17442] *Upstream WebSocket\nconnection reuse ignores per-request auth headers*).\n\nThat change wrapped the subscription executor's execution context in a\n`mergedContext` whose `Value()` resolved from the original\nwebsocket-upgrade re\n[…]\nyet; paired with the Tyk gateway go.mod bump PR.\n\n[TT-17442]:\nhttps://tyktech.atlassian.net/browse/TT-17442?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-17578] Stop leaking websocket request context into engine fetches…",
"author_name": "Matias",
"author_login": "mativm02",
"committed_at": "2026-06-24T14:13:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c7048b604e166b59b6da4f05a163d2f95e0e9949",
"body": "…th headers (#446)",
"is_bot": false,
"headline": "[TT-17442] Upstream WebSocket connection reuse ignores per-request au…",
"author_name": "Maciej Miś",
"author_login": "MaciekMis",
"committed_at": "2026-06-10T09:34:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abfe5c458f3b73a324ce1ba3c4b4c8bb489ae5d1",
"body": "This PR fixes validation and resolution issues with custom scalars in\nGraphQL operations. Previously, custom scalars were incorrectly treated\nas built-in String scalars during validation, requiring\nstring values and throwing validation errors for other types. The\nchanges allow custom scalars to acce\n[…]\nm scalar arguments can be provided\nas both integers and strings, ensuring flexibility in how\n custom scalars are used across the codebase.\n\n---------\n\nCo-authored-by: Amit Inbar <inamit323@gmail.com>",
"is_bot": false,
"headline": "Fix/allow custom scalars extended (#443)",
"author_name": "andrei-tyk",
"author_login": "andrei-tyk",
"committed_at": "2025-11-04T07:47:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7bece90c2529f4dec1f222617669756e2caadfe2",
"body": "<!---TykTechnologies/jira-linter starts here-->\n\n### Ticket Details\n\n<details>\n<summary>\n<a href=\"https://tyktech.atlassian.net/browse/TT-15867\" title=\"TT-15867\"\ntarget=\"_blank\">TT-15867</a>\n</summary>\n\n| | |\n|---------|----|\n| Status | In Code Review |\n| Summary | Rollout the tool across repositories |\n\nGenerated at: 2025-10-20 11:40:09\n\n</details>\n\n<!---TykTechnologies/jira-linter ends here-->",
"is_bot": false,
"headline": "[TT-15867] rollout new Jira linter (#442)",
"author_name": "bsten-tyk",
"author_login": "bsten-tyk",
"committed_at": "2025-10-21T11:31:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c54e73aae17d143de6659472a1fcbf371b4a0770",
"body": null,
"is_bot": false,
"headline": "[TT-15718] [5.10.0] Review and address GW & Dash CVEs (#441)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2025-09-26T10:20:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ede4890a639ce2efdc761400529119299590f44",
"body": null,
"is_bot": false,
"headline": "[TT-15111] Added visor code review (#440)",
"author_name": "Laurentiu",
"author_login": "lghiur",
"committed_at": "2025-09-23T09:43:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c376584786dbe3eca70cdcedc15ecad0e7a4058d",
"body": null,
"is_bot": false,
"headline": "fix examples and pipeline (#438)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2025-06-16T09:00:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8e1ade2da8ecd5b85065c3e8c9364057d6b173c",
"body": "[TT-13740](https://tyktech.atlassian.net/browse/TT-13740)\n\n[TT-13740]:\nhttps://tyktech.atlassian.net/browse/TT-13740?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-13740]: exposed field to enable post graphql-sse in proxy (#437)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2025-06-06T09:13:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f5c911898967034f85a341f98113f2ea53b4866",
"body": "…es (#436)\n\n[TT-14582](https://tyktech.atlassian.net/browse/TT-14582)\n\n[TT-14582]:\nhttps://tyktech.atlassian.net/browse/TT-14582?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-14582]: Fix issue with arguments not being extracted for interfac…",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2025-05-27T12:13:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "331bc08d14809399615c40eab9477ba9046e696c",
"body": "[TT-13924](https://tyktech.atlassian.net/browse/TT-13924)\n\n[TT-13924]:\nhttps://tyktech.atlassian.net/browse/TT-13924?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-13924]: fix issue where kafka datasource expects data (#435)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2025-05-15T12:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7724a3b64bb27a4b59f92cab92698ee9bc2340c9",
"body": "PR for https://tyktech.atlassian.net/browse/TT-13608 \r\n\r\nAn analysis can be found here:\r\nhttps://tyktech.atlassian.net/browse/TT-13608?focusedCommentId=90515\r\n\r\nBasically, input coercion for list visitor has been failing to infer the\r\ntype of a node in the GQL operation and leaves the variable as-is\n[…]\ne type in the `variables` JSON was an `object`.\r\n\r\nInferring variable definition by its name not the value fixes the\r\nproblem.\r\n\r\nI didn't copied the fix to `v2` folder because it already has the fix.",
"is_bot": false,
"headline": "[TT-13608] Issues with custom scalar in query variable (#434)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-12-12T11:02:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6eca9f4b5e302f1c7181dbab6ab1e8b05920b2bc",
"body": "nhooyr.io/websocket has changed to github.com/coder/websocket and this\r\ncan cause dependency issues.",
"is_bot": false,
"headline": "change nhooyr.io/websocket to github.com/coder/websocket (#433)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2024-09-26T10:30:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae6008677a48dec3444d7bc7097bda05542f0d80",
"body": "See https://tyktech.atlassian.net/browse/TT-12503 and\r\nhttps://tyktech.atlassian.net/browse/TT-12313 for detailed description\r\nof the problem.\r\n\r\nNow, we render the following variables as a String.\r\n* String\r\n* NotExist\r\n* Unknown\r\n\r\ngraphql-go-tools assigns `NotExists` type to `ID` type. ID type should\r\nbe rendered as String.\r\n\r\nRelated part of the spec: https://spec.graphql.org/October2021/#sec-ID",
"is_bot": false,
"headline": "[TT-12503] Render ID type as a String (#432)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-07-05T06:59:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "107208df747e5a4b31bfe9a2d2848ef277ed5a5b",
"body": "PR for [TT-9864](https://tyktech.atlassian.net/browse/TT-9864).\r\n\r\nAfter reading a lot of code, trying different solutions and measuring\r\nthem, I decided to go with the simplest solution.\r\n\r\nI used `sync.Pool` for reusing `ast.Document` instances and added a\r\n`Cleanup` method to `Request` struct to \n[…]\ntion code leads to bugs and breaks the tests.\r\n\r\n\r\n[TT-9864]:\r\nhttps://tyktech.atlassian.net/browse/TT-9864?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-9864] Optimize the creation usage of AST documents (#431)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-06-14T11:12:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "59aa3f44f12eb0a621152fdaf2c0847174b3e2b5",
"body": "…to one big string by engine (#430)\n\nThis PR fixes [TT-12313](https://tyktech.atlassian.net/browse/TT-12313)\r\nand [TT-12222](https://tyktech.atlassian.net/browse/TT-12222).\r\n\r\n**TT-12313:**\r\n\r\nVariables in an input template were evaluating as strings by default. It\r\nmay produce invalid JSON as rende\n[…]\n5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ\r\n[TT-12222]:\r\nhttps://tyktech.atlassian.net/browse/TT-12222?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-12313] UDG APIs - Array of strings in variables gets transformed …",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-06-07T10:48:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f9fa4a18e042f8f7da244bca7ed2ae6ac2ec4f19",
"body": "This PR fixes an issue when a nested data source is lonely.\r\n\r\nIt is built on top of @buraksezer 's research.\r\n\r\nHow does it work?\r\n\r\nThe GraphQL data source planner has been slightly modified and will\r\nbefore printing the upstream query check for fields that require\r\nselections.\r\n\r\nExample:\r\n```\r\n{\n[…]\nhe\r\nselections and will therefore add the `__typename` selection field. This\r\nwill result in following upstream query:\r\n```\r\n{ countries { __typename } }\r\n```\r\n\r\nWith that the upstream is valid again.",
"is_bot": false,
"headline": "should resolve with a nested lonely data source (TT-9884) (#429)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2024-05-14T11:01:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e95cdc317e1d2dc7cdcd9b93d960c5ceecb5b0f8",
"body": "This PR adds the rest datasource to the v2/ of the engine, it also\r\nincludes some changes to ensure it works with the new v2 engine, these\r\nchanges will need to be reflected in the apidef being passed to the\r\nengine\r\n\r\n[TT-10292](https://tyktech.atlassian.net/browse/TT-10291)\r\n\r\n[TT-10292]:\r\nhttps://tyktech.atlassian.net/browse/TT-10292?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-10292]: Add rest datasource (#427)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2024-05-09T08:56:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27642576e0c2ba026ea787ddc043da00d8d847b8",
"body": "See the ticket: https://tyktech.atlassian.net/browse/TT-11684",
"is_bot": false,
"headline": "[TT-11684] Remove OpenAPI and AsyncAPI from the library (#426)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-03-25T09:51:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b464dd4dc1cea3c715c15d574f6ab039c9ca898e",
"body": "- https://github.com/wundergraph/graphql-go-tools/pull/667\r\n - https://github.com/wundergraph/graphql-go-tools/pull/671\r\n - https://github.com/wundergraph/graphql-go-tools/pull/675\r\n - https://github.com/wundergraph/graphql-go-tools/pull/672\r\n - https://github.com/wundergraph/graphql-go-tools/pull/6\n[…]\ny <818351+devsergiy@users.noreply.github.com>\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>\r\nCo-authored-by: Nithin Kumar B <nithinkumar5353@gmail.com>\r\nCo-authored-by: spetrunin <neyasut@gmail.com>",
"is_bot": false,
"headline": "sync changes from wg (#422)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2024-03-15T09:53:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c97832a5054b8be3b438b2b9eeeffd6ae53fc8ce",
"body": "… section (#425)\n\nThis PR fixes TT-11295. The problem was not related to the Persist GQL\r\nfeature. The library fails to validate a specifically crafted query in\r\nwhich variables are not defined in the operation.\r\n\r\nAn example query: \r\n\r\n```graphql\r\nquery Analytics ($startMonth: String, $startYear: S\n[…]\n\"Variable \\\"$startDay\\\" is not defined by operation \\\"Analytics\\\"\",\r\n \"locations\": [\r\n {\r\n \"line\": 6,\r\n \"column\": 15\r\n }\r\n ],\r\n \"path\": [\r\n \"query\",\r\n \"analytics\"\r\n ]\r\n}\r\n```",
"is_bot": false,
"headline": "[TT-11295] Gateway Panics when arguments are not defined in operation…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-03-07T09:42:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "47bc0f5043b5070a9655247953ac2aea8927c540",
"body": "See https://github.com/TykTechnologies/graphql-go-tools/pull/423 for\r\ndetails.",
"is_bot": false,
"headline": "[TT-11249] Copy changes to v2 folder (#424)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-02-16T09:33:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e686bd5a564d9061f9d2e7dec744fee14749e226",
"body": "This PR fixes bad handling of responses if an HTTP status code range and\r\nexplicit code definition are used at the same time. The OpenAPI\r\nspecification is clear about this:\r\n\r\n> To define a range of response codes, you may use the following range\r\ndefinitions: 1XX, 2XX, 3XX, 4XX, and 5XX. If a resp\n[…]\n. This behavior is borrowed from IBM/openapi-to-graphql tool.\r\n\r\nThis PR also removes redundant and useless code in response handling. \r\n\r\nThe changes will be copied to the `v2` folder after approval.",
"is_bot": false,
"headline": "[TT-11249] OAS-to-GQL translator adds the same field many times (#423)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-02-16T08:42:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1cf3310b87c4708b62f53428cf6ed8f3e22dd856",
"body": "PR for https://tyktech.atlassian.net/browse/TT-11069\r\n\r\nThis update extends the handling of status codes in OpenAPI testing by\r\nincluding support for status code ranges. The implementation converts\r\nranges to status codes in integer type and can also convert a status\r\ncode to a range.\r\n\r\nThe changes will be copied to the `v2` folder after approval.",
"is_bot": false,
"headline": "[TT-11069] Add support for status code ranges in OpenAPI (#421)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-02-09T08:57:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40a1ee2bbfc3375d0ce5817daed408ff2ba225c1",
"body": "This PR adds brotli encoding/decoding support",
"is_bot": false,
"headline": "add brotli support (#418)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2024-01-31T15:15:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22ed2790bcf86ef326dcbf85b457b5a40414e92f",
"body": null,
"is_bot": false,
"headline": "upgrade to go 1.21 (TT-11072) (#417)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2024-01-30T09:06:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "303ac77492c518c3e611149d7a6485cb4e583834",
"body": "Tyk GW uses `github.com/iancoleman/strcase v0.3.0` but graphql-go-tools\r\nuses version `v0.2.0`. The OpenAPI translator uses the `strcase.ToCamel`\r\nmethod to process type names. This method in the newer version converts\r\n`JSON` to `Json`, while the older version doesn't do that. It simply\r\nreturns th\n[…]\neman/strcase` to `v0.3.0` from `v0.2.0` for\r\ncompatibility. I do not prefer to do that in this PR because different\r\ncomponents of the library depend on it. It should be handled in a\r\ndifferent story.",
"is_bot": false,
"headline": "[TT-11071] OAS converter fails when return type is JSON (#416)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-01-25T12:26:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "385ba43daaa4f16200cb3746318ce8dd234a560b",
"body": "OAS converter now handles `allOf`, `anyOf`, and `oneOf` keywords.\r\nDocumentation can be found here:\r\nhttps://swagger.io/docs/specification/data-models/oneof-anyof-allof-not/\r\n\r\n- Related test fixtures start with `allOf`, `anyOf`, and `oneOf`\r\nprefixes.\r\n- IBM/openapi-to-graphql tool has been used to\n[…]\n\r\n- A bug in field name generation has also been fixed. We can now convert\r\nthis to a field name: `/pets/{id}/foobar` -> `petsFoobar(id: Int!):\r\nPetsFoobar`. See `anyOf-query-response-type.yaml` file.",
"is_bot": false,
"headline": "[TT-10908] OAS Converter to handle allOf/anyOf/oneOf keywords (#415)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-01-19T12:14:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "64014317f1158d86c8a0103adf08d84eb01d49f8",
"body": "refactoring work and adding testing from this PR \r\n\r\nhttps://github.com/TykTechnologies/graphql-go-tools/pull/413",
"is_bot": false,
"headline": "Add testing is validated (#414)",
"author_name": "Shakira Salazar",
"author_login": "rhianeKobar",
"committed_at": "2024-01-15T15:45:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a93c64d8b8be8ae7b945b8bfef3e434625762e2",
"body": "In this PR we're modifying IsValidate to check validation using the\r\nvalidForSchema attribute",
"is_bot": false,
"headline": "Modify IsValidated (#413)",
"author_name": "Shakira Salazar",
"author_login": "rhianeKobar",
"committed_at": "2024-01-12T13:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57c14ff89cf16e1ca6705ad231ead842e3030c57",
"body": "This PR\r\n\r\n modifies the Request.go file to:\r\n add isValidated boolean attribute to the request struct\r\n add the IsValidated method to return the value of isValidated\r\n \r\nmodifies the validation.go file to: \r\nset isValidated to true\r\n\r\n\r\n\r\nThis is being done to simplify removing normalization and validation\r\nfrom the graphql engine in the gateway.",
"is_bot": false,
"headline": "add is validated attribute and method to request (#412)",
"author_name": "Shakira Salazar",
"author_login": "rhianeKobar",
"committed_at": "2024-01-10T09:12:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92655e8c2e963252c0e5a742925d0bc0d536e763",
"body": "…roperty (#411)\n\nFixes a bug if an enum field is defined as a component's property. See\r\nhttps://tyktech.atlassian.net/browse/TT-10697?focusedCommentId=48290 for\r\nthe details.",
"is_bot": false,
"headline": "[TT-10697] Handle enum definition if the enum field is defined as a p…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-01-08T12:25:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b817d9b16581d41570bb6de26b514b4f424ccd79",
"body": "…xtures (#410)\n\nThis PR adds a placeholder Query type if there is no query definition in\r\nthe source OpenAPI document. The behavior, including the\r\n`QueryPlaceholder` type name, is borrowed from IBM's openapi-to-graphql\r\ntool.",
"is_bot": false,
"headline": "[TT-10697] Add placeholder Schema and Query to OpenAPI and graphql fi…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-01-05T10:22:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "164871c3da3f7b943b61497bab3f0aca9a6dd3f8",
"body": "See [TT-10697](https://tyktech.atlassian.net/browse/TT-10697) for\r\ndetails.\r\n\r\n[TT-10697]:\r\nhttps://tyktech.atlassian.net/browse/TT-10697?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-10697]OAS converter does not handle enums (#408)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-01-03T08:36:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c84f8a68ea178e657ae9a34e173486a3990de6d4",
"body": "This PR splits openapi.go into multiple files.",
"is_bot": false,
"headline": "[TT-10781] Improve code organization in OAS converter (#407)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-12-21T11:34:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f39055b110a14b21ee9cec7e70696bf73062d12",
"body": "PR for [TT-10696](https://tyktech.atlassian.net/browse/TT-10696). \r\n\r\n[TT-10696]:\r\nhttps://tyktech.atlassian.net/browse/TT-10696?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-10696] Handling of objects that do not have any properties (#406)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-12-14T09:09:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7f6f9d1489a6265c27fbd36811e921c856cb7c9",
"body": "…v2 (#405)\n\nThis PR copies the latest OAS converter changes to the `v2` folder. See\r\nhttps://github.com/TykTechnologies/graphql-go-tools/pull/404",
"is_bot": false,
"headline": "[TT-10604] Handling arrays of objects in endpoint responses - engine …",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-30T11:58:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "caa78717a51e0de0c9b2ef29fec61db2702bfa7b",
"body": null,
"is_bot": false,
"headline": "[TT-10604] Handling arrays of objects in endpoint responses (#404)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-30T10:37:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70500778ba665f0b513ab362053b736cc8569d01",
"body": "PR for [TT-10565](https://tyktech.atlassian.net/browse/TT-10565)\r\n\r\n[TT-10565]:\r\nhttps://tyktech.atlassian.net/browse/TT-10565?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-10565] Handle unnamed object definitions in OpenAPI documents (#403)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-21T12:38:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90b772abd0d95c68849c07cd7f45cf3a7ede6b9c",
"body": "…… (#402)\n\nThis pull request copies changes in #401 to v2",
"is_bot": false,
"headline": "[TT-10483] V2 - Handle arrays of objects in OpenAPI documents - compo…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-20T11:35:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d80db1df8c80a6f3945311a2feecab880c8efe37",
"body": "PR for [TT-10483](https://tyktech.atlassian.net/browse/TT-10483)\r\n\r\nOpenAPI-to-GraphQL converter can now create a GraphQL type from an\r\nunnamed object and create an array of that type.\r\n\r\n```yaml\r\ncomponents:\r\n schemas:\r\n Cart:\r\n type: object\r\n properties:\r\n id:\r\n type:\n[…]\n//github.com/IBM/openapi-to-graphql)\r\ntool.\r\n\r\n\r\n[TT-10483]:\r\nhttps://tyktech.atlassian.net/browse/TT-10483?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-10483] Handle arrays of objects in OpenAPI documents (#401)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-20T11:05:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fb1b9df08ae173a302f6585defca1096435ac293",
"body": "Co-authored-by: Sergiy <818351+devsergiy@users.noreply.github.com>\r\nCo-authored-by: Masanori Uehara <jack16.m.u@gmail.com>\r\nCo-authored-by: spetrunin <neyasut@gmail.com>\r\nCo-authored-by: Alberto García Hierro <alberto@garciahierro.com>\r\nCo-authored-by: Aenimus <47415099+Aenimus@users.noreply.github.\n[…]\n<darren.nr.west@gmail.com>\r\nCo-authored-by: Adrian Ancona Novelo <soonick5@yahoo.com.mx>\r\nCo-authored-by: Dustin Deus <deusdustin@gmail.com>\r\nCo-authored-by: Nithin Kumar B <nithinkumar5353@gmail.com>",
"is_bot": false,
"headline": "sync v2 engine (#390)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-11-15T09:30:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed6088c3a98b8c8a54550ffde99cb6d15b1ad6c6",
"body": null,
"is_bot": false,
"headline": "[TT-10375] Cleanup (#400)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-10T13:24:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd43acc477c43a04f7c03d284822076a165b754b",
"body": "… (#399)\n\nPR for [TT-10375](https://tyktech.atlassian.net/browse/TT-10375)\r\n\r\n* Upgrade IBM/Sarama to v.1.42.1. This upgrade eliminates one data race.\r\n* Upgrade Kafka to 3.6 and Java to 17, ZooKeeper has been removed from\r\nthe setup. This may eliminate inconsistent behavior of JVM/Kafka on the\r\nDoc\n[…]\nngine.\r\n* Upgrade github.com/ory/dockertest\r\n\r\n\r\n[TT-10375]:\r\nhttps://tyktech.atlassian.net/browse/TT-10375?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-10375] Upgrade Kafka and remove ZooKeeper from integration tests.…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-09T12:09:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b73f6691650b54c4637a3aea55aaf6e260b9eaa2",
"body": "This PR fixes an issue where races were occurring in the subscription\r\nbackoff tests.\r\nAlso an issues was fixed where context canceling was not propagated to\r\nthe backoff loop.",
"is_bot": false,
"headline": "fix race issues in subscription backoff (#397)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-11-08T09:18:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27618ae672d3a5604b137802f42be4a08eb17eac",
"body": "[TT-9467](https://tyktech.atlassian.net/browse/TT-9476)\r\n\r\n[TT-9467]:\r\nhttps://tyktech.atlassian.net/browse/TT-9467?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-9467]: added limit for operation in graphql extractor (#396)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-11-06T10:07:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "232e030e051b34606f3776f4e45e10ce00961c6b",
"body": "This PR fixes an issue where it could happen that the OAS converter\r\npicks up a full type without all the details before reaching the full\r\ndefinition. This caused the converter to not pick up descriptions.\r\n\r\nTo fix this I introduced an details cache that only tracks if a detail\r\nis already stored or not.",
"is_bot": false,
"headline": "fix full type details not being able to be updated (#395)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-11-02T13:20:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70819d7e4c9b1b15aebef5bb6d4257a44ba07c05",
"body": "Co-authored-by: Tit Petric <tit@tyk.io>",
"is_bot": false,
"headline": "Replace x/errors with stdlib errors (#393)",
"author_name": "Tit Petric",
"author_login": "titpetric",
"committed_at": "2023-10-17T08:29:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af7119801f712078cf2864ee31b4aab35a6b917f",
"body": "[TT-9882](https://tyktech.atlassian.net/browse/TT-9882)\r\n\r\n[TT-9882]:\r\nhttps://tyktech.atlassian.net/browse/TT-9882?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-9882]: fix typo with subscription error (#392)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-10-12T10:02:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b89bc52fbdca7aae60c82eb8cb9ceaf0c2d2fd91",
"body": "…391)\n\nThis PR closes the connection in the graphql-ws protocol implementation\r\nif the backoff threshold for the subscription execution has been hit",
"is_bot": false,
"headline": "[TT-9882]: close graphql-ws protocol coonnections on error timeout (#…",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-10-12T09:23:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25935825a26a79442bec0d897482a47766ea22cf",
"body": "…… (#389)\n\n…ma (#577)\r\n\r\nSupport it, but require the caller to declare it themselves if they want\r\nto use it.\r\n\r\nReferences https://github.com/wundergraph/wundergraph/issues/985\r\n\r\nAlso, remove a couple of deprecated usages of ioutil\r\n\r\nCo-authored-by: Alberto García Hierro <alberto@garciahierro.com>",
"is_bot": false,
"headline": "fix: don't define the @removeNullVariables directive in the base sche…",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-10-06T12:19:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d449375ae418e6c8dd539c488dbc08886364830",
"body": "This PR updates goutils to 1.1.1 to remove some CVEs",
"is_bot": false,
"headline": "update deps (#388)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-10-05T09:07:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92a3f1d63aeed7e76c80150fbc94084beaf10ebb",
"body": "…case of a dead connection (#387)\n\n[TT-9882](https://tyktech.atlassian.net/browse/TT-9882)\r\n\r\n[TT-9882]:\r\nhttps://tyktech.atlassian.net/browse/TT-9882?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-9882]: added an exponential backoff to the subscription retry in …",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-10-02T08:30:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dacf487168564ffdaffd1766057c135a1991b20",
"body": "This PR upgrades the library to go 1.19 \r\n[TT-8739](https://tyktech.atlassian.net/browse/TT-8739)\r\n\r\n[TT-8739]:\r\nhttps://tyktech.atlassian.net/browse/TT-8739?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-8739]: Chore: upgrade to go 1.19 (#385)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-09-04T13:12:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "212f2d526061c45cfa888a26a67f3fd7d13b8e62",
"body": "[TT-9913](https://tyktech.atlassian.net/browse/TT-9913)\r\n\r\n[TT-9913]:\r\nhttps://tyktech.atlassian.net/browse/TT-9913?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-9913]: Chore: upgrade sarama (#386)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-08-31T14:50:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e529190ac7f339b26432a653c410b58294f1b2e1",
"body": "This PRs removes some race conditions and optimizes subscription tests",
"is_bot": false,
"headline": "optimize subscription tests (#384)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-24T11:38:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8693715386a6b86c016dfbe1755ff03fd71560e0",
"body": "This PR syncs following wg changes:\r\n- https://github.com/wundergraph/graphql-go-tools/pull/547\r\n- https://github.com/wundergraph/graphql-go-tools/pull/554\r\n- https://github.com/wundergraph/graphql-go-tools/pull/555\r\n- https://github.com/wundergraph/graphql-go-tools/pull/556\r\n- https://github.com/wu\n[…]\neuse@gmx.de>\r\nCo-authored-by: Alberto García Hierro <alberto@garciahierro.com>\r\nCo-authored-by: Aenimus <47415099+Aenimus@users.noreply.github.com>\r\nCo-authored-by: David Stutt <david@wundergraph.com>",
"is_bot": false,
"headline": "sync wg changes (#383)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-22T12:03:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e336e7b71d6071efa9217f087fcba998ac48bfcd",
"body": "This PR adds a header modifier post processor.",
"is_bot": false,
"headline": "add header modifier post processor (#379)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-17T12:43:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72a7dd46b805e83282f0d68a286e16560406a690",
"body": "…#378)\n\nThis PR makes changes to the VariableValidation package and supports\r\nnested errors as well as validationErrors that make use of $defs and\r\n$refs. It also refactors the format of error messages.\r\n\r\n[TT-8710](https://tyktech.atlassian.net/browse/TT-8710)\r\n\r\n[TT-8710]:\r\nhttps://tyktech.atlassian.net/browse/TT-8710?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-8710]: refactor: better error messages from variable validation (…",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-08-16T14:42:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14e9bde9e643a0a2a35a923e6a2357c902294f83",
"body": "This PR fixes an issue where not all subscriber ids where checked for\r\nduplication.",
"is_bot": false,
"headline": "always check for duplicate subscriber ids (#377)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-10T13:09:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ccf45cc4d11808d92e57ca91fa1bd3d05456ed89",
"body": "This PR allows `pong` as birectional message.",
"is_bot": false,
"headline": "allow pong as bidirectional message (#376)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-10T12:56:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "690b3ba0cef11e470f584055a754859b006e1a82",
"body": "this PR fixes a panic on broken subscription input",
"is_bot": false,
"headline": "fix panic on broken subscription input (#375)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-10T11:33:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "801d4374ae260387af51ab07e250fbe4c5ad627e",
"body": "This PR adds a missing error handling for OnbeforeStart hooks.",
"is_bot": false,
"headline": "add OnBeforeStartHook error handling (#374)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-09T13:12:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "464c6a726a7bf8db864340dbd0983f0b3e6446d2",
"body": "This PR adds the `graphql-transport-ws` websocket protocol.",
"is_bot": false,
"headline": "implement graphql-transport-ws protocol (TT-8005) (#373)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-09T10:32:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e64e52f35eac61419e8f705939c7617897920c56",
"body": "This PR refactors the subscription package. This means:\r\n- current implementation has been `deprecated`. But they are still\r\nusable.\r\n - moved current subscription handler to `legacy_handler.go`\r\n - introduced some interfaces to decouple transport from protocol\r\n- this also means that e.g. a websock\n[…]\nafka transport.\r\n- added a `websocket` package inside the subscription package that takes\r\ncare of the websocket implementation\r\n- also moved the `graphql-ws` implementation to the `websocket` package",
"is_bot": false,
"headline": "refactor subscription package (#367)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-09T07:44:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f787e7ab594eb2453ead26053489f23a0d2fc2b3",
"body": "…s fork (#368)\n\nSee [TT-9257](https://tyktech.atlassian.net/browse/TT-9257)\r\n\r\n\r\n\r\n[TT-9257]:\r\nhttps://tyktech.atlassian.net/browse/TT-9257?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ\r\n\r\n---------\r\n\r\nCo-authored-by: Alberto García Hierro <alberto@garciahierro.com>",
"is_bot": false,
"headline": "[TT-9257] Sync WG commits with context changes to our graphql-go-tool…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-08-07T14:26:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfd88c57714afcd5faa37a69e486dfa2d11e9e15",
"body": "- sync wg commit:\r\nhttps://github.com/wundergraph/graphql-go-tools/pull/406\r\n\r\n---------\r\n\r\nCo-authored-by: chedom <domanchukits@gmail.com>\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>\r\nCo-authored-by: Sergey Petrunin <spetrunin@users.noreply.github.com>",
"is_bot": false,
"headline": "add ws init func (TT-9257) (#366)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-07-03T08:38:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7adc3c0fdfaca9b879a98301322018ed7f86efcd",
"body": "This PR updates direct and indirect dependencies\r\n\r\n - updated `github.com/opencontainers/runc` to `1.1.5`\r\n- replaced `nhooyr.io/websocket` with a fork that doesn't include\r\n`github.com/gin-gonic/gin`\r\n - removed `nats-server` entirely",
"is_bot": false,
"headline": "update direct and indirect deps (#362)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-06-29T08:34:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6b3e7666852da298c5f171916102a2927eca5a9",
"body": "This PR adds the following changes from wundergraph:\r\n- https://github.com/wundergraph/graphql-go-tools/pull/534\r\n- https://github.com/wundergraph/graphql-go-tools/pull/538\r\n- https://github.com/wundergraph/graphql-go-tools/pull/540\r\n- https://github.com/wundergraph/graphql-go-tools/pull/543\r\n- http\n[…]\ngo-tools/pull/541\r\n\r\n---------\r\n\r\nCo-authored-by: Sergiy <818351+devsergiy@users.noreply.github.com>\r\nCo-authored-by: David Stutt <david@wundergraph.com>\r\nCo-authored-by: spetrunin <neyasut@gmail.com>",
"is_bot": false,
"headline": "sync wg changes (#360)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-06-26T09:25:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b3563aa241bbe1e1e0e91a1d57f3011ee21d0cb4",
"body": "…ped with quotes (#355)\n\nTHis ticket fixes an issue where the input generated for the rest\r\ndatasource wraps query params that are fetched from arguments with\r\nquotes, thereby breaking the URL generated down the execution pipeline",
"is_bot": false,
"headline": "[TT-8526] fix issue where query params of type int and array are wrap…",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-06-21T07:54:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4495dbf28d74d5eafa07ab45079a8163fadb376",
"body": "This PR fixes an introspection issue when custom root operation types\r\nare defined, e.g.\r\n```\r\nschema {\r\n\tquery: CustomQuery\r\n\tmutation: CustomMutation\r\n\tsubscription: CustomSubscription\r\n}\r\n\r\ntype CustomQuery {\r\n\tfriend: String\r\n}\r\n\r\ntype CustomMutation {\r\n\taddFriend: Boolean\r\n}\r\n\r\ntype CustomSubscription {\r\n\tlastAddedFriend: String\r\n}\r\n```",
"is_bot": false,
"headline": "fix introspection not working for custom root operation types (#356)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-06-16T11:41:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5563fa7a90b35e59bcafd39a275cb3d94c6f668",
"body": "This fixes an edge case where the variables passed is either unsanitized\r\njson or invalid json.",
"is_bot": false,
"headline": "[TT-8944]: added and fix case where variable is unsanitized json (#354)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-06-15T11:50:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4bad888468ec9f0361d7dc89fdec487554c77a08",
"body": "…#352)\n\nThis PR adds a separate module called variable validation, this module\r\nwill be added as a separate stage in the graphql execution\r\n\r\n[TT-8944](https://tyktech.atlassian.net/browse/TT-8944)\r\n\r\n\r\n[TT-8944]:\r\nhttps://tyktech.atlassian.net/browse/TT-8944?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-8944] Refactor: move variable validation logic to separate step (…",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-06-07T06:28:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40d3318e20b16cb7892a1ca2e9ac3ea096a15ec9",
"body": "PR for [TT-8528](https://tyktech.atlassian.net/browse/TT-8528)\r\n\r\nNow, we can handle non-nullable fields properly. There was also a minor\r\nbug in a function that generates mutation type. It was swallowing the\r\nparameters if a request body defined for the same operation id. This bug\r\nhas also been fixed.\r\n\r\n[TT-8528]:\r\nhttps://tyktech.atlassian.net/browse/TT-8528?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-8528] Improper handling of non-nullable fields in OpenAPI (#350)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-05-11T06:08:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8383e403b64fbecc27582e397479da3e4d56c7b7",
"body": "This PR adds a `MarshalRequest` and a `MarshalRequestString` function to\r\nthe `graphql` package.\r\nIt also adds `omitempty` to `OperationName` and `Variables` fields.",
"is_bot": false,
"headline": "add MarshalRequest functions and omit empties (#349)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-05-02T08:54:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec128b38cef269d8945e397e04f18e69f41f277b",
"body": "…(#348)\n\n- https://github.com/wundergraph/graphql-go-tools/pull/520\r\n\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>",
"is_bot": false,
"headline": "fix: avoid panic if client immediately disconnects on request (#520) …",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-04-27T10:41:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d8ec196a42ecdd5ce2c87710f4ee6b5c5497712",
"body": "Changes in this PR are based on @buraksezer 's awesome research in this\r\ncommit:\r\nhttps://github.com/TykTechnologies/graphql-go-tools/commit/23f7686189d155642aaf2678e0e3a28db37b57c5\r\n\r\nThis PR introduces interfaces for a `CustomExecutionEngineV2` including\r\nexecution stages.\r\nBy introducing those ch\n[…]\nutionEngineV2` as\r\nit is an implementation detail\r\n- `ExecutionOptionsV2` are now decoupled from `internalExecutionContext`\r\nso that implementing them outside of the `graphql` package is now\r\npossible",
"is_bot": false,
"headline": "introduce CustomExecutionEngineV2 (#346)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-04-26T14:26:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4dff07f237f306677007692c7ce2604471b500f7",
"body": "Reverts TykTechnologies/graphql-go-tools#345",
"is_bot": false,
"headline": "Revert \"update graphql-go-tools to go 1.19\" (#347)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-04-26T13:18:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3f46142fc08d9fb846cbdc6a773f0f2ab885eb8",
"body": "This PR updates `graphql-go-tools` to `go 1.19`.",
"is_bot": false,
"headline": "update graphql-go-tools to go 1.19 (#345)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-04-19T10:12:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbca67472c4150ed94b1b44fa4167f3a01ca7ee8",
"body": "PR from WG: https://github.com/wundergraph/graphql-go-tools/pull/518\r\n\r\nCo-authored-by: Yuri Buerov <yuribuerov@gmail.com>",
"is_bot": false,
"headline": "fix: resolve, do not resolve fetch if ctx is cancelled (#518) (#344)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-04-14T13:06:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "738c1d218c03b11d8353903331426602eb27aee6",
"body": "This PR fixes an inconsistent behavior when using `null` in a variable\r\nfor a required type (e.g. `String!`)",
"is_bot": false,
"headline": "fix validation skipping for null on scalars (#342)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-04-12T10:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8921a0eef8847ddb99314b68763aef3da4ea1af5",
"body": "…341)\n\nThis PR includes preliminary work for\r\n[TT-7767](https://tyktech.atlassian.net/jira/software/c/projects/TT/boards/26?modal=detail&selectedIssue=TT-7767).\r\n\r\n* Added a new public method to parse the OpenAPI document only one time:\r\n`ParseOpenAPIDocument`\r\n* Make some private functions public t\n[…]\nakeFieldNameFromEndpoint`, `MakeParameterName`.\r\n\r\n[TT-7767]:\r\nhttps://tyktech.atlassian.net/browse/TT-7767?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-7767] UDG datasource config based on info parsed from OAS spec (#…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-04-03T09:24:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2ac96aace06061f6c08fb8c8f318ebf4d1a9ceb4",
"body": "This PR contains changes from WG, including:\r\n - https://github.com/wundergraph/graphql-go-tools/pull/503\r\n - https://github.com/wundergraph/graphql-go-tools/pull/504\r\n - https://github.com/wundergraph/graphql-go-tools/pull/514\r\n - https://github.com/wundergraph/graphql-go-tools/pull/515\r\n\r\n--------\n[…]\nsers.noreply.github.com>\r\nCo-authored-by: ikawaha <ikawaha@users.noreply.github.com>\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>\r\nCo-authored-by: Sergiy <818351+devsergiy@users.noreply.github.com>",
"is_bot": false,
"headline": "cherry-pick wg changes (#340)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-03-24T14:03:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "af1740bd861bf9569135dc293c066b9e0d14514c",
"body": "…ec (#337)\n\nThis PR implements an OpenAPI to GraphQL converter. Currently, it only\r\nsupports OpenAPI v3.0.0 `getkin/kin-openapi` provides a different parser\r\nfor OpenAPI 2.0.0 but it is based on OpenAPI 3.0.0. v2.0.0 support\r\nshould be planned and tested separately.\r\n\r\nKnown issues and missing featu\n[…]\n` or `text/plain`.\r\n\r\nExample documents and their GraphQL counterparts can be found under\r\n`openapi/fixtures/v3.0.0`. We can successfully parse the `petstore.yaml`\r\nand `petstore-expanded.yaml` files.",
"is_bot": false,
"headline": "[TT-7465] Parsing information needed for UDG config from OpenAPI-3 sp…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-03-21T09:32:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7a16078ce5171935786a4b672774aa470c0d3dcb",
"body": "This PR upgrades Masterminds/goutils to `v1.1.1` from `v1.1.0`\r\n\r\n- https://tyktech.atlassian.net/browse/TT-8349\r\n- https://dso.docker.com/cve/CVE-2021-4238",
"is_bot": false,
"headline": "[TT-8349] Upgrade github.com/Masterminds/goutils to v1.1.1 (#339)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-03-20T14:31:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee4225ff80086ae8cbf73da4402cc84b710ed41c",
"body": "This PR adds tests for single-value array field-mappings. It documents\r\nthe way how to overcome a situation, where an API always returns an\r\narray with a single value in it.",
"is_bot": false,
"headline": "add tests for single-value array field-mappings (#336)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-02-16T10:00:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa076c16772f29785c60eaf1943662eb1f1391c7",
"body": "…ec (#335)\n\nThis PR includes a few improvements for\r\n[TT-7684](https://tyktech.atlassian.net/jira/software/c/projects/TT/boards/26?modal=detail&selectedIssue=TT-7684).\r\n\r\n[TT-7684]:\r\nhttps://tyktech.atlassian.net/browse/TT-7684?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-7684] UDG datasource config based on info parsed from AsyncAPI sp…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-02-14T13:07:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58f2a2e8c1810e4001b22cfa56ee485a3050d7fe",
"body": "This PR contains changes from wundergraph:\r\n - https://github.com/wundergraph/graphql-go-tools/pull/492\r\n - https://github.com/wundergraph/graphql-go-tools/pull/493\r\n - https://github.com/wundergraph/graphql-go-tools/pull/494\r\n\r\n---------\r\n\r\nCo-authored-by: Sergiy Petrunin <spetrunin@users.noreply.github.com>",
"is_bot": false,
"headline": "cherry-pick changes from WG (#334)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-02-13T14:13:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1513bf584e5ce5a81d59432f1303d6cf4ead478f",
"body": "Added an additional test case for nested field-mapping for increasing\r\nconfidence.",
"is_bot": false,
"headline": "add test case for nested field mappings (#333)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-02-10T09:36:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2236fa13578152c6b9e0670eee1fbe4d8648247a",
"body": "This PR adds Query root type to the schemas produced from AsyncAPI\r\ndocuments. It's a mandatory field. It also has a dummy field because\r\nempty types are not allowed.\r\n\r\n\r\n```graphql\r\nschema {\r\n query: Query\r\n subscription: Subscription\r\n}\r\n\r\ntype Query {\r\n _: Boolean\r\n}\r\n```\r\n\r\nThis PR also includes small code organization improvements.",
"is_bot": false,
"headline": "[TT-7826] Add Query root type (#332)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-02-03T11:14:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c74739c7a15a797650ceaff145295b86c9cb55ee",
"body": null,
"is_bot": false,
"headline": "[TT-7826] Add Info object to AsyncAPI struct (#331)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-02-01T13:00:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0685de90efe2abef451da4818b397c7900741cfb",
"body": "…pec (#329)\n\nPR for\r\n[TT-7468](https://tyktech.atlassian.net/jira/software/c/projects/TT/boards/26?modal=detail&selectedIssue=TT-7468)\r\n\r\n`ImportAsyncAPIDocumentByte` has been added to produce a GraphQL schema\r\nfrom a parsed AsyncAPI document. The implementation uses\r\n`introspection.JsonConverter` t\n[…]\n userUnsubscribedSub: UserUnsubscribed\r\n}\r\n```\r\n\r\n[TT-7468]:\r\nhttps://tyktech.atlassian.net/browse/TT-7468?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-7468] Configuring UDG Schema based on info parsed from AsyncAPI s…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-01-31T13:21:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5355f68b46693b0e12d37796ffe2f5976d96e75a",
"body": "This PR contains following PRs:\r\n - https://github.com/wundergraph/graphql-go-tools/pull/487\r\n - https://github.com/wundergraph/graphql-go-tools/pull/486\r\n - https://github.com/wundergraph/graphql-go-tools/pull/477\r\n\r\nCo-authored-by: Aenimus <47415099+Aenimus@users.noreply.github.com>\r\nCo-authored-b\n[…]\nwundergraph.com>\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>\r\nCo-authored-by: Sergiy Petrunin <spetrunin@users.noreply.github.com>\r\nCo-authored-by: Alberto García Hierro <alberto@garciahierro.com>",
"is_bot": false,
"headline": "cherry-pick wundergraph changes (#330)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-01-23T11:18:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e1ac1a15aa7bc0ae3a2e44cbb7995e9c6bd87d61",
"body": "…c (#328)",
"is_bot": false,
"headline": "[TT-7466] Parsing information needed for UDG config from AsyncAPI Spe…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-01-16T14:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "272a19f717d0278a3fd5b4b7711dd8359ec3a972",
"body": "PRs that have been cherry-picked:\r\n - https://github.com/wundergraph/graphql-go-tools/pull/469\r\n - https://github.com/wundergraph/graphql-go-tools/pull/463\r\n - https://github.com/wundergraph/graphql-go-tools/pull/472\r\n - https://github.com/wundergraph/graphql-go-tools/pull/476\r\n - https://github.com\n[…]\nraphql-go-tools/pull/481\r\n\r\nCo-authored-by: Misato <misato@takahashi.name>\r\nCo-authored-by: Misato Takahashi <mistat@mistat.local>\r\nCo-authored-by: Sergiy Petrunin <spetrunin@users.noreply.github.com>",
"is_bot": false,
"headline": "cherry-pick wundergraph changes (#327)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-01-09T14:14:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7ea9495452723577f28f9191559ff067adae5e96",
"body": "… (#325)\n\nPR for\r\n[TT-6137](https://tyktech.atlassian.net/jira/software/c/projects/TT/boards/26?modal=detail&selectedIssue=TT-6137).\r\n\r\nCurrently, we implement `graphql-ws` protocol for the communication\r\nbetween GW and the clients. This protocol supports running many\r\nsubscriptions on a single WebS\n[…]\ne playground app in Tyk Dashboard. It opens a\r\nnew connection for every subscription request. The problem arises when\r\nyou want to run more than one subscriptions using a single WebSocket\r\nconnection.",
"is_bot": false,
"headline": "[TT-6137] Can't close all subscriptions when more than one are opened…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-01-02T11:19:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f01b55cbe440b55f5e411e38403398e5aae8fe1d",
"body": "This PR contains changes from:\r\n\r\n- Custom Scalar Replacement:\r\nhttps://github.com/wundergraph/graphql-go-tools/pull/456\r\n- Add support for requests in SSE Subscriptions:\r\nhttps://github.com/wundergraph/graphql-go-tools/pull/449\r\n- Fix planning variable path:\r\nhttps://github.com/wundergraph/graphql-\n[…]\ne@gmx.de>\r\nCo-authored-by: Oscar Lingard <oscar.lingard@thehutgroup.com>\r\nCo-authored-by: Jonathan Lee <jonathan.lee@coinbase.com>\r\nCo-authored-by: Sergiy Petrunin <spetrunin@users.noreply.github.com>",
"is_bot": false,
"headline": "cherry pick changes from wundergraph (#324)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2022-12-09T13:19:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "acdd20d63048608f2c95febd17333b9637c72da1",
"body": "Currently, when you send the following query for both proxy-only and UDG\r\nAPIs, the GW panics and the user gets 502 for the query.\r\n\r\n```graphql\r\nquery {\r\n __typename\r\n}\r\n```\r\n\r\nThe actual error message is the following:\r\n\r\n```json\r\n{\r\n \"errors\": [\r\n {\r\n \"message\": \"unable to\n[…]\n\r\n temp\r\n }\r\n}\r\n```\r\n\r\n```json\r\n{\r\n \"data\": {\r\n \"__typename\": \"Query\",\r\n \"weather\": {\r\n \"__typename\": \"Weather\",\r\n \"temp\": 44\r\n }\r\n }\r\n}\r\n```",
"is_bot": false,
"headline": "[TT-6419] Querying for __typename in any graph causes a 502 error (#323)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2022-12-07T09:23:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c2dd74b524578d0653cf7652efba56a19304ebae",
"body": "* allow integer to be used in place of ID type\r\n\r\n* reduce responsibility of valid arguments rule use testify require\r\ninstead of panic\r\nupdate test to use proper rules\r\nmove some tests in more proper sections\r\n\r\n* add position to values\r\n\r\n* make variable errors messages compatible with reference t\n[…]\n valid input\r\n\r\nCo-authored-by: Alasdair Tran <alasdair.tran@gmail.com>\r\nCo-authored-by: Sergiy Petrunin <spetrunin@users.noreply.github.com>\r\n\r\nCo-authored-by: Alasdair Tran <alasdair.tran@gmail.com>",
"is_bot": false,
"headline": "improve values validation to reflect reference implementation (#319)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2022-11-18T12:07:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "98968f5f90d528b4e4841244a7243b97405abd3f",
"body": "* feat: planner, support custom scalar fields\r\n\r\n* chore: fix test\r\n\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>\r\n\r\nCo-authored-by: Yuri Buerov <yuribuerov@gmail.com>\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>",
"is_bot": false,
"headline": "feat: planner, support custom scalar fields (#450) (#318)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2022-11-18T08:27:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5f47427f73388cce55dfe29938e077153152019",
"body": "return meaningful error message when an int/float is provided to the\r\nresolveString func\r\n\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>",
"is_bot": false,
"headline": "meaningful errors for resolveString func (#317)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2022-11-17T12:39:55Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 13,
"commits_last_year": 6,
"latest_release_at": "2019-04-08T06:53:10Z",
"latest_release_tag": "v1.6.1",
"releases_from_tags": true,
"days_since_last_push": 40,
"active_weeks_last_year": 5,
"days_since_latest_release": 2674,
"mean_days_between_releases": 4.1
},
"artifacts": {
"collected": true,
"structure": [
"tree.go_main"
],
"declarations": []
},
"community": {
"has_readme": false,
"has_license": false,
"readme_badges": {
"hosts": [
"github.com"
],
"total": 1,
"header": 1,
"collected": true,
"has_inspect_badge": false
},
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/TykTechnologies/graphql-go-tools",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"categories": [],
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/TykTechnologies/graphql-go-tools",
"declared_type": null,
"is_deprecated": false,
"latest_version": "v1.6.1",
"repository_url": "https://github.com/TykTechnologies/graphql-go-tools",
"versions_count": 13,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2019-04-08T06:53:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2674
}
]
},
"popularity": {
"forks": 5,
"stars": 21,
"watchers": 6,
"fork_history": {
"days": [
{
"date": "2021-09-16",
"count": 1
},
{
"date": "2022-02-09",
"count": 1
},
{
"date": "2022-06-27",
"count": 1
},
{
"date": "2023-02-04",
"count": 1
},
{
"date": "2025-07-26",
"count": 1
}
],
"complete": true,
"collected": 5,
"total_forks": 5
},
"star_history": null,
"open_issues_and_prs": 11
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"v2/Makefile"
],
"api_schema_files": [
"examples/chat/schema.graphql",
"examples/federation/accounts/graph/schema.graphqls",
"examples/federation/products/graph/schema.graphqls",
"examples/federation/reviews/graph/schema.graphqls",
"pkg/astparser/testdata/big_schema.graphql",
"pkg/astparser/testdata/github.schema.graphql",
"pkg/astparser/testdata/introspection_normalized.graphql",
"pkg/astparser/testdata/introspectionquery.graphql",
"pkg/astparser/testdata/starwars.schema.graphql",
"pkg/astparser/testdata/todo.graphql",
"pkg/astprinter/testdata/introspectionquery.graphql",
"pkg/astprinter/testdata/starwars.schema.graphql",
"pkg/astvalidation/reference/testsgo/test_schema.graphql",
"pkg/codegen/testdata/schema.graphql",
"pkg/execution/graphql_definitions/directives/graphql_datasource.graphql",
"pkg/execution/graphql_definitions/directives/http_json_datasource.graphql",
"pkg/execution/graphql_definitions/directives/http_polling_stream_datasource.graphql",
"pkg/execution/graphql_definitions/directives/mapping.graphql",
"pkg/execution/graphql_definitions/directives/mqtt_datasource.graphql",
"pkg/execution/graphql_definitions/directives/nats_datasource.graphql",
"pkg/execution/graphql_definitions/directives/pipeline_datasource.graphql",
"pkg/execution/graphql_definitions/directives/static_datasource.graphql",
"pkg/execution/graphql_definitions/directives/transformation.graphql",
"pkg/execution/graphql_definitions/directives/wasm_datasource.graphql",
"pkg/execution/graphql_definitions/enums/http_method.graphql",
"pkg/execution/graphql_definitions/enums/mapping_mode.graphql",
"pkg/execution/graphql_definitions/enums/parameter_source.graphql",
"pkg/execution/graphql_definitions/enums/transformation_mode.graphql",
"pkg/execution/graphql_definitions/inputs/header.graphql",
"pkg/execution/graphql_definitions/inputs/parameter.graphql",
"pkg/execution/graphql_definitions/inputs/statuscode_typename_mapping.graphql",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls",
"pkg/imports/testdata/cycle/a/a.graphql",
"pkg/imports/testdata/cycle/b/b.graphql",
"pkg/imports/testdata/deep/deeper/custom_types.graphql",
"pkg/imports/testdata/import_cycle.graphql",
"pkg/imports/testdata/nested/nested.graphql",
"pkg/imports/testdata/nested2/nested2.graphql",
"pkg/imports/testdata/regexonly/flat.graphql",
"pkg/imports/testdata/regexonly/mutation.graphql",
"pkg/imports/testdata/regexonly/query.graphql",
"pkg/imports/testdata/scalars/json.graphql",
"pkg/imports/testdata/schema.graphql",
"pkg/imports/testdata/types/mutation.graphql",
"pkg/imports/testdata/types/query.graphql",
"pkg/introspection/testdata/interfaces_implementing_interfaces.graphql",
"pkg/introspection/testdata/starwars.schema.graphql",
"pkg/starwars/testdata/queries/interface_fragments_on_union.graphql",
"pkg/starwars/testdata/star_wars.graphql",
"pkg/testing/federationtesting/accounts/graph/schema.graphqls",
"pkg/testing/federationtesting/products/graph/schema.graphqls",
"pkg/testing/federationtesting/reviews/graph/schema.graphqls",
"pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql",
"pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql",
"pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql",
"pkg/testing/federationtesting/testdata/queries/merged_field.graphql",
"pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql",
"pkg/testing/subscriptiontesting/schema.graphql",
"v2/examples/chat/schema.graphql",
"v2/examples/federation/accounts/graph/schema.graphqls",
"v2/examples/federation/products/graph/schema.graphqls",
"v2/examples/federation/reviews/graph/schema.graphqls",
"v2/examples/kafka_pubsub/schema.graphql",
"v2/pkg/astparser/testdata/big_schema.graphql",
"v2/pkg/astparser/testdata/github.schema.graphql",
"v2/pkg/astparser/testdata/introspection_normalized.graphql",
"v2/pkg/astparser/testdata/introspectionquery.graphql",
"v2/pkg/astparser/testdata/starwars.schema.graphql",
"v2/pkg/astparser/testdata/todo.graphql",
"v2/pkg/astprinter/testdata/introspectionquery.graphql",
"v2/pkg/astprinter/testdata/starwars.schema.graphql",
"v2/pkg/astvalidation/reference/testsgo/test_schema.graphql",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls",
"v2/pkg/imports/testdata/cycle/a/a.graphql",
"v2/pkg/imports/testdata/cycle/b/b.graphql",
"v2/pkg/imports/testdata/deep/deeper/custom_types.graphql",
"v2/pkg/imports/testdata/import_cycle.graphql",
"v2/pkg/imports/testdata/nested/nested.graphql",
"v2/pkg/imports/testdata/nested2/nested2.graphql",
"v2/pkg/imports/testdata/regexonly/flat.graphql",
"v2/pkg/imports/testdata/regexonly/mutation.graphql",
"v2/pkg/imports/testdata/regexonly/query.graphql",
"v2/pkg/imports/testdata/scalars/json.graphql",
"v2/pkg/imports/testdata/schema.graphql",
"v2/pkg/imports/testdata/types/mutation.graphql",
"v2/pkg/imports/testdata/types/query.graphql",
"v2/pkg/introspection/testdata/interfaces_implementing_interfaces.graphql",
"v2/pkg/introspection/testdata/starwars.schema.graphql",
"v2/pkg/starwars/testdata/queries/interface_fragments_on_union.graphql",
"v2/pkg/starwars/testdata/star_wars.graphql",
"v2/pkg/testing/federationtesting/accounts/graph/schema.graphqls",
"v2/pkg/testing/federationtesting/products/graph/schema.graphqls",
"v2/pkg/testing/federationtesting/reviews/graph/schema.graphqls",
"v2/pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/merged_field.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql",
"v2/pkg/testing/subscriptiontesting/schema.graphql"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"examples/chat/go.mod",
"examples/federation/go.mod",
"examples/kafka_pubsub/go.mod",
"examples/kafka_pubsub/transactional_producer/go.mod",
"go.mod",
"v2/examples/chat/go.mod",
"v2/examples/federation/go.mod",
"v2/examples/kafka_pubsub/go.mod",
"v2/examples/kafka_pubsub/transactional_producer/go.mod",
"v2/go.mod"
],
"largest_source_bytes": 2144248,
"source_files_sampled": 1198,
"oversized_source_files": 24,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod",
"v2/go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "0.18.0",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 10,
"advisory_ids": [
"GHSA-45gg-vh54-h5m9",
"GHSA-5cgq-3rg8-m6cv",
"GHSA-78mq-xcr3-xm33",
"GHSA-89gr-r52h-f8rx",
"GHSA-9m57-25v3-79x9",
"GHSA-f5wc-c3c7-36mc",
"GHSA-f6x5-jh6r-wrfv",
"GHSA-hcg3-q754-cr77",
"GHSA-j5w8-q4qc-rx2x",
"GHSA-jppx-rxg9-jmrx"
],
"fixed_version": "0.52.0",
"advisory_count": 36,
"oldest_advisory_days": 600
},
{
"name": "github.com/buger/jsonparser",
"direct": true,
"version": "1.1.1",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-6g7g-w4f8-9c9x",
"GO-2026-4514"
],
"fixed_version": "1.1.2",
"advisory_count": 2,
"oldest_advisory_days": 140
},
{
"name": "github.com/docker/cli",
"direct": false,
"version": "28.4.0+incompatible",
"severity": "high",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GHSA-p436-gjf2-799p",
"GO-2026-4610"
],
"fixed_version": "29.2.0+incompatible",
"advisory_count": 2,
"oldest_advisory_days": 152
},
{
"name": "github.com/docker/docker",
"direct": false,
"version": "28.4.0+incompatible",
"severity": "high",
"ecosystem": "go",
"cvss_score": 8.8,
"advisory_ids": [
"GHSA-pxq6-2prw-chj9",
"GHSA-rg2x-37c3-w2rh",
"GHSA-vp62-88p7-qqf5",
"GHSA-x744-4wpc-v9h2",
"GHSA-x86f-5xw2-fm2r",
"GO-2026-4883",
"GO-2026-4887",
"GO-2026-5617",
"GO-2026-5668",
"GO-2026-5746"
],
"fixed_version": "29.3.1",
"advisory_count": 10,
"oldest_advisory_days": 129
},
{
"name": "github.com/opencontainers/runc",
"direct": false,
"version": "1.1.5",
"severity": "high",
"ecosystem": "go",
"cvss_score": 8.6,
"advisory_ids": [
"GHSA-9493-h29p-rfm2",
"GHSA-cgrx-mc8f-2prm",
"GHSA-jfvp-7x6p-h2pv",
"GHSA-qw9x-cqr3-wc7r",
"GHSA-xjvp-4fhw-gc47",
"GHSA-xr7r-f8xq-vfvv",
"GO-2024-2491",
"GO-2024-3110",
"GO-2025-4096",
"GO-2025-4097"
],
"fixed_version": "1.13.0",
"advisory_count": 12,
"oldest_advisory_days": 915
},
{
"name": "github.com/sirupsen/logrus",
"direct": false,
"version": "1.8.1",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-4f99-4q7p-p3gh",
"GO-2025-4188"
],
"fixed_version": "1.9.3",
"advisory_count": 2,
"oldest_advisory_days": 242
},
{
"name": "github.com/eclipse/paho.mqtt.golang",
"direct": true,
"version": "1.2.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-32fw-gq77-f2f2",
"GO-2025-4173"
],
"fixed_version": "1.5.1",
"advisory_count": 2,
"oldest_advisory_days": 244
},
{
"name": "github.com/vektah/gqlparser/v2",
"direct": true,
"version": "2.5.1",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-2hmf-46v7-v6fx",
"GO-2024-2920"
],
"fixed_version": "2.5.14",
"advisory_count": 2,
"oldest_advisory_days": 782
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "0.17.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-4v7x-pqxf-cx7m",
"GHSA-5cv4-jp36-h3mw",
"GHSA-qxp5-gwg8-xv66",
"GHSA-vvgc-356p-c3xw",
"GO-2024-2687",
"GO-2024-3333",
"GO-2025-3503",
"GO-2025-3595",
"GO-2026-4440",
"GO-2026-4441"
],
"fixed_version": "1.26.3",
"advisory_count": 18,
"oldest_advisory_days": 852
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "1.16.7",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5841"
],
"fixed_version": "1.18.7",
"advisory_count": 1,
"oldest_advisory_days": 7
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "0.16.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 73
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "0.14.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 20
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 5,
"unknown": 3,
"critical": 1,
"moderate": 3
},
"advisory_count": 89,
"affected_count": 12,
"assessed_count": 116,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 3
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/99designs/gqlgen",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.17.22"
},
{
"name": "github.com/IBM/sarama",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.42.1"
},
{
"name": "github.com/andybalholm/brotli",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/buger/jsonparser",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/cespare/xxhash/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.1.2"
},
{
"name": "github.com/coder/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.12"
},
{
"name": "github.com/dave/jennifer",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/davecgh/go-spew",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/eclipse/paho.mqtt.golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
},
{
"name": "github.com/evanphx/json-patch/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.1.0"
},
{
"name": "github.com/go-test/deep",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.8"
},
{
"name": "github.com/gobwas/ws",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.4"
},
{
"name": "github.com/golang/mock",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/google/go-cmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.8"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/hashicorp/golang-lru",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.4"
},
{
"name": "github.com/iancoleman/strcase",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.0"
},
{
"name": "github.com/jensneuse/abstractlogger",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.4"
},
{
"name": "github.com/jensneuse/byte-template",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20200214152254-4f3cf06e5c68"
},
{
"name": "github.com/jensneuse/diffview",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/jensneuse/pipeline",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20200117120358-9fb4de085cd6"
},
{
"name": "github.com/mitchellh/go-homedir",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/ory/dockertest/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.10.0"
},
{
"name": "github.com/r3labs/sse/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.8.1"
},
{
"name": "github.com/santhosh-tekuri/jsonschema/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.3.0"
},
{
"name": "github.com/sebdah/goldie",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20180424091453-8784dd1ab561"
},
{
"name": "github.com/sebdah/goldie/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.3"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.5"
},
{
"name": "github.com/spf13/viper",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.2"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.4"
},
{
"name": "github.com/tidwall/gjson",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "github.com/tidwall/sjson",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.4"
},
{
"name": "github.com/vektah/gqlparser/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.1"
},
{
"name": "go.uber.org/atomic",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.0"
},
{
"name": "go.uber.org/zap",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.18.1"
},
{
"name": "gopkg.in/yaml.v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.4.0"
},
{
"name": "github.com/99designs/gqlgen",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.17.22"
},
{
"name": "github.com/IBM/sarama",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.42.1"
},
{
"name": "github.com/alitto/pond",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.3"
},
{
"name": "github.com/andybalholm/brotli",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/buger/jsonparser",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/cespare/xxhash/v2",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v2.1.2"
},
{
"name": "github.com/coder/websocket",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.12"
},
{
"name": "github.com/davecgh/go-spew",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/gobwas/ws",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.4"
},
{
"name": "github.com/golang/mock",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/google/go-cmp",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.9"
},
{
"name": "github.com/google/uuid",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/hashicorp/go-multierror",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/hashicorp/golang-lru",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.4"
},
{
"name": "github.com/jensneuse/abstractlogger",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.4"
},
{
"name": "github.com/jensneuse/byte-template",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20200214152254-4f3cf06e5c68"
},
{
"name": "github.com/jensneuse/diffview",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/ory/dockertest/v3",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v3.10.0"
},
{
"name": "github.com/pkg/errors",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.1"
},
{
"name": "github.com/r3labs/sse/v2",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v2.8.1"
},
{
"name": "github.com/santhosh-tekuri/jsonschema/v5",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v5.3.0"
},
{
"name": "github.com/sebdah/goldie/v2",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.3"
},
{
"name": "github.com/stretchr/testify",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.4"
},
{
"name": "github.com/tidwall/gjson",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "github.com/tidwall/sjson",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.4"
},
{
"name": "github.com/vektah/gqlparser/v2",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.1"
},
{
"name": "go.uber.org/atomic",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.0"
},
{
"name": "go.uber.org/zap",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.18.1"
},
{
"name": "golang.org/x/sync",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.0"
},
{
"name": "gonum.org/v1/gonum",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.14.0"
},
{
"name": "gopkg.in/yaml.v2",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v2.4.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/99designs/gqlgen",
"direct": true,
"version": "0.17.20",
"ecosystem": "go"
},
{
"name": "github.com/99designs/gqlgen",
"direct": true,
"version": "0.17.22",
"ecosystem": "go"
},
{
"name": "github.com/andybalholm/brotli",
"direct": true,
"version": "1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/buger/jsonparser",
"direct": true,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": true,
"version": "2.1.2",
"ecosystem": "go"
},
{
"name": "github.com/coder/websocket",
"direct": true,
"version": "1.8.12",
"ecosystem": "go"
},
{
"name": "github.com/dave/jennifer",
"direct": true,
"version": "1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": true,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/eclipse/paho.mqtt.golang",
"direct": true,
"version": "1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/evanphx/json-patch/v5",
"direct": true,
"version": "5.1.0",
"ecosystem": "go"
},
{
"name": "github.com/go-test/deep",
"direct": true,
"version": "1.0.8",
"ecosystem": "go"
},
{
"name": "github.com/gobwas/ws",
"direct": true,
"version": "1.0.4",
"ecosystem": "go"
},
{
"name": "github.com/golang/mock",
"direct": true,
"version": "1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/google/go-cmp",
"direct": true,
"version": "0.5.8",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": true,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/gorilla/websocket",
"direct": true,
"version": "1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-multierror",
"direct": true,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/golang-lru",
"direct": true,
"version": "0.5.4",
"ecosystem": "go"
},
{
"name": "github.com/iancoleman/strcase",
"direct": true,
"version": "0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/ibm/sarama",
"direct": true,
"version": "1.42.1",
"ecosystem": "go"
},
{
"name": "github.com/jensneuse/abstractlogger",
"direct": true,
"version": "0.0.4",
"ecosystem": "go"
},
{
"name": "github.com/jensneuse/byte-template",
"direct": true,
"version": "0.0.0-20200214152254-4f3cf06e5c68",
"ecosystem": "go"
},
{
"name": "github.com/jensneuse/diffview",
"direct": true,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/jensneuse/pipeline",
"direct": true,
"version": "0.0.0-20200117120358-9fb4de085cd6",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/go-homedir",
"direct": true,
"version": "1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/ory/dockertest/v3",
"direct": true,
"version": "3.10.0",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": true,
"version": "0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/r3labs/sse/v2",
"direct": true,
"version": "2.8.1",
"ecosystem": "go"
},
{
"name": "github.com/santhosh-tekuri/jsonschema/v5",
"direct": true,
"version": "5.3.0",
"ecosystem": "go"
},
{
"name": "github.com/sebdah/goldie",
"direct": true,
"version": "0.0.0-20180424091453-8784dd1ab561",
"ecosystem": "go"
},
{
"name": "github.com/sebdah/goldie/v2",
"direct": true,
"version": "2.5.3",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": true,
"version": "0.0.5",
"ecosystem": "go"
},
{
"name": "github.com/spf13/viper",
"direct": true,
"version": "1.3.2",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "1.7.1",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "1.8.4",
"ecosystem": "go"
},
{
"name": "github.com/tidwall/gjson",
"direct": true,
"version": "1.11.0",
"ecosystem": "go"
},
{
"name": "github.com/tidwall/sjson",
"direct": true,
"version": "1.0.4",
"ecosystem": "go"
},
{
"name": "github.com/vektah/gqlparser/v2",
"direct": true,
"version": "2.5.1",
"ecosystem": "go"
},
{
"name": "go.uber.org/atomic",
"direct": true,
"version": "1.9.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap",
"direct": true,
"version": "1.18.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v2",
"direct": true,
"version": "2.4.0",
"ecosystem": "go"
},
{
"name": "dario.cat/mergo",
"direct": false,
"version": "1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/agnivade/levenshtein",
"direct": false,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-ansiterm",
"direct": false,
"version": "0.0.0-20230124172434-306776ec8161",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v4",
"direct": false,
"version": "4.1.3",
"ecosystem": "go"
},
{
"name": "github.com/containerd/continuity",
"direct": false,
"version": "0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/docker/cli",
"direct": false,
"version": "28.4.0+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/docker/docker",
"direct": false,
"version": "28.4.0+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/docker/go-connections",
"direct": false,
"version": "0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/docker/go-units",
"direct": false,
"version": "0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/eapache/go-resiliency",
"direct": false,
"version": "1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/eapache/go-xerial-snappy",
"direct": false,
"version": "0.0.0-20230731223053-c322873962e3",
"ecosystem": "go"
},
{
"name": "github.com/eapache/queue",
"direct": false,
"version": "1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/fsnotify/fsnotify",
"direct": false,
"version": "1.4.9",
"ecosystem": "go"
},
{
"name": "github.com/go-viper/mapstructure/v2",
"direct": false,
"version": "2.4.0",
"ecosystem": "go"
},
{
"name": "github.com/gobwas/httphead",
"direct": false,
"version": "0.0.0-20180130184737-2c6c146eadee",
"ecosystem": "go"
},
{
"name": "github.com/gobwas/pool",
"direct": false,
"version": "0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/golang/snappy",
"direct": false,
"version": "0.0.4",
"ecosystem": "go"
},
{
"name": "github.com/google/shlex",
"direct": false,
"version": "0.0.0-20191202100458-e7afc7fbc510",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/errwrap",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-uuid",
"direct": false,
"version": "1.0.3",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/hcl",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/huandu/xstrings",
"direct": false,
"version": "1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/imdario/mergo",
"direct": false,
"version": "0.3.12",
"ecosystem": "go"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/jcmturner/aescts/v2",
"direct": false,
"version": "2.0.0",
"ecosystem": "go"
},
{
"name": "github.com/jcmturner/dnsutils/v2",
"direct": false,
"version": "2.0.0",
"ecosystem": "go"
},
{
"name": "github.com/jcmturner/gofork",
"direct": false,
"version": "1.7.6",
"ecosystem": "go"
},
{
"name": "github.com/jcmturner/gokrb5/v8",
"direct": false,
"version": "8.4.4",
"ecosystem": "go"
},
{
"name": "github.com/jcmturner/rpc/v2",
"direct": false,
"version": "2.0.3",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "1.16.7",
"ecosystem": "go"
},
{
"name": "github.com/lib/pq",
"direct": false,
"version": "1.10.6",
"ecosystem": "go"
},
{
"name": "github.com/logrusorgru/aurora/v3",
"direct": false,
"version": "3.0.0",
"ecosystem": "go"
},
{
"name": "github.com/magiconair/properties",
"direct": false,
"version": "1.8.0",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/goutils",
"direct": false,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/semver",
"direct": false,
"version": "1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/sprig",
"direct": false,
"version": "2.22.0+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "0.1.13",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "0.0.16",
"ecosystem": "go"
},
{
"name": "github.com/microsoft/go-winio",
"direct": false,
"version": "0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/copystructure",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/mapstructure",
"direct": false,
"version": "1.3.1",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/mapstructure",
"direct": false,
"version": "1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/reflectwalk",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/moby/docker-image-spec",
"direct": false,
"version": "1.3.1",
"ecosystem": "go"
},
{
"name": "github.com/moby/term",
"direct": false,
"version": "0.0.0-20201216013528-df9cb8a40635",
"ecosystem": "go"
},
{
"name": "github.com/nvveen/gotty",
"direct": false,
"version": "0.0.0-20120604004816-cd527374f1e5",
"ecosystem": "go"
},
{
"name": "github.com/opencontainers/go-digest",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/opencontainers/image-spec",
"direct": false,
"version": "1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/opencontainers/runc",
"direct": false,
"version": "1.1.5",
"ecosystem": "go"
},
{
"name": "github.com/pelletier/go-toml",
"direct": false,
"version": "1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/pierrec/lz4/v4",
"direct": false,
"version": "4.1.18",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/rcrowley/go-metrics",
"direct": false,
"version": "0.0.0-20201227073835-cf1acfcdf475",
"ecosystem": "go"
},
{
"name": "github.com/rogpeppe/go-internal",
"direct": false,
"version": "1.11.0",
"ecosystem": "go"
},
{
"name": "github.com/rs/cors",
"direct": false,
"version": "1.7.0",
"ecosystem": "go"
},
{
"name": "github.com/sergi/go-diff",
"direct": false,
"version": "1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/sirupsen/logrus",
"direct": false,
"version": "1.8.1",
"ecosystem": "go"
},
{
"name": "github.com/spf13/afero",
"direct": false,
"version": "1.1.2",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cast",
"direct": false,
"version": "1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/jwalterweatherman",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": false,
"version": "1.0.3",
"ecosystem": "go"
},
{
"name": "github.com/tidwall/match",
"direct": false,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/tidwall/pretty",
"direct": false,
"version": "1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/xeipuuv/gojsonpointer",
"direct": false,
"version": "0.0.0-20190809123943-df4f5c81cb3b",
"ecosystem": "go"
},
{
"name": "github.com/xeipuuv/gojsonreference",
"direct": false,
"version": "0.0.0-20180127040603-bd5ef7bd5415",
"ecosystem": "go"
},
{
"name": "github.com/xeipuuv/gojsonschema",
"direct": false,
"version": "1.2.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/multierr",
"direct": false,
"version": "1.6.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "0.18.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "0.9.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "0.17.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "0.16.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "0.14.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "0.7.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/cenkalti/backoff.v1",
"direct": false,
"version": "1.1.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "3.0.1",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 116,
"direct_count": 41,
"indirect_count": 75
}
},
"maintainership": {
"issues": {
"open_prs": 9,
"merged_prs": 385,
"open_issues": 2,
"closed_ratio": 0.8,
"closed_issues": 8,
"closed_unmerged_prs": 43
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "jensneuse",
"commits": 1318,
"avatar_url": "https://avatars.githubusercontent.com/u/11737109?v=4"
},
{
"type": "User",
"login": "devsergiy",
"commits": 227,
"avatar_url": "https://avatars.githubusercontent.com/u/818351?v=4"
},
{
"type": "User",
"login": "pvormste",
"commits": 193,
"avatar_url": "https://avatars.githubusercontent.com/u/4503955?v=4"
},
{
"type": "User",
"login": "buraksezer",
"commits": 176,
"avatar_url": "https://avatars.githubusercontent.com/u/33702537?v=4"
},
{
"type": "User",
"login": "chedom",
"commits": 72,
"avatar_url": "https://avatars.githubusercontent.com/u/12982070?v=4"
},
{
"type": "User",
"login": "kofoworola",
"commits": 24,
"avatar_url": "https://avatars.githubusercontent.com/u/15363616?v=4"
},
{
"type": "User",
"login": "mvid",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/74642?v=4"
},
{
"type": "User",
"login": "csilvers",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/1445223?v=4"
},
{
"type": "User",
"login": "jobergner",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/20546887?v=4"
},
{
"type": "User",
"login": "dnerdy",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/82307?v=4"
}
],
"contributors_sampled": 24,
"top_contributor_share": 0.631
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"codeql-analysis.yml",
"jira-pr-validator.yaml",
"v1.yml",
"v2.yml",
"visor.yaml"
],
"has_docs_dir": false,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 1,
"reason": "4 out of 30 merged PRs checked by a CI test -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 5 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 1,
"reason": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 7,
"reason": "SAST tool detected but not run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "236 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "dae0d8d8d0389e10f42476f31d0840835ed125e7",
"ran_at": "2026-08-04T05:55:07Z",
"aggregate_score": 4.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 0,
"decided_7d": 0,
"merged_30d": 0,
"authors_30d": 0,
"decided_30d": 0,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 0,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 0,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2026-06-24T14:13:11Z",
"oldest_open_prs": [
{
"number": 190,
"created_at": "2021-12-14T18:15:17Z",
"last_comment_at": "2021-12-14T18:15:56Z",
"last_comment_author": "sonarqubecloud"
},
{
"number": 292,
"created_at": "2022-07-29T10:27:11Z",
"last_comment_at": "2022-07-29T10:27:55Z",
"last_comment_author": "sonarqubecloud"
},
{
"number": 338,
"created_at": "2023-03-20T09:22:08Z",
"last_comment_at": "2023-03-21T09:23:52Z",
"last_comment_author": "sonarqubecloud"
},
{
"number": 370,
"created_at": "2023-08-07T11:45:12Z",
"last_comment_at": "2023-08-22T12:04:52Z",
"last_comment_author": "sonarqubecloud"
},
{
"number": 372,
"created_at": "2023-08-07T20:46:04Z",
"last_comment_at": "2023-08-16T15:15:02Z",
"last_comment_author": "sweep-ai-deprecated"
},
{
"number": 409,
"created_at": "2024-01-03T08:49:38Z",
"last_comment_at": "2024-01-31T15:15:54Z",
"last_comment_author": "sonarqubecloud"
},
{
"number": 420,
"created_at": "2024-02-06T08:58:17Z",
"last_comment_at": "2024-04-17T12:36:03Z",
"last_comment_author": "jeffy-mathew"
},
{
"number": 428,
"created_at": "2024-04-12T12:41:26Z",
"last_comment_at": "2024-04-12T12:41:52Z",
"last_comment_author": "sonarqubecloud"
},
{
"number": 444,
"created_at": "2026-05-08T19:40:18Z",
"last_comment_at": "2026-05-08T19:41:23Z",
"last_comment_author": "sonarqubecloud"
}
],
"last_merged_pr_at": "2026-06-24T14:13:09Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 298,
"created_at": "2022-09-28T11:36:32Z",
"last_comment_at": "2022-10-20T14:32:45Z",
"last_comment_author": "Aenimus"
},
{
"number": 369,
"created_at": "2023-08-07T11:43:13Z",
"last_comment_at": "2023-08-08T22:16:05Z",
"last_comment_author": "kevinlu1248"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/TykTechnologies/graphql-go-tools",
"host": "github.com",
"name": "graphql-go-tools",
"owner": "TykTechnologies"
},
"metrics": {
"overall": {
"key": "overall",
"band": "weak",
"name": "Overall health",
"note": "The weighted overall 46 is calibrated to 44 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 46,
"calibrated": 44,
"calibration": "2026-08-02"
}
}
],
"value": 44,
"inputs": {
"security": 43,
"vitality": 37,
"community": 28,
"governance": 66,
"calibration": "2026-08-02",
"engineering": 44,
"ai_readiness": 68,
"weighted_overall_raw": 46
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 37,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"commits_last_year": 6,
"human_commit_share": 1,
"days_since_last_push": 40,
"active_weeks_last_year": 5
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 40 days ago",
"points": 18,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 40
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "5/52 weeks with commits",
"points": 3.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 5
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "6 commits in the last year",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 6
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "weak",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"releases_count": 13,
"latest_release_tag": "v1.6.1",
"releases_from_tags": true,
"days_since_latest_release": 2674,
"mean_days_between_releases": 4.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "13 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 13
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2674 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 2674
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~4.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 4.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 40,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 40 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 40
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 28,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"forks": 5,
"stars": 21,
"watchers": 6,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "21 stars",
"points": 21.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 21
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "5 forks",
"points": 5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 5
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "6 watchers",
"points": 3.9,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 6
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"readme_badges": 1,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [
"github.com"
],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 66,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "weak",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 24,
"top_contributor_share": 0.631
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 63% of commits",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 63
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "24 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 24
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 87,
"inputs": {
"merged_prs": 385,
"open_issues": 2,
"closed_issues": 8,
"prs_merged_7d": 0,
"prs_decided_7d": 0,
"prs_merged_30d": 0,
"prs_decided_30d": 0,
"issue_closed_ratio": 0.8,
"closed_unmerged_prs": 43,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "80% of issues closed",
"points": 33.6,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 80
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "385/428 decided PRs merged",
"points": 27,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 385,
"decided": 428
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"followers": 229,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "TykTechnologies",
"public_repos": 250,
"account_age_days": 3897
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "229 followers of TykTechnologies",
"points": 17,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 229,
"login": "TykTechnologies"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "250 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 250
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"packages": [
"github.com/TykTechnologies/graphql-go-tools"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 2674
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 2674 days ago",
"points": 4,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 2674
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "13 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 13
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "weak",
"name": "Engineering Quality",
"value": 44,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "4 out of 30 merged PRs checked by a CI test -- score normalized to 1",
"points": 2,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "critical",
"name": "Documentation",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": false,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 43,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 4.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "4 out of 30 merged PRs checked by a CI test -- score normalized to 1",
"points": 0.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected but not run on all commits",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "236 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 116 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 116
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 51,
"inputs": {
"source": "osv",
"advisories": 89,
"affected_packages": 12,
"assessed_packages": 116,
"unassessed_packages": 0,
"affected_by_severity": "critical 1, high 5, moderate 3, unknown 3",
"direct_affected_packages": 3
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "3 affected: github.com/buger/jsonparser 1.1.1 (high 7.5), github.com/eclipse/paho.mqtt.golang 1.2.0 (moderate 5.3), github.com/vektah/gqlparser/v2 2.5.1 (moderate 5.3)",
"points": 11.1,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 3,
"packages": "github.com/buger/jsonparser 1.1.1 (high 7.5), github.com/eclipse/paho.mqtt.golang 1.2.0 (moderate 5.3), github.com/vektah/gqlparser/v2 2.5.1 (moderate 5.3)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "3 advisory-carrying package(s) unaddressed past 90 days; oldest published 782 days ago",
"points": 27.5,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 3,
"oldest": 782
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 116,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 10
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 68,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.97,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "97 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 97,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"v2/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"examples/chat/go.mod",
"examples/federation/go.mod",
"examples/kafka_pubsub/go.mod",
"examples/kafka_pubsub/transactional_producer/go.mod",
"go.mod",
"v2/examples/chat/go.mod",
"v2/examples/federation/go.mod",
"v2/examples/kafka_pubsub/go.mod",
"v2/examples/kafka_pubsub/transactional_producer/go.mod",
"v2/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, v2/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, v2/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 2144248,
"source_files_sampled": 1198,
"oversized_source_files": 24
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "24/1198 source files over 60KB",
"points": 53.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 1198,
"oversized": 24
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "excellent",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": [
"examples/chat/schema.graphql",
"examples/federation/accounts/graph/schema.graphqls",
"examples/federation/products/graph/schema.graphqls",
"examples/federation/reviews/graph/schema.graphqls",
"pkg/astparser/testdata/big_schema.graphql",
"pkg/astparser/testdata/github.schema.graphql",
"pkg/astparser/testdata/introspection_normalized.graphql",
"pkg/astparser/testdata/introspectionquery.graphql",
"pkg/astparser/testdata/starwars.schema.graphql",
"pkg/astparser/testdata/todo.graphql",
"pkg/astprinter/testdata/introspectionquery.graphql",
"pkg/astprinter/testdata/starwars.schema.graphql",
"pkg/astvalidation/reference/testsgo/test_schema.graphql",
"pkg/codegen/testdata/schema.graphql",
"pkg/execution/graphql_definitions/directives/graphql_datasource.graphql",
"pkg/execution/graphql_definitions/directives/http_json_datasource.graphql",
"pkg/execution/graphql_definitions/directives/http_polling_stream_datasource.graphql",
"pkg/execution/graphql_definitions/directives/mapping.graphql",
"pkg/execution/graphql_definitions/directives/mqtt_datasource.graphql",
"pkg/execution/graphql_definitions/directives/nats_datasource.graphql",
"pkg/execution/graphql_definitions/directives/pipeline_datasource.graphql",
"pkg/execution/graphql_definitions/directives/static_datasource.graphql",
"pkg/execution/graphql_definitions/directives/transformation.graphql",
"pkg/execution/graphql_definitions/directives/wasm_datasource.graphql",
"pkg/execution/graphql_definitions/enums/http_method.graphql",
"pkg/execution/graphql_definitions/enums/mapping_mode.graphql",
"pkg/execution/graphql_definitions/enums/parameter_source.graphql",
"pkg/execution/graphql_definitions/enums/transformation_mode.graphql",
"pkg/execution/graphql_definitions/inputs/header.graphql",
"pkg/execution/graphql_definitions/inputs/parameter.graphql",
"pkg/execution/graphql_definitions/inputs/statuscode_typename_mapping.graphql",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls",
"pkg/imports/testdata/cycle/a/a.graphql",
"pkg/imports/testdata/cycle/b/b.graphql",
"pkg/imports/testdata/deep/deeper/custom_types.graphql",
"pkg/imports/testdata/import_cycle.graphql",
"pkg/imports/testdata/nested/nested.graphql",
"pkg/imports/testdata/nested2/nested2.graphql",
"pkg/imports/testdata/regexonly/flat.graphql",
"pkg/imports/testdata/regexonly/mutation.graphql",
"pkg/imports/testdata/regexonly/query.graphql",
"pkg/imports/testdata/scalars/json.graphql",
"pkg/imports/testdata/schema.graphql",
"pkg/imports/testdata/types/mutation.graphql",
"pkg/imports/testdata/types/query.graphql",
"pkg/introspection/testdata/interfaces_implementing_interfaces.graphql",
"pkg/introspection/testdata/starwars.schema.graphql",
"pkg/starwars/testdata/queries/interface_fragments_on_union.graphql",
"pkg/starwars/testdata/star_wars.graphql",
"pkg/testing/federationtesting/accounts/graph/schema.graphqls",
"pkg/testing/federationtesting/products/graph/schema.graphqls",
"pkg/testing/federationtesting/reviews/graph/schema.graphqls",
"pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql",
"pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql",
"pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql",
"pkg/testing/federationtesting/testdata/queries/merged_field.graphql",
"pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql",
"pkg/testing/subscriptiontesting/schema.graphql",
"v2/examples/chat/schema.graphql",
"v2/examples/federation/accounts/graph/schema.graphqls",
"v2/examples/federation/products/graph/schema.graphqls",
"v2/examples/federation/reviews/graph/schema.graphqls",
"v2/examples/kafka_pubsub/schema.graphql",
"v2/pkg/astparser/testdata/big_schema.graphql",
"v2/pkg/astparser/testdata/github.schema.graphql",
"v2/pkg/astparser/testdata/introspection_normalized.graphql",
"v2/pkg/astparser/testdata/introspectionquery.graphql",
"v2/pkg/astparser/testdata/starwars.schema.graphql",
"v2/pkg/astparser/testdata/todo.graphql",
"v2/pkg/astprinter/testdata/introspectionquery.graphql",
"v2/pkg/astprinter/testdata/starwars.schema.graphql",
"v2/pkg/astvalidation/reference/testsgo/test_schema.graphql",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls",
"v2/pkg/imports/testdata/cycle/a/a.graphql",
"v2/pkg/imports/testdata/cycle/b/b.graphql",
"v2/pkg/imports/testdata/deep/deeper/custom_types.graphql",
"v2/pkg/imports/testdata/import_cycle.graphql",
"v2/pkg/imports/testdata/nested/nested.graphql",
"v2/pkg/imports/testdata/nested2/nested2.graphql",
"v2/pkg/imports/testdata/regexonly/flat.graphql",
"v2/pkg/imports/testdata/regexonly/mutation.graphql",
"v2/pkg/imports/testdata/regexonly/query.graphql",
"v2/pkg/imports/testdata/scalars/json.graphql",
"v2/pkg/imports/testdata/schema.graphql",
"v2/pkg/imports/testdata/types/mutation.graphql",
"v2/pkg/imports/testdata/types/query.graphql",
"v2/pkg/introspection/testdata/interfaces_implementing_interfaces.graphql",
"v2/pkg/introspection/testdata/starwars.schema.graphql",
"v2/pkg/starwars/testdata/queries/interface_fragments_on_union.graphql",
"v2/pkg/starwars/testdata/star_wars.graphql",
"v2/pkg/testing/federationtesting/accounts/graph/schema.graphqls",
"v2/pkg/testing/federationtesting/products/graph/schema.graphqls",
"v2/pkg/testing/federationtesting/reviews/graph/schema.graphqls",
"v2/pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/merged_field.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql",
"v2/pkg/testing/subscriptiontesting/schema.graphql"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "examples/chat/schema.graphql, examples/federation/accounts/graph/schema.graphqls, examples/federation/products/graph/schema.graphqls, examples/federation/reviews/graph/schema.graphqls, pkg/astparser/testdata/big_schema.graphql, pkg/astparser/testdata/github.schema.graphql, pkg/astparser/testdata/introspection_normalized.graphql, pkg/astparser/testdata/introspectionquery.graphql, pkg/astparser/testdata/starwars.schema.graphql, pkg/astparser/testdata/todo.graphql, pkg/astprinter/testdata/introspectionquery.graphql, pkg/astprinter/testdata/starwars.schema.graphql, pkg/astvalidation/reference/testsgo/test_schema.graphql, pkg/codegen/testdata/schema.graphql, pkg/execution/graphql_definitions/directives/graphql_datasource.graphql, pkg/execution/graphql_definitions/directives/http_json_datasource.graphql, pkg/execution/graphql_definitions/directives/http_polling_stream_datasource.graphql, pkg/execution/graphql_definitions/directives/mapping.graphql, pkg/execution/graphql_definitions/directives/mqtt_datasource.graphql, pkg/execution/graphql_definitions/directives/nats_datasource.graphql, pkg/execution/graphql_definitions/directives/pipeline_datasource.graphql, pkg/execution/graphql_definitions/directives/static_datasource.graphql, pkg/execution/graphql_definitions/directives/transformation.graphql, pkg/execution/graphql_definitions/directives/wasm_datasource.graphql, pkg/execution/graphql_definitions/enums/http_method.graphql, pkg/execution/graphql_definitions/enums/mapping_mode.graphql, pkg/execution/graphql_definitions/enums/parameter_source.graphql, pkg/execution/graphql_definitions/enums/transformation_mode.graphql, pkg/execution/graphql_definitions/inputs/header.graphql, pkg/execution/graphql_definitions/inputs/parameter.graphql, pkg/execution/graphql_definitions/inputs/statuscode_typename_mapping.graphql, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls, pkg/imports/testdata/cycle/a/a.graphql, pkg/imports/testdata/cycle/b/b.graphql, pkg/imports/testdata/deep/deeper/custom_types.graphql, pkg/imports/testdata/import_cycle.graphql, pkg/imports/testdata/nested/nested.graphql, pkg/imports/testdata/nested2/nested2.graphql, pkg/imports/testdata/regexonly/flat.graphql, pkg/imports/testdata/regexonly/mutation.graphql, pkg/imports/testdata/regexonly/query.graphql, pkg/imports/testdata/scalars/json.graphql, pkg/imports/testdata/schema.graphql, pkg/imports/testdata/types/mutation.graphql, pkg/imports/testdata/types/query.graphql, pkg/introspection/testdata/interfaces_implementing_interfaces.graphql, pkg/introspection/testdata/starwars.schema.graphql, pkg/starwars/testdata/queries/interface_fragments_on_union.graphql, pkg/starwars/testdata/star_wars.graphql, pkg/testing/federationtesting/accounts/graph/schema.graphqls, pkg/testing/federationtesting/products/graph/schema.graphqls, pkg/testing/federationtesting/reviews/graph/schema.graphqls, pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql, pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql, pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql, pkg/testing/federationtesting/testdata/queries/merged_field.graphql, pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql, pkg/testing/subscriptiontesting/schema.graphql, v2/examples/chat/schema.graphql, v2/examples/federation/accounts/graph/schema.graphqls, v2/examples/federation/products/graph/schema.graphqls, v2/examples/federation/reviews/graph/schema.graphqls, v2/examples/kafka_pubsub/schema.graphql, v2/pkg/astparser/testdata/big_schema.graphql, v2/pkg/astparser/testdata/github.schema.graphql, v2/pkg/astparser/testdata/introspection_normalized.graphql, v2/pkg/astparser/testdata/introspectionquery.graphql, v2/pkg/astparser/testdata/starwars.schema.graphql, v2/pkg/astparser/testdata/todo.graphql, v2/pkg/astprinter/testdata/introspectionquery.graphql, v2/pkg/astprinter/testdata/starwars.schema.graphql, v2/pkg/astvalidation/reference/testsgo/test_schema.graphql, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls, v2/pkg/imports/testdata/cycle/a/a.graphql, v2/pkg/imports/testdata/cycle/b/b.graphql, v2/pkg/imports/testdata/deep/deeper/custom_types.graphql, v2/pkg/imports/testdata/import_cycle.graphql, v2/pkg/imports/testdata/nested/nested.graphql, v2/pkg/imports/testdata/nested2/nested2.graphql, v2/pkg/imports/testdata/regexonly/flat.graphql, v2/pkg/imports/testdata/regexonly/mutation.graphql, v2/pkg/imports/testdata/regexonly/query.graphql, v2/pkg/imports/testdata/scalars/json.graphql, v2/pkg/imports/testdata/schema.graphql, v2/pkg/imports/testdata/types/mutation.graphql, v2/pkg/imports/testdata/types/query.graphql, v2/pkg/introspection/testdata/interfaces_implementing_interfaces.graphql, v2/pkg/introspection/testdata/starwars.schema.graphql, v2/pkg/starwars/testdata/queries/interface_fragments_on_union.graphql, v2/pkg/starwars/testdata/star_wars.graphql, v2/pkg/testing/federationtesting/accounts/graph/schema.graphqls, v2/pkg/testing/federationtesting/products/graph/schema.graphqls, v2/pkg/testing/federationtesting/reviews/graph/schema.graphqls, v2/pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql, v2/pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql, v2/pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql, v2/pkg/testing/federationtesting/testdata/queries/merged_field.graphql, v2/pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql, v2/pkg/testing/subscriptiontesting/schema.graphql",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples/chat/schema.graphql, examples/federation/accounts/graph/schema.graphqls, examples/federation/products/graph/schema.graphqls, examples/federation/reviews/graph/schema.graphqls, pkg/astparser/testdata/big_schema.graphql, pkg/astparser/testdata/github.schema.graphql, pkg/astparser/testdata/introspection_normalized.graphql, pkg/astparser/testdata/introspectionquery.graphql, pkg/astparser/testdata/starwars.schema.graphql, pkg/astparser/testdata/todo.graphql, pkg/astprinter/testdata/introspectionquery.graphql, pkg/astprinter/testdata/starwars.schema.graphql, pkg/astvalidation/reference/testsgo/test_schema.graphql, pkg/codegen/testdata/schema.graphql, pkg/execution/graphql_definitions/directives/graphql_datasource.graphql, pkg/execution/graphql_definitions/directives/http_json_datasource.graphql, pkg/execution/graphql_definitions/directives/http_polling_stream_datasource.graphql, pkg/execution/graphql_definitions/directives/mapping.graphql, pkg/execution/graphql_definitions/directives/mqtt_datasource.graphql, pkg/execution/graphql_definitions/directives/nats_datasource.graphql, pkg/execution/graphql_definitions/directives/pipeline_datasource.graphql, pkg/execution/graphql_definitions/directives/static_datasource.graphql, pkg/execution/graphql_definitions/directives/transformation.graphql, pkg/execution/graphql_definitions/directives/wasm_datasource.graphql, pkg/execution/graphql_definitions/enums/http_method.graphql, pkg/execution/graphql_definitions/enums/mapping_mode.graphql, pkg/execution/graphql_definitions/enums/parameter_source.graphql, pkg/execution/graphql_definitions/enums/transformation_mode.graphql, pkg/execution/graphql_definitions/inputs/header.graphql, pkg/execution/graphql_definitions/inputs/parameter.graphql, pkg/execution/graphql_definitions/inputs/statuscode_typename_mapping.graphql, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls, pkg/imports/testdata/cycle/a/a.graphql, pkg/imports/testdata/cycle/b/b.graphql, pkg/imports/testdata/deep/deeper/custom_types.graphql, pkg/imports/testdata/import_cycle.graphql, pkg/imports/testdata/nested/nested.graphql, pkg/imports/testdata/nested2/nested2.graphql, pkg/imports/testdata/regexonly/flat.graphql, pkg/imports/testdata/regexonly/mutation.graphql, pkg/imports/testdata/regexonly/query.graphql, pkg/imports/testdata/scalars/json.graphql, pkg/imports/testdata/schema.graphql, pkg/imports/testdata/types/mutation.graphql, pkg/imports/testdata/types/query.graphql, pkg/introspection/testdata/interfaces_implementing_interfaces.graphql, pkg/introspection/testdata/starwars.schema.graphql, pkg/starwars/testdata/queries/interface_fragments_on_union.graphql, pkg/starwars/testdata/star_wars.graphql, pkg/testing/federationtesting/accounts/graph/schema.graphqls, pkg/testing/federationtesting/products/graph/schema.graphqls, pkg/testing/federationtesting/reviews/graph/schema.graphqls, pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql, pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql, pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql, pkg/testing/federationtesting/testdata/queries/merged_field.graphql, pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql, pkg/testing/subscriptiontesting/schema.graphql, v2/examples/chat/schema.graphql, v2/examples/federation/accounts/graph/schema.graphqls, v2/examples/federation/products/graph/schema.graphqls, v2/examples/federation/reviews/graph/schema.graphqls, v2/examples/kafka_pubsub/schema.graphql, v2/pkg/astparser/testdata/big_schema.graphql, v2/pkg/astparser/testdata/github.schema.graphql, v2/pkg/astparser/testdata/introspection_normalized.graphql, v2/pkg/astparser/testdata/introspectionquery.graphql, v2/pkg/astparser/testdata/starwars.schema.graphql, v2/pkg/astparser/testdata/todo.graphql, v2/pkg/astprinter/testdata/introspectionquery.graphql, v2/pkg/astprinter/testdata/starwars.schema.graphql, v2/pkg/astvalidation/reference/testsgo/test_schema.graphql, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls, v2/pkg/imports/testdata/cycle/a/a.graphql, v2/pkg/imports/testdata/cycle/b/b.graphql, v2/pkg/imports/testdata/deep/deeper/custom_types.graphql, v2/pkg/imports/testdata/import_cycle.graphql, v2/pkg/imports/testdata/nested/nested.graphql, v2/pkg/imports/testdata/nested2/nested2.graphql, v2/pkg/imports/testdata/regexonly/flat.graphql, v2/pkg/imports/testdata/regexonly/mutation.graphql, v2/pkg/imports/testdata/regexonly/query.graphql, v2/pkg/imports/testdata/scalars/json.graphql, v2/pkg/imports/testdata/schema.graphql, v2/pkg/imports/testdata/types/mutation.graphql, v2/pkg/imports/testdata/types/query.graphql, v2/pkg/introspection/testdata/interfaces_implementing_interfaces.graphql, v2/pkg/introspection/testdata/starwars.schema.graphql, v2/pkg/starwars/testdata/queries/interface_fragments_on_union.graphql, v2/pkg/starwars/testdata/star_wars.graphql, v2/pkg/testing/federationtesting/accounts/graph/schema.graphqls, v2/pkg/testing/federationtesting/products/graph/schema.graphqls, v2/pkg/testing/federationtesting/reviews/graph/schema.graphqls, v2/pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql, v2/pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql, v2/pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql, v2/pkg/testing/federationtesting/testdata/queries/merged_field.graphql, v2/pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql, v2/pkg/testing/subscriptiontesting/schema.graphql"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"cli",
"library"
],
"scores": {
"cli": 7,
"library": 6,
"network-service": 3
},
"primary": "cli",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 6
},
{
"tier": "dependencies",
"label": "cli",
"source": "dep:github.com/spf13/cobra",
"weight": 4
},
{
"tier": "structure",
"label": "cli",
"source": "tree.go_main",
"weight": 3
},
{
"tier": "structure",
"label": "network-service",
"source": "api_schema",
"weight": 3
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Community profile unavailable"
],
"report_type": "repository",
"generated_at": "2026-08-04T05:55:35.059236Z",
"schema_version": "0.30.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/TykTechnologies/graphql-go-tools.svg",
"full_name": "TykTechnologies/graphql-go-tools",
"license_state": "standard",
"license_spdx": "MIT"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con TykTechnologies/graphql-go-tools. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v2.3.1, esquema v0.30.0 — metodología completa · wiki de métricas.
