alphagov/gds-api-adapters tiene un índice de salud de 93 sobre 100, lo que lo sitúa en la banda Excepcional. Su puntuación más alta es Sustainability & Governance (92/100) y la más baja, AI Readiness (44/100). Se actualizó por última vez hoy. 13 personas concentran la mayor parte del trabajo reciente.
93
global / 100
Excepcional
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala estandarizada de 1 a 100. El resultado global parte de su media ponderada, calibrada contra la distribución del registro público para que las bandas tengan significado percentil; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe un límite «En riesgo» de 34.
93
Excepcional93-100El nivel más alto del registro (≈ el 5% superior); cumple prácticamente todos los criterios evaluados
Excelente80-92Sólido en todos los frentes; carencias menores
Bueno65-79Saludable; carencias limitadas y manejables
Moderado50-64Aceptable con carencias notables; se recomienda revisión
Débil35-49Debilidades sustanciales en varias áreas
En riesgo20-34Debilidades significativas; su adopción exige cautela
Crítico1-19Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
El resultado global ponderado 79 se calibra a 93 en la escala publicada del índice (calibración del registro 2026-08-02).
Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido
0/25
Dependencias indirectas libres de avisos conocidos — el conjunto transitivo no es separable de las dependencias de desarrollo y prueba en este alcance
0/40
Sin avisos pendientes — ningún aviso tiene fecha de publicación
Datos de entrada utilizados
source
osv
advisories
0
affected_packages
0
assessed_packages
1
unassessed_packages
22
affected_by_severity
none
direct_affected_packages
0
Excluidos de la puntuación (sin datos o no aplicable): Dependencias indirectas libres de avisos conocidos, Sin avisos pendientes. Los pesos restantes se han renormalizado. Se cotejaron 1 dependencias resueltas con OSV. 22 no pudieron evaluarse: sin versión resuelta, ecosistema no admitido o fuera de la lista de paquetes informada. Este repositorio no publica ningún paquete que el índice resuelva, por lo que se evaluó en su lugar el grafo de dependencias del repositorio. Ese grafo mezcla fijaciones de desarrollo y prueba con las dependencias distribuidas, de modo que solo se puntúan las dependencias declaradas en tiempo de ejecución; los hallazgos transitivos se informan como contexto y quedan excluidos de la puntuación. No se analiza la alcanzabilidad.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Tiene un peso deliberadamente pequeño (4%): las herramientas para agentes son una señal real de mantenimiento, pero un repositorio sin ninguna puede alcanzar igualmente 100/100.
Código verificable por tipos — Ruby sin configuración de verificación de tipos
55/55
Tamaños de archivo manejables — 0/123 archivos fuente de más de 60 KB
Datos de entrada utilizados
primary_language
Ruby
largest_source_bytes
40.393
source_files_sampled
123
oversized_source_files
0
Datos clave
21estrellas de GitHub
99contribuidores
126commits en los últimos 12 meses
0días desde el último push
100versiones publicadas
13factor bus
1issues abiertas
RubyGemsecosistemas de paquetes
Advertencias de recopilación de datos
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Más detalle
Historial de estrellas y forks 0 ★ / 13 ⇿
0Estrellas
13Forks
93Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Mayor 35Menor 44Parche 14
Cada punto abarca 12 días.
OpenSSF Scorecard 7.8 / 10
7.8agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-27 10:14 UTC
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 0 paquetes directos y 23 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
Registro
Paquete
Versión
Relación
RubyGems
addressable
—
indirecta
RubyGems
byebug
—
indirecta
RubyGems
climate_control
—
indirecta
RubyGems
govuk_schemas
—
indirecta
RubyGems
link_header
—
indirecta
RubyGems
minitest
—
indirecta
RubyGems
minitest-around
—
indirecta
RubyGems
mocha
—
indirecta
RubyGems
null_logger
—
indirecta
RubyGems
pact
—
indirecta
RubyGems
pact-consumer-minitest
—
indirecta
RubyGems
pact-mock_service
—
indirecta
RubyGems
pact_broker-client
—
indirecta
RubyGems
plek
—
indirecta
RubyGems
rack
—
indirecta
RubyGems
rack-test
—
indirecta
RubyGems
rake
—
indirecta
RubyGems
rdoc
—
indirecta
RubyGems
rest-client
—
indirecta
RubyGems
rubocop-govuk
5.2.1
indirecta
RubyGems
simplecov
—
indirecta
RubyGems
timecop
—
indirecta
RubyGems
webmock
—
indirecta
Avisos de dependencias 0
Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 1 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 0 tienen avisos conocidos, de los cuales 0 son directas. 22 no pudieron evaluarse: sin versión resuelta, ecosistema no admitido, o fuera de la lista de paquetes informada.
Ningún aviso conocido afecta a las dependencias evaluadas.
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"govuk"
],
"is_fork": false,
"size_kb": 3672,
"has_wiki": false,
"homepage": "http://www.rubydoc.info/github/alphagov/gds-api-adapters",
"languages": {
"Ruby": 583301
},
"pushed_at": "2026-07-27T10:08:02Z",
"created_at": "2011-12-02T14:13:57Z",
"owner_type": "Organization",
"updated_at": "2026-07-27T10:06:12Z",
"description": "A set of API adapters to work with the GOV.UK APIs",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Ruby",
"significant_languages": [
"Ruby"
]
},
"owner": {
"blog": "https://gds.blog.gov.uk/",
"name": "Government Digital Service",
"type": "Organization",
"login": "alphagov",
"company": null,
"location": "The White Chapel Building, 10 Whitechapel High Street, London E1 8QS",
"followers": 1576,
"avatar_url": "https://avatars.githubusercontent.com/u/596977?v=4",
"created_at": "2011-02-02T15:45:37Z",
"is_verified": null,
"public_repos": 1528,
"account_age_days": 5653
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v103.4.0",
"kind": "minor",
"published_at": "2026-07-27T10:04:44Z"
},
{
"tag": "v103.3.1",
"kind": "patch",
"published_at": "2026-04-20T11:37:43Z"
},
{
"tag": "v103.3.0",
"kind": "minor",
"published_at": "2026-04-09T14:01:54Z"
},
{
"tag": "v103.2.0",
"kind": "minor",
"published_at": "2026-04-01T09:05:39Z"
},
{
"tag": "v103.1.1",
"kind": "patch",
"published_at": "2026-03-30T16:03:54Z"
},
{
"tag": "v103.1.0",
"kind": "minor",
"published_at": "2026-03-10T08:39:03Z"
},
{
"tag": "v103.0.0",
"kind": "major",
"published_at": "2026-03-02T09:50:37Z"
},
{
"tag": "v102.0.0",
"kind": "major",
"published_at": "2026-01-27T11:34:22Z"
},
{
"tag": "v101.2.0",
"kind": "minor",
"published_at": "2025-12-17T16:53:45Z"
},
{
"tag": "v101.1.0",
"kind": "minor",
"published_at": "2025-12-17T10:00:27Z"
},
{
"tag": "v101.0.0",
"kind": "major",
"published_at": "2025-08-14T14:45:59Z"
},
{
"tag": "v100.0.0",
"kind": "major",
"published_at": "2025-08-13T12:13:12Z"
},
{
"tag": "v99.3.0",
"kind": "minor",
"published_at": "2025-08-08T14:53:34Z"
},
{
"tag": "v99.2.0",
"kind": "minor",
"published_at": "2025-05-09T07:09:56Z"
},
{
"tag": "v99.1.0",
"kind": "minor",
"published_at": "2025-05-08T12:38:19Z"
},
{
"tag": "v99.0.0",
"kind": "major",
"published_at": "2025-03-26T10:21:24Z"
},
{
"tag": "v98.4.0",
"kind": "minor",
"published_at": "2025-03-19T15:43:53Z"
},
{
"tag": "v98.3.0",
"kind": "minor",
"published_at": "2025-03-12T15:55:40Z"
},
{
"tag": "v98.2.0",
"kind": "minor",
"published_at": "2025-01-06T13:57:11Z"
},
{
"tag": "v98.1.0",
"kind": "minor",
"published_at": "2024-12-18T12:09:18Z"
},
{
"tag": "v98.0.0",
"kind": "major",
"published_at": "2024-12-17T14:03:13Z"
},
{
"tag": "v97.6.0",
"kind": "minor",
"published_at": "2024-12-09T16:29:31Z"
},
{
"tag": "v97.5.0",
"kind": "minor",
"published_at": "2024-12-03T08:00:42Z"
},
{
"tag": "v97.4.1",
"kind": "patch",
"published_at": "2024-11-28T14:51:15Z"
},
{
"tag": "v97.4.0",
"kind": "minor",
"published_at": "2024-11-26T14:46:54Z"
},
{
"tag": "v97.3.0",
"kind": "minor",
"published_at": "2024-11-14T12:13:19Z"
},
{
"tag": "v97.2.0",
"kind": "minor",
"published_at": "2024-11-13T15:59:08Z"
},
{
"tag": "v97.1.0",
"kind": "minor",
"published_at": "2024-10-30T14:59:43Z"
},
{
"tag": "v97.0.0",
"kind": "major",
"published_at": "2024-10-17T09:03:00Z"
},
{
"tag": "v96.0.3",
"kind": "patch",
"published_at": "2024-08-30T15:40:09Z"
},
{
"tag": "v96.0.2",
"kind": "patch",
"published_at": "2024-06-25T12:41:52Z"
},
{
"tag": "v96.0.1",
"kind": "patch",
"published_at": "2024-05-21T09:21:25Z"
},
{
"tag": "v96.0.0",
"kind": "major",
"published_at": "2024-05-09T15:48:06Z"
},
{
"tag": "v95.1.0",
"kind": "minor",
"published_at": "2024-04-29T16:23:50Z"
},
{
"tag": "v95.0.1",
"kind": "patch",
"published_at": "2024-03-27T13:37:26Z"
},
{
"tag": "v95.0.0",
"kind": "major",
"published_at": "2024-03-26T10:50:19Z"
},
{
"tag": "v94.0.0",
"kind": "major",
"published_at": "2024-02-28T11:43:10Z"
},
{
"tag": "v93.0.0",
"kind": "major",
"published_at": "2024-01-25T11:07:44Z"
},
{
"tag": "v92.1.0",
"kind": "minor",
"published_at": "2024-01-11T14:33:20Z"
},
{
"tag": "v92.0.0",
"kind": "major",
"published_at": "2023-12-15T11:11:58Z"
},
{
"tag": "v91.1.0",
"kind": "minor",
"published_at": "2023-09-14T09:53:50Z"
},
{
"tag": "v91.0.0",
"kind": "major",
"published_at": "2023-09-11T13:43:34Z"
},
{
"tag": "v90.0.0",
"kind": "major",
"published_at": "2023-07-31T14:19:17Z"
},
{
"tag": "v89.0.0",
"kind": "major",
"published_at": "2023-07-19T15:11:42Z"
},
{
"tag": "v88.2.0",
"kind": "minor",
"published_at": "2023-06-06T11:26:47Z"
},
{
"tag": "v88.1.0",
"kind": "minor",
"published_at": "2023-05-30T10:07:21Z"
},
{
"tag": "v88.0.0",
"kind": "major",
"published_at": "2023-05-23T14:05:13Z"
},
{
"tag": "v87.1.0",
"kind": "minor",
"published_at": "2023-05-10T08:48:22Z"
},
{
"tag": "v87.0.0",
"kind": "major",
"published_at": "2023-03-29T13:25:14Z"
},
{
"tag": "v86.0.0",
"kind": "major",
"published_at": "2023-02-20T15:31:01Z"
},
{
"tag": "v85.0.1",
"kind": "patch",
"published_at": "2023-01-30T12:33:41Z"
},
{
"tag": "v85.0.0",
"kind": "major",
"published_at": "2022-12-05T10:29:58Z"
},
{
"tag": "v84.0.0",
"kind": "major",
"published_at": "2022-10-21T13:33:17Z"
},
{
"tag": "v83.0.0",
"kind": "major",
"published_at": "2022-10-03T16:00:34Z"
},
{
"tag": "v82.0.0",
"kind": "major",
"published_at": "2022-09-12T15:10:22Z"
},
{
"tag": "v81.0.4",
"kind": "patch",
"published_at": "2022-08-03T13:10:27Z"
},
{
"tag": "v81.0.3",
"kind": "patch",
"published_at": "2022-08-01T14:05:47Z"
},
{
"tag": "v81.0.2",
"kind": "patch",
"published_at": "2022-07-26T14:37:57Z"
},
{
"tag": "v81.0.1",
"kind": "patch",
"published_at": "2022-07-25T12:11:44Z"
},
{
"tag": "v81.0.0",
"kind": "major",
"published_at": "2022-07-12T13:44:12Z"
},
{
"tag": "v80.0.1",
"kind": "patch",
"published_at": "2022-06-29T12:05:49Z"
},
{
"tag": "v80.0.0",
"kind": "major",
"published_at": "2022-06-21T12:17:12Z"
},
{
"tag": "v79.2.0",
"kind": "minor",
"published_at": "2022-05-24T08:55:46Z"
},
{
"tag": "v79.1.2",
"kind": "patch",
"published_at": "2022-04-06T16:20:02Z"
},
{
"tag": "v79.1.1",
"kind": "patch",
"published_at": "2022-03-29T09:04:08Z"
},
{
"tag": "v79.1.0",
"kind": "minor",
"published_at": "2022-03-08T16:29:55Z"
},
{
"tag": "v79.0.0",
"kind": "major",
"published_at": "2022-01-25T15:39:29Z"
},
{
"tag": "v78.1.0",
"kind": "minor",
"published_at": "2022-01-19T16:29:21Z"
},
{
"tag": "v78.0.0",
"kind": "major",
"published_at": "2022-01-18T17:29:40Z"
},
{
"tag": "v77.1.0",
"kind": "minor",
"published_at": "2022-01-18T14:40:19Z"
},
{
"tag": "v77.0.0",
"kind": "major",
"published_at": "2021-12-10T10:53:32Z"
},
{
"tag": "v76.0.0",
"kind": "major",
"published_at": "2021-12-07T16:30:37Z"
},
{
"tag": "v75.3.0",
"kind": "minor",
"published_at": "2021-11-03T13:09:31Z"
},
{
"tag": "v75.2.0",
"kind": "minor",
"published_at": "2021-10-15T08:29:27Z"
},
{
"tag": "v75.1.0",
"kind": "minor",
"published_at": "2021-10-14T13:56:53Z"
},
{
"tag": "v75.0.0",
"kind": "major",
"published_at": "2021-09-28T16:20:58Z"
},
{
"tag": "v74.0.0",
"kind": "major",
"published_at": "2021-09-22T16:15:47Z"
},
{
"tag": "v73.1.0",
"kind": "minor",
"published_at": "2021-09-08T10:08:45Z"
},
{
"tag": "v73.0.0",
"kind": "major",
"published_at": "2021-08-26T10:27:03Z"
},
{
"tag": "v72.1.0",
"kind": "minor",
"published_at": "2021-07-27T14:06:16Z"
},
{
"tag": "v72.0.0",
"kind": "major",
"published_at": "2021-07-13T15:18:17Z"
},
{
"tag": "v71.9.0",
"kind": "minor",
"published_at": "2021-07-06T12:09:05Z"
},
{
"tag": "v71.8.0",
"kind": "minor",
"published_at": "2021-07-02T11:11:36Z"
},
{
"tag": "v71.7.0",
"kind": "minor",
"published_at": "2021-06-29T14:42:20Z"
},
{
"tag": "v71.6.0",
"kind": "minor",
"published_at": "2021-06-23T14:27:48Z"
},
{
"tag": "v71.5.0",
"kind": "minor",
"published_at": "2021-06-18T09:21:03Z"
},
{
"tag": "v71.4.0",
"kind": "minor",
"published_at": "2021-06-10T13:28:58Z"
},
{
"tag": "v71.3.0",
"kind": "minor",
"published_at": "2021-06-07T15:17:23Z"
},
{
"tag": "v71.2.0",
"kind": "minor",
"published_at": "2021-05-25T10:23:19Z"
},
{
"tag": "v71.1.0",
"kind": "minor",
"published_at": "2021-05-06T13:50:04Z"
},
{
"tag": "v71.0.0",
"kind": "major",
"published_at": "2021-03-22T13:50:28Z"
},
{
"tag": "v70.0.0",
"kind": "major",
"published_at": "2021-03-15T10:15:50Z"
},
{
"tag": "v69.3.0",
"kind": "minor",
"published_at": "2021-01-25T13:26:11Z"
},
{
"tag": "v69.2.0",
"kind": "minor",
"published_at": "2021-01-20T13:57:59Z"
},
{
"tag": "v69.1.0",
"kind": "minor",
"published_at": "2021-01-19T14:20:06Z"
},
{
"tag": "v69.0.0",
"kind": "major",
"published_at": "2021-01-18T13:42:42Z"
},
{
"tag": "v68.2.0",
"kind": "minor",
"published_at": "2021-01-06T12:59:15Z"
},
{
"tag": "v68.1.0",
"kind": "minor",
"published_at": "2021-01-05T15:33:41Z"
},
{
"tag": "v68.0.0",
"kind": "major",
"published_at": "2020-12-18T09:18:33Z"
},
{
"tag": "v67.2.1",
"kind": "patch",
"published_at": "2020-12-10T09:19:11Z"
}
],
"recent_commits": [
{
"oid": "d9d389c7ea5eebdb5c6c722245da7749a75de375",
"body": "Release 103.4.0",
"is_bot": false,
"headline": "Merge pull request #1412 from alphagov/release-104.4.0",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-27T10:04:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8de05691efede1b40ca7d07beebde7285ac78efc",
"body": null,
"is_bot": false,
"headline": "Release 103.4.0",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-27T09:51:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62394c927f371eb15e157e8df6441902681ad412",
"body": "Improve RFC-192 validator method",
"is_bot": false,
"headline": "Merge pull request #1411 from alphagov/rfc-192-adjust-validator",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-27T09:47:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e8ebb927c4e75253a08ccb23655553e65373114",
"body": "Co-authored-by: Bruce Bolt <6329861+brucebolt@users.noreply.github.com>",
"is_bot": false,
"headline": "Update test/validators/base_path_validator_test.rb",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-27T08:25:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "133988b48b976d36f96951db4f525cbe1ffa2a71",
"body": "- Remove \"Path\" from the front of all error messages - unnecessary because context\n is provided by the error key\n- We're using a mixture of must/cannot/contains, adjust that all to must/must not\n- Although it probably isn't important, 512 bytes and 512 characters might not\n be the same, so at least keep the language correct.",
"is_bot": false,
"headline": "Standardise language in error messages",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T18:48:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7cb74321c59e27bb16d7f68df52c80e68f08a4b",
"body": "- The primary user of errors is going to be publishing-api, secondary users the\n publishing apps. So update the errors to return codes similar to the ones that\n publishing-api returns at the moment (base_path_invalid and path_too_long).\n- At some future time we might make these more varied, but these two are\n being returned by publishing-api now, so returning them will help keep\n it compatible.",
"is_bot": false,
"headline": "Return hash of errors with codes",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:39:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7371e7e18f76cae38718534a8891d631aa05a67a",
"body": "- We weren't covering the nil path, and adding the test showed up that some\n of the error tests rely on the base_path not being nil (okay in the valid? method\n where the ||'s shortcut returning false, but we need to manually shortcut\n in the errors method.",
"is_bot": false,
"headline": "Improve nil handling",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:33:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "139c80e28a0921b87f74ae55a53d489f011d2846",
"body": "- This regex was actually testing the structure more thoroughly than it needs\n to to detect invalid_chars? Now that we're explicitly testing if the path is\n a single / (and we're testing that there are no runs of // .. and the path doesn't\n end in a .) we can simplify this down to just testing that the path is entirely\n made of allowed characters (in any order, because other tests are checking\n that).",
"is_bot": false,
"headline": "Simplify invalid_chars? regex",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:32:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ddb4785c5b72681e1e05f0a3fcff719438e264c6",
"body": "- We're implicitly testing this in the invalid_chars? method, but that's actually\n not doing what it says (it's actually testing both chars _and_ structure of the\n path), so break out an explicit test here so we can simplify invalid_chars? in\n the next commit.",
"is_bot": false,
"headline": "Explicitly test for no leading slash.",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:27:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e3f06e5a98c4c68fcf4a0427137f8300ff29912",
"body": "- The 511 figure came from a misreading of the existing publishing-api regex,\n which is 511 chars _plus_ the leading slash. The RFC has now been updated,\n we adjust here to 512 because it's more recognisable.",
"is_bot": false,
"headline": "Update max base_path size from 511 chars to 512",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:22:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad33e42872399ac229e2b1d34e20bea53bafcd06",
"body": "- It's important we don't miss any branches in these tests, and this will help.",
"is_bot": false,
"headline": "Turn on branch coverage report",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:16:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "689b03726ad877b907b8e30bb146b124e9ed543c",
"body": "…2ca4\n\nUpdate simplecov requirement from ~> 0.21 to ~> 1.0 in the test group",
"is_bot": false,
"headline": "Merge pull request #1410 from alphagov/dependabot/bundler/test-eb6996…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-07-21T12:08:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcda533bbd0e7b9818d3836aed891c86218f1fd5",
"body": "…ons/checkout-7.0.1\n\nBump actions/checkout from 7.0.0 to 7.0.1",
"is_bot": false,
"headline": "Merge pull request #1408 from alphagov/dependabot/github_actions/acti…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-07-21T11:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82c7b08f0c0de35bf9686bf40db1ddbd3213acb6",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb9\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 7.0.0 to 7.0.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T11:18:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "da43243d6b8725edf72fa8ed019e857726fd1208",
"body": "…/setup-ruby-1.319.0\n\nBump ruby/setup-ruby from 1.316.0 to 1.319.0",
"is_bot": false,
"headline": "Merge pull request #1409 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-07-21T11:16:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ab824157ecfb78b9a935bf13e9ec1a4c1672526",
"body": "Add RFC-192 compliant base path validator",
"is_bot": false,
"headline": "Merge pull request #1406 from alphagov/rfc-192-simplify-base-paths",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T08:09:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d29bcf9da4d3736050dba64f32aa31425dbe941a",
"body": "Updates the requirements on [simplecov](https://github.com/simplecov-ruby/simplecov) to permit the latest version.\n\nUpdates `simplecov` to 1.0.1\n- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)\n- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)\n-\n[…]\n-\nupdated-dependencies:\n- dependency-name: simplecov\n dependency-version: 1.0.1\n dependency-type: direct:development\n dependency-group: test\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update simplecov requirement from ~> 0.21 to ~> 1.0 in the test group",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T07:03:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "242b3bc4855181940edcc0668bd57d7021f25adc",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.316.0 to 1.319.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/d45b1a4e94b71acab930e56e\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.319.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.316.0 to 1.319.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T07:03:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "776ccfdca12cd0c6ed22c613203594d14d7ebcbc",
"body": "- Implements validation based of the suggestions in RFC-192\n (https://github.com/alphagov/govuk-rfcs/pull/192)\n- allowed paths are 511 chars or shorter\n- they contain only lowercase letters and numbers, periods, forward slashes and dashes (minus signs)\n- they do not contain runs of forward slashes or periods\n- they do not end in a period",
"is_bot": false,
"headline": "Add base_path validator",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-20T15:15:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89dfee963bc1f77f18c55b26fcfc1413cee297be",
"body": "…/setup-ruby-1.316.0\n\nBump ruby/setup-ruby from 1.314.0 to 1.316.0",
"is_bot": false,
"headline": "Merge pull request #1407 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-07-07T12:35:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "236a458e54c626a469b4d04af7c5d3a4f6d48ce7",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.314.0 to 1.316.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/9eb537ca036ebaed86729dcb\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.316.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.314.0 to 1.316.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-07T07:02:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d0f81676baa63fd548a16707d8e6a1eed00d4b1e",
"body": "…ons/checkout-7.0.0\n\nBump actions/checkout from 6.0.3 to 7.0.0",
"is_bot": false,
"headline": "Merge pull request #1405 from alphagov/dependabot/github_actions/acti…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-06-23T11:29:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9413940685ce5122167b34f82877bdd2e1ca7fc2",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b43\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6.0.3 to 7.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T11:24:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "55f020532524c61b3179a46044f61ebb710df7ba",
"body": "…/setup-ruby-1.314.0\n\nBump ruby/setup-ruby from 1.313.0 to 1.314.0",
"is_bot": false,
"headline": "Merge pull request #1404 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-06-23T11:22:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da9115f588c0b92d6eb7780cd2c23f9a0f50416f",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.313.0 to 1.314.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/89f90524b88a01fe6e0b7322\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.314.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.313.0 to 1.314.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T07:02:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "342ce60fc37d5de76367136213d0f65455a3670c",
"body": "…rs-test\n\nUpdate search autocomplete tests",
"is_bot": false,
"headline": "Merge pull request #1402 from alphagov/SCH-2146-Update-GDS-API-adapte…",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-06-19T12:49:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "524d54f277ceba9fcefb82eda0ab126cafadf97a",
"body": "…/setup-ruby-1.313.0\n\nBump ruby/setup-ruby from 1.310.0 to 1.313.0",
"is_bot": false,
"headline": "Merge pull request #1403 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-06-16T15:02:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c131eee2ec0c3e806d8ef3712ad7034ba17e722e",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.310.0 to 1.313.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/afeafc3d1ab54a631816aba4\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.313.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.310.0 to 1.313.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-16T07:03:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "791312fca5800c1c661250270d25250f7011009f",
"body": "We no longer raise internal errors in search-api-v2 if GCP times out or\nitself raises an internal error:\nhttps://github.com/alphagov/search-api-v2/pull/677",
"is_bot": false,
"headline": "Update search autocomplete tests",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-06-12T16:15:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "017768c7a4637334321855a51c47b8a36385ae42",
"body": "…ons/checkout-6.0.3\n\nBump actions/checkout from 6.0.2 to 6.0.3",
"is_bot": false,
"headline": "Merge pull request #1400 from alphagov/dependabot/github_actions/acti…",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-06-09T10:41:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c2df6f015ee404866592bdcb9f12dd1c3ce1eaf",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n dependency-version: 6.0.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6.0.2 to 6.0.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T07:03:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cd97e2d345aa130cfeabaed1712bfedfc00a77dd",
"body": "…/setup-ruby-1.310.0\n\nBump ruby/setup-ruby from 1.308.0 to 1.310.0",
"is_bot": false,
"headline": "Merge pull request #1399 from alphagov/dependabot/github_actions/ruby…",
"author_name": "callumknights",
"author_login": "callumknights",
"committed_at": "2026-06-03T11:25:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b44e4a4e0f53d21eef8a90778091b09f5a6c7b55",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.308.0 to 1.310.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/97ecb7b512899eb71ab1bf23\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.310.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.308.0 to 1.310.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-03T07:06:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "38a70d117651633e875a3172c0d7ef7db93c1fa5",
"body": "[PP-7718] Pin SHAs for third-party actions",
"is_bot": false,
"headline": "Merge pull request #1398 from alphagov/pin_gha_actions_to_hashes",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-05-20T16:34:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5af2373416153757241409beaf8a27a15598db1f",
"body": "As per policy: https://docs.publishing.service.gov.uk/manual/test-and-build-a-project-with-github-actions.html#pin-untrusted-github-actions-to-a-commit-sha",
"is_bot": false,
"headline": "Pins non-alphagov actions to a commit SHA",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-05-20T16:21:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6464203ff965c399c998affec606731144a3b2fc",
"body": "…/setup-ruby-1.308.0\n\nBump ruby/setup-ruby from 1.306.0 to 1.308.0",
"is_bot": false,
"headline": "Merge pull request #1397 from alphagov/dependabot/github_actions/ruby…",
"author_name": "callumknights",
"author_login": "callumknights",
"committed_at": "2026-05-20T15:28:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d152089ac60975a8e7bf1b54c4e7dc8f634df852",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.306.0 to 1.308.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/v1.306.0...v1.308.0)\n\n--\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.308.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.306.0 to 1.308.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-19T19:29:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "97dba5f9e1c8017542f6fd0a08641755216dff4e",
"body": "[PP-7606] Update pact tests for Publishing API error responses",
"is_bot": false,
"headline": "Merge pull request #1395 from alphagov/publishing-api-error-codes",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-05-19T14:20:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ecca98e2e56963d468a1eb81bdc5319294e3bf2",
"body": "Update team name in PR template",
"is_bot": false,
"headline": "Merge pull request #1396 from alphagov/update-team-name-pr-template",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-05-19T09:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d270f4750b7d8337be04f11c4ad92d3c90ffcc8",
"body": "The team name has changed, so updating the PR template to reflect this.",
"is_bot": false,
"headline": "Update team name in PR template",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-05-19T07:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18f661b8429a05ec7f847783a6af774566fcbabf",
"body": "Publishing API will includes error_code in its error responses. It is possible\nthat multiple validation fail simultaneously. In such cases, the top-level\nerror_code would be multiple_validation_errors so the `fields` property is\nexpanded to provide detailed information about each individual failure,\n[…]\n field represented as a hash containing both a human-readable error and a\nmachine-readable code.\n\nThe test is updated to expect this new structure, ensuring it accurately\nreflects the API’s behaviour.",
"is_bot": false,
"headline": "Update pact tests for Publishing API error responses",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-05-15T15:47:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "066477582a9b5c8081c9b1deb552ebda18d6c9e5",
"body": "…/setup-ruby-1.306.0\n\nBump ruby/setup-ruby from 1 to 1.306.0",
"is_bot": false,
"headline": "Merge pull request #1394 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-05-13T10:31:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e89bc7bbd6b849096197ef2f4150ef9c46e5579",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1 to 1.306.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/v1...v1.306.0)\n\n---\nupdated-de\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.306.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1 to 1.306.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-12T11:53:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2f108be76dcdee4629c30b691c9c2bbdfb2a353c",
"body": "…-6.0\n\nUpdate minitest requirement from ~> 5.19 to ~> 6.0",
"is_bot": false,
"headline": "Merge pull request #1374 from alphagov/dependabot/bundler/minitest-tw…",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-04-28T10:24:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ac4682f53e9ebd354cdb8126a7df5c6a65f5367",
"body": "[PP-7588] Update Pact to reflect new base path schema definition",
"is_bot": false,
"headline": "Merge pull request #1392 from alphagov/update-base-path-pact",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-20T11:37:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c91c639fb73e1437904498c002edb5e7de518030",
"body": null,
"is_bot": false,
"headline": "Add missing PR links",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-20T11:26:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "768b0eca7a1879468386c75579668f2c9013633e",
"body": null,
"is_bot": false,
"headline": "Release 103.3.1",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-20T11:24:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f250317b242b0fb6668a218a27f7717aa216851b",
"body": "The absolute path definition used by base paths is being updated to have\nmultiple requirements via allOf. This test needs updating to reflect\nthat change",
"is_bot": false,
"headline": "Update Pact test for new path schema definition",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-20T10:24:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4396b7e68abc3a295c4f5cbe73e1c772b29b6e20",
"body": "…uk-eq-5.2.1\n\nUpdate rubocop-govuk requirement from = 5.2.0 to = 5.2.1",
"is_bot": false,
"headline": "Merge pull request #1391 from alphagov/dependabot/bundler/rubocop-gov…",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-17T12:29:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "201b958ba26a309bfab7271563b978ab7494826e",
"body": null,
"is_bot": false,
"headline": "Autocorrect rubocop offences",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-17T11:40:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb2b28bbe6ff33a61e555fbec65bad36cd8ff92e",
"body": "…o-use-govuk_test-index\n\nUpdate search index",
"is_bot": false,
"headline": "Merge pull request #1389 from alphagov/SCH-1987-Refactor-pact-tests-t…",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-04-17T10:03:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "650b9eb72bde5e7863ea62ad815296b5b22dbd8c",
"body": "[PP-7685] Update Dependabot configuration",
"is_bot": false,
"headline": "Merge pull request #1390 from alphagov/configure-dependabot",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T17:36:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e39feefa1ae51ca73c5eec7658da989364e13c7",
"body": "Updates the requirements on [rubocop-govuk](https://github.com/alphagov/rubocop-govuk) to permit the latest version.\n- [Changelog](https://github.com/alphagov/rubocop-govuk/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/alphagov/rubocop-govuk/compare/v5.2.0...v5.2.1)\n\n---\nupdated-dependencies:\n- dependency-name: rubocop-govuk\n dependency-version: 5.2.1\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update rubocop-govuk requirement from = 5.2.0 to = 5.2.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-16T17:23:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f29f2aef4737cf87057433eae83298e2838270a8",
"body": "Configure Dependabot to only open pull requests for direct dependencies,\nreducing noise from transitive updates and keeping changes more relevant and\neasier to review.\n\nApproach recommended in GOV.UK Developer Docs.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#dependency-type-allow",
"is_bot": false,
"headline": "Restrict Dependabot updates to direct dependencies",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b16fe511365f5693c20f057027af1a4e80ed76c6",
"body": "We increase the Dependabot open PR limit to 25 to accommodate our weekly\nschedule and grouped updates, ensuring multiple batches can be raised and\nreviewed without being artificially capped. This helps avoid delays while still\nkeeping changes manageable alongside the cooldown and grouping strategy.\n\n[…]\narate internal limit of ten open pull requests which cannot be changed.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#open-pull-requests-limit-",
"is_bot": false,
"headline": "Increase Dependabot Open PR limit to 25",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c55d3f2f2f8b873323b2bdf04c521792c4f3165c",
"body": "We schedule updates weekly on Tuesdays at 7:00am UTC to balance staying current\nwith a manageable review workload. A monthly cadence would be too infrequent\nfor a single person on the daily rota, and Tuesdays avoid common non-working\ndays in our team (Mondays and Fridays at the time).\n\nThe `timezone\n[…]\nlphagov/govuk-dependabot-merger/blob/main/.github/workflows/merge-dependabot-prs.yml#L5\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#schedule-",
"is_bot": false,
"headline": "Change Dependabot schedule to weekly",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b2a1dd83998acd9e828195ad72c8d2aec8461d79",
"body": "Groups Bundler updates to reduce noise and make reviews more focused by\nbatching related dependencies together. Test libraries (e.g. RSpec, SimpleCov)\nare grouped so they can be reviewed and updated in context. This approach helps\nstreamline pull requests, making them less disruptive to the team’s d\n[…]\nork. We’re only using one linter for ruby so there’s no point in grouping at\nthe moment.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#groups--",
"is_bot": false,
"headline": "Group Dependabot PRs",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1e858a41b7f2504632c6654b2f249e5783bfa48c",
"body": "This gives the community time to flag compromised or broken releases before\nupdates are applied, helping us avoid pulling in unstable or unsafe\ndependencies. Sets the values according to GOV.UK Developer docs\nrecommendations: \n- 3 days for code dependencies\n- 7 days for infrastructure tooling (Terraform, Docker), as these changes tend\n to carry more risk.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown-",
"is_bot": false,
"headline": "Introduce Dependabot cooldown period",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7631d498b3bb9ccb186fd3fb204083a943675ca8",
"body": "For consistency with other repos. The quotes are not needed.",
"is_bot": false,
"headline": "Update Dependabot values format",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2ab503a89a6257a861f8eac41a2c92f386e62a0",
"body": "The government index is being retired.\nThis change isn't strictly necessary for the tests\nto pass, but might make them easier to understand\ngoing forward.",
"is_bot": false,
"headline": "Update search index",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-04-16T09:22:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "842d89f8071c6177891219f0ab58d4d546c1b967",
"body": "[PP-7664] Test against Ruby 4.0",
"is_bot": false,
"headline": "Merge pull request #1388 from alphagov/support-ruby-4",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-09T14:01:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e58ede88475cea6dcc5a7041344fce43f95c0b27",
"body": null,
"is_bot": false,
"headline": "Release 103.3.0",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-09T13:57:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f04192efa4af369a56427ca9ce01febb9c28d40",
"body": "rdoc is no longer a default gem in 4.0 so we need to include it in the\ngemspec. I believe rdoc supports the documentation at\nhttps://www.rubydoc.info/gems/gds-api-adapters/52.3.0. This is only\nexplicitly used via the Rakefile, so since Rake is a development\ndependency, I've made this the same\n\nOutpu\n[…]\nrdoc, which is not part of the default gems since Ruby 4.0.0.\nYou can add rdoc to your Gemfile or gemspec to fix this error.\nrake aborted!\nLoadError: cannot load such file -- rdoc/task (LoadError)\n```",
"is_bot": false,
"headline": "Test against Ruby 4.0",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-09T13:56:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "868114328195c51bac93a059d1421cb765fa6297",
"body": "[PP-7274] Drop support for Ruby 3.2",
"is_bot": false,
"headline": "Merge pull request #1387 from alphagov/drop-ruby-3-2",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-01T09:05:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcfbf54412fd6e9cf4fc43317dc024fee3dda671",
"body": null,
"is_bot": false,
"headline": "Release 103.2.0",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-03-31T11:49:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6c130b6c4e717ab5bbfb1a24404eafe85877e96",
"body": "This will be end of life from 1 April 2026",
"is_bot": false,
"headline": "Drop support for Ruby 3.2",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-03-31T11:14:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c31e026aeaf3adab1ee17892fa5ea299c04a70b5",
"body": "[PP-7566] Require `plek` in Publishing API test helpers",
"is_bot": false,
"headline": "Merge pull request #1386 from alphagov/require-plek-publishing-api",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-03-30T16:03:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d3b12ba775ba5e5ce39955f27bd96730f04c73b",
"body": null,
"is_bot": false,
"headline": "Release version 130.1.1",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-03-30T15:58:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ec65d640df9678f4d66f2868dd2ff94fab32bd5",
"body": "`Plek` is used in the Publishing API test helpers to define some\nconstants, but has not been required.\n\nThis has never been an issue before, as all consumers of this helper\nalready required `plek` in their tests. However the pact tests in the\n`frontend` app do not.\n\nTherefore requiring `plek` to ensure it is always available.",
"is_bot": false,
"headline": "Require `plek` in Publishing API test helpers",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-03-30T15:54:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "706692b4a11b48ee8db37308e38e1bee6c5bdb60",
"body": "[PNP-9879] Update example to use Frontend",
"is_bot": false,
"headline": "Merge pull request #1385 from alphagov/update-government-frontend",
"author_name": "deborahchua",
"author_login": "deborahchua",
"committed_at": "2026-03-24T17:03:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a179287f3c96d2365647afd84f8babc65c3324e",
"body": "We have retired government-frontend.",
"is_bot": false,
"headline": "Update example to use Frontend",
"author_name": "deborahchua",
"author_login": "deborahchua",
"committed_at": "2026-03-24T14:59:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d4b2ab6969f333eb1cab94ff8e93d7ff8aeebf1",
"body": "Add timeout helper",
"is_bot": false,
"headline": "Merge pull request #1384 from alphagov/add-timeout-helper",
"author_name": "callumknights",
"author_login": "callumknights",
"committed_at": "2026-03-10T08:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "072714da862ca06d7ecdd5de8c2e03feb7ac7231",
"body": null,
"is_bot": false,
"headline": "Release version 103.1.0",
"author_name": "Callum Knights",
"author_login": "callumknights",
"committed_at": "2026-03-09T18:05:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26d6205f0bba44813a825366e76c948a9e141d0e",
"body": "Useful for testing graphql work",
"is_bot": false,
"headline": "Add timeout publishing API test helper",
"author_name": "Callum Knights",
"author_login": "callumknights",
"committed_at": "2026-03-09T18:05:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47b605ed0db91faa3e2fd1a2f1d1ffc21ee31f28",
"body": "…ons/upload-artifact-7\n\nBump actions/upload-artifact from 6 to 7",
"is_bot": false,
"headline": "Merge pull request #1383 from alphagov/dependabot/github_actions/acti…",
"author_name": "callumknights",
"author_login": "callumknights",
"committed_at": "2026-03-02T11:25:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "750f8b4c5ed17e928301b3f41688ed9ca8e48bb8",
"body": "[SCH-1750] Remove unused #batch_search endpoint",
"is_bot": false,
"headline": "Merge pull request #1381 from alphagov/remove-batch-search-adapter",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-03-02T09:50:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f98203141d6583fb238caee67e61f268b5f24f2",
"body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/upload-artifact from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-27T17:22:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a5e2d988692b688e2e5546af7401eb404f297d9",
"body": "Removal of #batch_search adapter is a breaking change.",
"is_bot": false,
"headline": "Bump version to 103.0.0",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-19T14:20:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c32caf5bf58261e8e604c1e423ae98d753de15a4",
"body": "Removing unused method as part of tidying up unused Search API code.",
"is_bot": false,
"headline": "Remove unused #batch_search endpoint",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-19T14:20:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9542c80c4a004db1ab37274f8f6f4a4bf90a6e86",
"body": "[SCH-1679] Add search-api pacts to ci",
"is_bot": false,
"headline": "Merge pull request #1382 from alphagov/add-search-api-pacts-to-ci",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-19T14:05:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea3ace6a3f34792974d7a1ab10bdd8457e5220a1",
"body": "…-enum\n\n[SCH-1679] Add pact tests for Search API #search_enum",
"is_bot": false,
"headline": "Merge pull request #1380 from alphagov/search-api-pact-testing-search…",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-17T14:02:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77feffa65c15aae46aa0290c995dcf45fd2f4b9a",
"body": "#search_enum allows for the /search endpoint to be called page by page. It uses the /search endpoint, and needs params `start` and `count` to be allowed.",
"is_bot": false,
"headline": "Add pact tests for #search_enum",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-16T13:33:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8ff5b5bb1d2d849fcafe125cc1ae6c8922d684c",
"body": "Now that we've added the necessary pact tests for search-api and tested them locally against the published pacts we can add the pact tests to the CI pipeline.\nThere is a companion PR to add the pact-verify workflow to the search-api ci workflow, which should be merged before this PR.",
"is_bot": false,
"headline": "Add search-api pacts to ci",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-12T12:20:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4de251f39cca49a06bbd039c847856b1763e2c65",
"body": "Currently these tests aren't run as part of `bundle exec rake`, as the filename does not have the format `\"test/**/*_test.rb\"`. Changing the filename will mean that the tests are run as part of ci",
"is_bot": false,
"headline": "Rename from search.rb to search_test.rb",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-09T11:44:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bfa5aaa0722ba209897b4ac78af2235fa0ea74d",
"body": "…-endpoint-2\n\n[SCH-1679] Add pact tests for #search",
"is_bot": false,
"headline": "Merge pull request #1379 from alphagov/search-api-pact-testing-search…",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-09T09:13:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad6ce1e1f9b568f84fad78de2152112eb86b73ef",
"body": null,
"is_bot": false,
"headline": "Add pact test for search with no keyword included",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-06T16:35:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b7390da6d658490319d1fe04b640c84c4caa81b",
"body": "This is a representative test of one of the types of user input that would raise a 422 error.",
"is_bot": false,
"headline": "Add pact tests for search with invalid ordering field.",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-06T16:35:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ddefc2f7d00b93c204076f11672b934cb42219c",
"body": "[SCH-1679] Contract tests with Search API",
"is_bot": false,
"headline": "Merge pull request #1375 from alphagov/search-api-pact-testing",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-01-30T10:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a869d3e8e3ead8b245f7b8aa77a72ca2525ce0a9",
"body": "We will need multiple pact tests for search, but this PR only adds the most straightforward one so that we can get the pact tests configured correctly.",
"is_bot": false,
"headline": "Add initial pact test",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-01-29T17:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57c215571238e349c90517a61a8f41bed06a02e9",
"body": "…uk-eq-5.2.0",
"is_bot": false,
"headline": "Merge pull request #1378 from alphagov/dependabot/bundler/rubocop-gov…",
"author_name": "GOV.UK Continuous Integration User",
"author_login": "govuk-ci",
"committed_at": "2026-01-28T08:49:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e45d4150fe21a1a5c1574dba4278db9c689ea84",
"body": "Updates the requirements on [rubocop-govuk](https://github.com/alphagov/rubocop-govuk) to permit the latest version.\n- [Changelog](https://github.com/alphagov/rubocop-govuk/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/alphagov/rubocop-govuk/compare/v5.1.20...v5.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: rubocop-govuk\n dependency-version: 5.2.0\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update rubocop-govuk requirement from = 5.1.20 to = 5.2.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-27T17:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b6d37112a594094501f32e5287da771168e3823",
"body": "[SCH-1704] Removed unused search-api adapters",
"is_bot": false,
"headline": "Merge pull request #1376 from alphagov/remove-unused-search-endpoints",
"author_name": "Jess Jones",
"author_login": "hannako",
"committed_at": "2026-01-27T11:34:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d15040f90077d5a912d045eb7287404ffdb519e",
"body": "Co-authored-by: Jos Koetsier <jos.koetsier@digital.cabinet-office.gov.uk>",
"is_bot": false,
"headline": "Bump version to 102.0.0",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-01-15T14:45:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca7e960c791ad3ba8fe125d0f056339c133cf821",
"body": "Deleting add_document, delete_document, get_content & delete_content and associated test helpers as they're no longer used.\n\nCo-authored-by: Jos Koetsier <jos.koetsier@digital.cabinet-office.gov.uk>",
"is_bot": false,
"headline": "Removed unused search-api adapters",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-01-15T14:35:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2aacab914ea582cd37e8248cd1d89f479193958d",
"body": null,
"is_bot": false,
"headline": "Declare new pact with Search API",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-01-07T09:42:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9faabb2c29c95f5c7243267bf6ded3bb5777765",
"body": "Updates the requirements on [minitest](https://github.com/minitest/minitest) to permit the latest version.\n- [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc)\n- [Commits](https://github.com/minitest/minitest/compare/v5.19.0...v6.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: minitest\n dependency-version: 6.0.1\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update minitest requirement from ~> 5.19 to ~> 6.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-29T17:04:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9e44f94cbb5dea44a92b453d9b2156ce8119a79",
"body": "…emoved-version\n\nPact updates for removal of ?version= in GET content",
"is_bot": false,
"headline": "Merge pull request #1373 from alphagov/update-pacts-for-get-content-r…",
"author_name": "Richard Towers",
"author_login": null,
"committed_at": "2025-12-17T16:53:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "644126c16e12f66a67f03ffbf74fd6ee70ac558b",
"body": "Not sure if this is strictly needed to get the Pact tests updated, but\nseems like a new gem version is sensible in any case.",
"is_bot": false,
"headline": "Bump the version to 101.2.0",
"author_name": "Richard Towers",
"author_login": null,
"committed_at": "2025-12-17T16:20:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36d3be4efecf79868176aa4328ec87fac1432300",
"body": "We've replaced the version param with a content_store param.\n\nThis means it's no longer possible to request a superseded edition (so\nthat pact is removed).\n\nIt's still possible to request published content instead of draft (by\nquerying with content_store=live), or to request draft content\nspecifically (with content_store=draft).",
"is_bot": false,
"headline": "Pact updates for removal of ?version= in GET content",
"author_name": "Richard Towers",
"author_login": null,
"committed_at": "2025-12-17T15:23:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ac9b57fa121f980cd36bf0aeefae49e6c3139db",
"body": "[PP-7501] Simplify the get_live_content method",
"is_bot": false,
"headline": "Merge pull request #1372 from alphagov/simplify-get-live-content",
"author_name": "Richard Towers",
"author_login": null,
"committed_at": "2025-12-17T10:00:27Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 126,
"latest_release_at": "2026-07-27T10:04:44Z",
"latest_release_tag": "v103.4.0",
"releases_from_tags": true,
"days_since_last_push": 0,
"active_weeks_last_year": 32,
"days_since_latest_release": 0,
"mean_days_between_releases": 24.7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "gds-api-adapters",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "rubygems",
"matches_repo": true,
"registry_url": "https://rubygems.org/gems/gds-api-adapters",
"is_deprecated": false,
"latest_version": "103.4.0",
"repository_url": "http://github.com/alphagov/gds-api-adapters",
"versions_count": 589,
"total_downloads": 2174538,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2011-12-06T10:30:58.554000Z",
"latest_published_at": "2026-07-27T10:07:58.002000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 13,
"stars": 21,
"watchers": 88,
"fork_history": {
"days": [
{
"date": "2013-09-11",
"count": 1
},
{
"date": "2015-02-26",
"count": 1
},
{
"date": "2015-10-07",
"count": 1
},
{
"date": "2016-05-18",
"count": 1
},
{
"date": "2016-06-23",
"count": 1
},
{
"date": "2017-05-26",
"count": 1
},
{
"date": "2019-08-29",
"count": 1
},
{
"date": "2020-09-10",
"count": 1
},
{
"date": "2020-12-25",
"count": 1
},
{
"date": "2021-04-10",
"count": 1
},
{
"date": "2026-02-23",
"count": 1
}
],
"complete": true,
"collected": 11,
"total_forks": 13
},
"star_history": null,
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 40393,
"source_files_sampled": 123,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Gemfile"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 1,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 22,
"direct_affected_count": 0
},
"ecosystems": [
"rubygems"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "addressable",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "byebug",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "climate_control",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "govuk_schemas",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "link_header",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "minitest",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "minitest-around",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "mocha",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "null_logger",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pact",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pact-consumer-minitest",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pact-mock_service",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pact_broker-client",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "plek",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rack",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rack-test",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rake",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rdoc",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rest-client",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop-govuk",
"direct": false,
"version": "5.2.1",
"ecosystem": "rubygems"
},
{
"name": "simplecov",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "timecop",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "webmock",
"direct": false,
"version": null,
"ecosystem": "rubygems"
}
],
"collected": true,
"truncated": false,
"total_count": 23,
"direct_count": 0,
"indirect_count": 23
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 1301,
"open_issues": 1,
"closed_ratio": 0.9,
"closed_issues": 9,
"closed_unmerged_prs": 100
},
"bus_factor": 13,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "alext",
"commits": 195,
"avatar_url": "https://avatars.githubusercontent.com/u/5560?v=4"
},
{
"type": "User",
"login": "kevindew",
"commits": 177,
"avatar_url": "https://avatars.githubusercontent.com/u/282717?v=4"
},
{
"type": "User",
"login": "barrucadu",
"commits": 156,
"avatar_url": "https://avatars.githubusercontent.com/u/75235?v=4"
},
{
"type": "User",
"login": "tijmenb",
"commits": 142,
"avatar_url": "https://avatars.githubusercontent.com/u/233676?v=4"
},
{
"type": "User",
"login": "elliotcm",
"commits": 137,
"avatar_url": "https://avatars.githubusercontent.com/u/109225?v=4"
},
{
"type": "User",
"login": "JordanHatch",
"commits": 121,
"avatar_url": "https://avatars.githubusercontent.com/u/71922?v=4"
},
{
"type": "User",
"login": "thomasleese",
"commits": 117,
"avatar_url": "https://avatars.githubusercontent.com/u/510498?v=4"
},
{
"type": "User",
"login": "dhwthompson",
"commits": 111,
"avatar_url": "https://avatars.githubusercontent.com/u/32775?v=4"
},
{
"type": "User",
"login": "jamiecobbett",
"commits": 109,
"avatar_url": "https://avatars.githubusercontent.com/u/93739?v=4"
},
{
"type": "User",
"login": "brucebolt",
"commits": 104,
"avatar_url": "https://avatars.githubusercontent.com/u/6329861?v=4"
}
],
"contributors_sampled": 99,
"top_contributor_share": 0.062
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"actionlint.yml",
"autorelease.yml",
"ci.yml",
"publish.yml"
],
"has_docs_dir": false,
"linter_configs": [
".rubocop.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 8,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 39 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 2,
"reason": "dependency not pinned by hash detected -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d9d389c7ea5eebdb5c6c722245da7749a75de375",
"ran_at": "2026-07-27T10:14:45Z",
"aggregate_score": 7.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T10:08:05Z",
"oldest_open_prs": [
{
"number": 1401,
"created_at": "2026-06-12T14:51:35Z",
"last_comment_at": "2026-07-08T09:03:27Z",
"last_comment_author": "yndajas"
}
],
"last_merged_pr_at": "2026-07-27T10:04:44Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 722,
"created_at": "2017-07-20T17:01:45Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/alphagov/gds-api-adapters",
"host": "github.com",
"name": "gds-api-adapters",
"owner": "alphagov"
},
"metrics": {
"overall": {
"key": "overall",
"band": "exceptional",
"name": "Overall health",
"note": "The weighted overall 79 is calibrated to 93 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 79,
"calibrated": 93,
"calibration": "2026-08-02"
}
}
],
"value": 93,
"inputs": {
"security": 82,
"vitality": 87,
"community": 62,
"governance": 92,
"calibration": "2026-08-02",
"engineering": 76,
"ai_readiness": 44,
"weighted_overall_raw": 79
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 87,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 86,
"inputs": {
"commits_last_year": 126,
"human_commit_share": 0.85,
"days_since_last_push": 0,
"active_weeks_last_year": 32
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "32/52 weeks with commits",
"points": 22.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 32
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "126 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 126
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v103.4.0",
"releases_from_tags": true,
"days_since_latest_release": 0,
"mean_days_between_releases": 24.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~24.7 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 24.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 6,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 6 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 6
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 62,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "weak",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"forks": 13,
"stars": 21,
"watchers": 88,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "21 stars",
"points": 21.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 21
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "13 forks",
"points": 9,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 13
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "88 watchers",
"points": 10.8,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 88
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 82,
"inputs": {
"packages": [
"gds-api-adapters"
],
"dependents": null,
"ecosystems": "rubygems",
"total_downloads": 2174538,
"monthly_downloads": null
},
"components": [
{
"key": "total_downloads",
"name": "Total downloads",
"detail": "2,174,538 downloads all-time across rubygems",
"points": 65.9,
"status": "partial",
"details": [
{
"code": "downloads_total",
"params": {
"count": 2174538,
"ecosystems": "rubygems"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "excellent",
"name": "Sustainability & Governance",
"value": 92,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "exceptional",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"bus_factor": 13,
"contributors_sampled": 99,
"top_contributor_share": 0.062
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "13 contributor(s) cover half of all commits",
"points": 54,
"status": "met",
"details": [
{
"code": "bus_factor",
"params": {
"count": 13
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 6% of commits",
"points": 21.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 6
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "99 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 99
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 39 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "exceptional",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 93,
"inputs": {
"merged_prs": 1301,
"open_issues": 1,
"closed_issues": 9,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.9,
"closed_unmerged_prs": 100,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "90% of issues closed",
"points": 37.8,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 90
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1301/1401 decided PRs merged",
"points": 27.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1301,
"decided": 1401
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"followers": 1576,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "alphagov",
"public_repos": 1528,
"account_age_days": 5653
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,576 followers of alphagov",
"points": 23,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1576,
"login": "alphagov"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "1528 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 1528
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"gds-api-adapters"
],
"ecosystems": "rubygems",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on rubygems",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "rubygems"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "589 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 589
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".rubocop.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"govuk"
],
"has_wiki": false,
"homepage": "http://www.rubydoc.info/github/alphagov/gds-api-adapters",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://www.rubydoc.info/github/alphagov/gds-api-adapters",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "1 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 1
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "excellent",
"name": "Security",
"value": 82,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 78,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 7.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 39 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 1,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 1 resolved dependencies against OSV; 22 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 1
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 22
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 1,
"unassessed_packages": 22,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 1,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 44,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.765,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "65 of 85 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 65,
"sampled": 85
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.15
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".rubocop.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "15 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 15,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Ruby",
"largest_source_bytes": 40393,
"source_files_sampled": 123,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Ruby without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Ruby"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/123 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 123,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:rubygems",
"weight": 6
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-27T10:15:14.238713Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/alphagov/gds-api-adapters.svg",
"full_name": "alphagov/gds-api-adapters",
"license_state": "standard",
"license_spdx": "MIT"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con alphagov/gds-api-adapters. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v2.3.1, esquema v0.27.0 — metodología completa · wiki de métricas.
