carvel-dev / kapp-controller

Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.

Cada punto abarca 7 días.

Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 39 paquetes directos y 91 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.

Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 130 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 5 tienen avisos conocidos, de los cuales 1 son directas.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [
        "ytt",
        "kapp",
        "helm",
        "declarative",
        "operator",
        "k8s",
        "kubernetes",
        "gitops",
        "continious-delivery",
        "cd",
        "controller",
        "carvel"
      ],
      "is_fork": false,
      "size_kb": 68765,
      "has_wiki": false,
      "homepage": "https://carvel.dev/kapp-controller",
      "languages": {
        "Go": 1428236,
        "Shell": 18039,
        "Dockerfile": 1620
      },
      "pushed_at": "2026-07-16T12:39:37Z",
      "created_at": "2019-11-06T21:09:24Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-16T11:30:41Z",
      "description": "Continuous delivery and package management for Kubernetes.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "develop",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://carvel.dev",
      "name": "Carvel",
      "type": "Organization",
      "login": "carvel-dev",
      "company": null,
      "location": null,
      "followers": 122,
      "avatar_url": "https://avatars.githubusercontent.com/u/116381947?v=4",
      "created_at": "2022-10-21T17:55:47Z",
      "is_verified": null,
      "public_repos": 32,
      "account_age_days": 1369
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.60.4",
          "kind": "patch",
          "published_at": "2026-07-16T11:57:16Z"
        },
        {
          "tag": "v0.60.3",
          "kind": "patch",
          "published_at": "2026-06-22T08:52:45Z"
        },
        {
          "tag": "v0.60.2",
          "kind": "patch",
          "published_at": "2026-06-17T10:29:15Z"
        },
        {
          "tag": "v0.60.1",
          "kind": "patch",
          "published_at": "2026-06-01T17:17:18Z"
        },
        {
          "tag": "v0.60.0",
          "kind": "minor",
          "published_at": "2026-05-21T05:32:17Z"
        },
        {
          "tag": "v0.59.8",
          "kind": "patch",
          "published_at": "2026-04-28T08:51:33Z"
        },
        {
          "tag": "v0.59.7",
          "kind": "patch",
          "published_at": "2026-04-06T11:16:43Z"
        },
        {
          "tag": "v0.59.6",
          "kind": "patch",
          "published_at": "2026-04-03T13:25:15Z"
        },
        {
          "tag": "v0.59.3",
          "kind": "patch",
          "published_at": "2026-03-05T18:40:58Z"
        },
        {
          "tag": "v0.59.2",
          "kind": "patch",
          "published_at": "2026-02-19T18:37:47Z"
        },
        {
          "tag": "v0.59.1",
          "kind": "patch",
          "published_at": "2025-11-28T17:45:32Z"
        },
        {
          "tag": "v0.59.0",
          "kind": "minor",
          "published_at": "2025-11-12T16:54:57Z"
        },
        {
          "tag": "v0.58.2",
          "kind": "patch",
          "published_at": "2026-02-10T07:05:20Z"
        },
        {
          "tag": "v0.58.1",
          "kind": "patch",
          "published_at": "2025-08-20T10:47:36Z"
        },
        {
          "tag": "v0.58.0",
          "kind": "minor",
          "published_at": "2025-05-27T09:01:57Z"
        },
        {
          "tag": "v0.57.0",
          "kind": "minor",
          "published_at": "2025-05-16T18:03:23Z"
        },
        {
          "tag": "v0.56.1",
          "kind": "patch",
          "published_at": "2025-04-22T15:50:49Z"
        },
        {
          "tag": "v0.56.0",
          "kind": "minor",
          "published_at": "2025-04-21T21:24:15Z"
        },
        {
          "tag": "v0.55.1",
          "kind": "patch",
          "published_at": "2025-02-18T10:11:48Z"
        },
        {
          "tag": "v0.55.0",
          "kind": "minor",
          "published_at": "2025-01-09T09:23:23Z"
        },
        {
          "tag": "v0.54.1",
          "kind": "patch",
          "published_at": "2024-12-12T18:33:03Z"
        },
        {
          "tag": "v0.54.0",
          "kind": "minor",
          "published_at": "2024-11-29T05:21:23Z"
        },
        {
          "tag": "v0.53.1",
          "kind": "patch",
          "published_at": "2024-09-05T08:13:18Z"
        },
        {
          "tag": "v0.53.0",
          "kind": "minor",
          "published_at": "2024-07-23T09:43:21Z"
        },
        {
          "tag": "v0.50.6",
          "kind": "patch",
          "published_at": "2024-09-10T11:34:56Z"
        },
        {
          "tag": "v0.50.5",
          "kind": "patch",
          "published_at": "2024-07-19T05:14:12Z"
        },
        {
          "tag": "v0.52.0",
          "kind": "minor",
          "published_at": "2024-05-13T05:34:43Z"
        },
        {
          "tag": "v0.51.3",
          "kind": "patch",
          "published_at": "2024-09-10T12:00:51Z"
        },
        {
          "tag": "v0.51.2",
          "kind": "patch",
          "published_at": "2024-07-19T05:42:53Z"
        },
        {
          "tag": "v0.51.1",
          "kind": "patch",
          "published_at": "2024-06-17T08:00:14Z"
        },
        {
          "tag": "v0.46.10",
          "kind": "patch",
          "published_at": "2024-05-16T12:23:23Z"
        },
        {
          "tag": "v0.51.0",
          "kind": "minor",
          "published_at": "2024-04-18T09:13:22Z"
        },
        {
          "tag": "v0.50.2",
          "kind": "patch",
          "published_at": "2024-03-21T10:33:50Z"
        },
        {
          "tag": "v0.50.3",
          "kind": "patch",
          "published_at": "2024-04-18T11:28:37Z"
        },
        {
          "tag": "v0.50.0",
          "kind": "minor",
          "published_at": "2024-01-29T07:56:54Z"
        },
        {
          "tag": "v0.49.0",
          "kind": "minor",
          "published_at": "2023-11-22T07:34:19Z"
        },
        {
          "tag": "v0.48.11",
          "kind": "patch",
          "published_at": "2024-09-10T06:55:39Z"
        },
        {
          "tag": "v0.48.10",
          "kind": "patch",
          "published_at": "2024-07-17T05:57:22Z"
        },
        {
          "tag": "v0.48.9",
          "kind": "patch",
          "published_at": "2024-05-17T08:18:44Z"
        },
        {
          "tag": "v0.48.7",
          "kind": "patch",
          "published_at": "2024-04-18T11:29:13Z"
        },
        {
          "tag": "v0.48.6",
          "kind": "patch",
          "published_at": "2024-03-25T04:48:04Z"
        },
        {
          "tag": "v0.48.5",
          "kind": "patch",
          "published_at": "2024-02-16T12:32:25Z"
        },
        {
          "tag": "v0.48.4",
          "kind": "patch",
          "published_at": "2024-01-16T16:19:52Z"
        },
        {
          "tag": "v0.48.3",
          "kind": "patch",
          "published_at": "2023-12-19T07:25:26Z"
        },
        {
          "tag": "v0.48.2",
          "kind": "patch",
          "published_at": "2023-10-31T09:44:53Z"
        },
        {
          "tag": "v0.48.1",
          "kind": "patch",
          "published_at": "2023-09-27T11:21:30Z"
        },
        {
          "tag": "v0.48.0",
          "kind": "minor",
          "published_at": "2023-09-22T17:07:21Z"
        },
        {
          "tag": "v0.47.0",
          "kind": "minor",
          "published_at": "2023-08-24T13:06:16Z"
        },
        {
          "tag": "v0.44.12",
          "kind": "patch",
          "published_at": "2023-12-19T08:19:46Z"
        },
        {
          "tag": "v0.44.11",
          "kind": "patch",
          "published_at": "2023-11-16T10:51:02Z"
        },
        {
          "tag": "v0.41.11",
          "kind": "patch",
          "published_at": "2023-10-19T13:44:36Z"
        },
        {
          "tag": "v0.44.10",
          "kind": "patch",
          "published_at": "2023-10-19T12:29:40Z"
        },
        {
          "tag": "v0.41.10",
          "kind": "patch",
          "published_at": "2023-08-17T17:47:04Z"
        },
        {
          "tag": "v0.44.9",
          "kind": "patch",
          "published_at": "2023-08-17T17:48:48Z"
        },
        {
          "tag": "v0.46.11",
          "kind": "patch",
          "published_at": "2024-05-17T08:25:26Z"
        },
        {
          "tag": "v0.46.9",
          "kind": "patch",
          "published_at": "2024-04-18T11:29:57Z"
        },
        {
          "tag": "v0.45.9",
          "kind": "patch",
          "published_at": "2024-03-22T05:09:22Z"
        },
        {
          "tag": "v0.46.8",
          "kind": "patch",
          "published_at": "2024-03-22T05:11:35Z"
        },
        {
          "tag": "v0.45.8",
          "kind": "patch",
          "published_at": "2024-02-19T08:54:11Z"
        },
        {
          "tag": "v0.45.7",
          "kind": "patch",
          "published_at": "2024-01-16T16:22:36Z"
        },
        {
          "tag": "v0.46.7",
          "kind": "patch",
          "published_at": "2024-02-19T04:56:57Z"
        },
        {
          "tag": "v0.46.6",
          "kind": "patch",
          "published_at": "2024-01-16T16:23:36Z"
        },
        {
          "tag": "v0.45.6",
          "kind": "patch",
          "published_at": "2023-12-19T08:18:55Z"
        },
        {
          "tag": "v0.45.5",
          "kind": "patch",
          "published_at": "2023-11-16T10:30:34Z"
        },
        {
          "tag": "v0.45.4",
          "kind": "patch",
          "published_at": "2023-10-18T14:08:51Z"
        },
        {
          "tag": "v0.45.3",
          "kind": "patch",
          "published_at": "2023-08-17T16:52:49Z"
        },
        {
          "tag": "v0.46.5",
          "kind": "patch",
          "published_at": "2023-12-19T07:44:49Z"
        },
        {
          "tag": "v0.46.4",
          "kind": "patch",
          "published_at": "2023-11-16T04:25:31Z"
        },
        {
          "tag": "v0.46.3",
          "kind": "patch",
          "published_at": "2023-10-19T10:38:42Z"
        },
        {
          "tag": "v0.46.2",
          "kind": "patch",
          "published_at": "2023-08-16T18:32:13Z"
        },
        {
          "tag": "v0.46.1",
          "kind": "patch",
          "published_at": "2023-06-14T08:34:09Z"
        },
        {
          "tag": "v0.46.0",
          "kind": "minor",
          "published_at": "2023-06-07T14:06:35Z"
        },
        {
          "tag": "v0.45.2",
          "kind": "patch",
          "published_at": "2023-06-14T07:47:47Z"
        },
        {
          "tag": "v0.45.1",
          "kind": "patch",
          "published_at": "2023-05-15T05:01:24Z"
        },
        {
          "tag": "v0.50.4",
          "kind": "patch",
          "published_at": "2024-05-16T12:26:10Z"
        },
        {
          "tag": "v0.45.0",
          "kind": "minor",
          "published_at": "2023-03-10T17:41:33Z"
        },
        {
          "tag": "v0.41.9",
          "kind": "patch",
          "published_at": "2023-07-11T10:22:26Z"
        },
        {
          "tag": "v0.41.8",
          "kind": "patch",
          "published_at": "2023-06-20T19:19:57Z"
        },
        {
          "tag": "v0.41.7",
          "kind": "patch",
          "published_at": "2023-04-04T10:23:20Z"
        },
        {
          "tag": "v0.44.8",
          "kind": "patch",
          "published_at": "2023-06-20T19:22:34Z"
        },
        {
          "tag": "v0.44.7",
          "kind": "patch",
          "published_at": "2023-04-20T05:06:31Z"
        },
        {
          "tag": "v0.44.6",
          "kind": "patch",
          "published_at": "2023-02-01T10:37:14Z"
        },
        {
          "tag": "v0.44.5",
          "kind": "patch",
          "published_at": "2023-01-31T20:06:39Z"
        },
        {
          "tag": "v0.44.3",
          "kind": "patch",
          "published_at": "2023-01-30T06:31:21Z"
        },
        {
          "tag": "v0.44.1",
          "kind": "patch",
          "published_at": "2022-12-13T23:56:07Z"
        },
        {
          "tag": "v0.43.4",
          "kind": "patch",
          "published_at": "2022-12-09T21:13:50Z"
        },
        {
          "tag": "v0.38.8",
          "kind": "patch",
          "published_at": "2022-12-08T20:02:50Z"
        },
        {
          "tag": "v0.41.5",
          "kind": "patch",
          "published_at": "2022-12-08T20:02:14Z"
        },
        {
          "tag": "v0.30.8",
          "kind": "patch",
          "published_at": "2023-02-03T19:41:43Z"
        },
        {
          "tag": "v0.30.5",
          "kind": "patch",
          "published_at": "2022-12-08T19:39:22Z"
        },
        {
          "tag": "v0.41.6",
          "kind": "patch",
          "published_at": "2023-02-07T19:46:51Z"
        },
        {
          "tag": "v0.30.4",
          "kind": "patch",
          "published_at": "2022-12-07T17:19:51Z"
        },
        {
          "tag": "v0.34.1",
          "kind": "patch",
          "published_at": "2022-12-07T17:20:22Z"
        },
        {
          "tag": "v0.38.7",
          "kind": "patch",
          "published_at": "2022-12-07T17:19:10Z"
        },
        {
          "tag": "v0.41.4",
          "kind": "patch",
          "published_at": "2022-12-07T17:23:32Z"
        },
        {
          "tag": "v0.43.2",
          "kind": "patch",
          "published_at": "2022-11-26T11:22:59Z"
        },
        {
          "tag": "v0.43.1",
          "kind": "patch",
          "published_at": "2022-11-24T18:41:48Z"
        },
        {
          "tag": "v0.30.3",
          "kind": "patch",
          "published_at": "2022-11-18T18:41:49Z"
        },
        {
          "tag": "v0.41.3",
          "kind": "patch",
          "published_at": "2022-11-14T23:40:29Z"
        },
        {
          "tag": "v0.42.0",
          "kind": "minor",
          "published_at": "2022-10-24T18:27:41Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "651cb15b323be56df3b03af3c87ae57bf8a2d7ca",
          "body": "…t-downstream-watch\n\nfix: stop forwarding WatchList options to internal CRD watch",
          "is_bot": false,
          "headline": "Merge pull request #1845 from sameerforge/topic/sameerkh/fix-watchlis…",
          "author_name": "Sameer Khan",
          "author_login": "sameerforge",
          "committed_at": "2026-07-16T11:30:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e05009b71554ec70709d79dc758ae450ef20a28a",
          "body": "The packaging aggregated API server is a thin proxy whose storage is the\nhost cluster's InternalPackage(Metadata) CRDs, and its custom REST watch\ndoes not synthesize the WatchList \"initial-events-end\" bookmark.\n\nWith WatchList enabled, the embedded apiserver's SetListOptionsDefaults\ninjects sendInit\n[…]\nstalls the shared manager cache.\n\nSigned-off-by: Sameer <sameer.khan@broadcom.com>\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nSigned-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "fix: disable WatchList feature gate in packaging apiserver",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-07-16T07:25:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "62c4c284c6762448e3b99a60e7ffc0fb5606add8",
          "body": "[1839] Fix: Truncate status.deploy.stdout as it can exceed etcd's limit on large clusters, causing reconciliation delay",
          "is_bot": false,
          "headline": "Merge pull request #1840 from himsngh/himsngh/1839",
          "author_name": "Himanshu",
          "author_login": "himsngh",
          "committed_at": "2026-07-05T10:35:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "392d9b5798bd2e7f3fb8df2c93c1f5164c4ff955",
          "body": "Signed-off-by: Himanshu Singh <himansh.singh3@gmail.com>",
          "is_bot": false,
          "headline": "chore: address review comments",
          "author_name": "Himanshu Singh",
          "author_login": "himsngh",
          "committed_at": "2026-07-01T17:54:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a75188852152345e36258d83d931034bd71bfd1",
          "body": "…iB limit on large clusters, causing reconciliation delay\n\nSigned-off-by: Himanshu Singh <himansh.singh3@gmail.com>",
          "is_bot": false,
          "headline": "[1839] Fix: Truncate status.deploy.stdout as it can exceed etcd's 2 M…",
          "author_name": "Himanshu Singh",
          "author_login": "himsngh",
          "committed_at": "2026-06-29T08:36:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be1faefd135d62d901a0ad4b4904b30c6c0dc7c3",
          "body": "chore(deps): bump kbld from v0.48.1 to v0.49.1",
          "is_bot": false,
          "headline": "Merge pull request #1838 from nikhilsagotiya/bump-kbld-v0.49.1",
          "author_name": "Nikhil Sagotiya",
          "author_login": "nikhilsagotiya",
          "committed_at": "2026-06-19T06:07:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32597edd4bcadd5b59a79f84c56389337d8539b4",
          "body": "Signed-off-by: Nikhil Sagotiya <nikjain0594@gmail.com>",
          "is_bot": false,
          "headline": "chore(deps): bump kbld from v0.48.1 to v0.49.1",
          "author_name": "Nikhil Sagotiya",
          "author_login": "nikhilsagotiya",
          "committed_at": "2026-06-17T12:13:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7219295984816b111437dce4f51771a7b39085ff",
          "body": "…t-client\n\nFix: preserve SendInitialEvents in ListOptions for K8s v0.36.0 compatibility",
          "is_bot": false,
          "headline": "Merge pull request #1836 from sameerforge/topic/sameerkh/fix-watchlis…",
          "author_name": "Sameer Khan",
          "author_login": "sameerforge",
          "committed_at": "2026-06-17T10:03:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db466e79ca89cb8a0f2df8c39068937193ac8ab3",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "Bumps 'golang.org/x/crypto' to the latest version",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-06-17T06:58:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82f15435f37d315e95e1b94a6653518f40ca804f",
          "body": "…ibility\n\nSigned-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "fix: preserve SendInitialEvents in ListOptions for K8s v0.36.0 compat…",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-06-17T06:19:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7175d4a874ad571e1d6d8b10a56e310b0eaf295a",
          "body": "chore(cli): bump vendir to v0.45.4, kapp-controller, and golang.org/x…",
          "is_bot": false,
          "headline": "Merge pull request #1834 from sameerforge/cli/bump-oss-deps",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2026-06-01T16:54:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98612a35ff1dc3a383317e50e8d4cf117d2153f4",
          "body": "…/ packages\n\nSigned-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "chore(cli): bump vendir to v0.45.4, kapp-controller, and golang.org/x…",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-06-01T14:42:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb4fbdccc76a6038faceb584f2ffbb4bbdd73a05",
          "body": "chore(deps): bump golang.org/x/mod to latest",
          "is_bot": false,
          "headline": "Merge pull request #1833 from sameerforge/bump-oss-deps",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2026-06-01T13:49:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7723572980691ae081e9d0f14f66a2bd69424911",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "Update dependencies.yml with latest version checksums",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-06-01T11:45:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1733a34f03747f2844b945e5a5cf36e6ea7467fc",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "chore(deps): bump vendir, semever, golang.org/x/mod to latest",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-06-01T11:38:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55f0817e7f26888b4396f754e2b68f22e779b678",
          "body": "Upgrade kctrl CLI dependencies to target Kubernetes v0.36.0",
          "is_bot": false,
          "headline": "Merge pull request #1831 from sameerforge/bump/dep/cli/kctrl-v0.36-bump",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2026-05-20T15:11:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80ab33ff295cf58b86c13649f4e7564120b5167a",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore(cli): upgrade kctrl cli dependencies to v0.36.0",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-05-19T18:25:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "679ae0db7389be64f7a8c3e0cdba3d3c2151c150",
          "body": "Update Kubernetes stack to v0.36.0, Go to 1.26.3, and k8s libs to v0.46.0",
          "is_bot": false,
          "headline": "Merge pull request #1829 from sameerforge/bump/dep/kapp-ctrl-v0.36-bump",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2026-05-19T14:43:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dab7884d35a3d45542ecf296956e54243e44ac97",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "Update generated code for k8s v0.46.0 libs",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-05-17T12:11:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9c8039df336939ecebbaafc3e105aca211aae02",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "Update dependencies.yml with latest version checksums",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-05-17T12:11:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e5a075bd42826888eb8031a17d9daa0655c2222",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "ci: upgrade golangci-lint to v2.12.2",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-05-17T12:11:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "565b7800e697df734451d567d3eaa7dbd2268dd2",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "chore(deps): Root upgrade Kubernetes stack to v0.36.0 and Go to 1.26.3",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-05-17T12:11:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d1173cc6e0ef433773b32e44bc14f82baa78da4",
          "body": "build(deps): update CLI framework and security dependencies",
          "is_bot": false,
          "headline": "Merge pull request #1822 from sameerforge/fix/dependency-consolidation",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2026-05-11T15:53:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3be11f87abc9cf22ab454ce541d6048117559694",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "Migrate gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 v3.0.4",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-05-10T10:44:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ff04d3b9627cdd7ca69f899ba04bbd030da35a6",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "build(deps): update CLI framework and security dependencies",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-05-08T17:03:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a6b291abb5efcac24088751a5707ac966011588",
          "body": "…g rolling upgrades (#1813)\n\nDuring kapp-controller rolling upgrades via `kapp deploy`, a race condition can occur\nwhere kapp reports success even though the APIService webhook is not ready yet. This\nhappens because kapp doesn't detect any changes in the APIService resource and\nconsiders the deploym\n[…]\nource versioning\n\nFixes race condition during kapp-controller upgrades where APIService readiness\nis not properly validated.\n\n\nMade-with: Cursor\n\nSigned-off-by: Marin Dzhigarov <m.dzhigarov@gmail.com>",
          "is_bot": false,
          "headline": "Add version annotation to APIService to prevent race conditions durin…",
          "author_name": "Marin Dzhigarov",
          "author_login": "mdzhigarov",
          "committed_at": "2026-05-05T14:21:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "522df395224a90e28c255449c4c76d227f66db1b",
          "body": "Bump vendir & kbld dependencies & Align semver imports with root changes",
          "is_bot": false,
          "headline": "Merge pull request #1818 from sameerforge/replace-k14s-semver",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2026-04-24T23:15:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06b6fc4786cfb7e9640835a56b94c1126bf5369f",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "Bump vendir & kbld version in depndencies.yaml",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-04-22T11:07:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2dfedc0850451ecb1d5f5ed25ca2264cc7ce38bd",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "refactor(cli): align semver imports with merged root changes",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-04-22T07:03:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7bbab5a6dd3cb2aeaffb57f71e382b5738647280",
          "body": "Bump Vendir to v0.45.3 & Update root directory imports from k14s/semver to carvel-dev/semver.",
          "is_bot": false,
          "headline": "Merge pull request #1815 from sameerforge/bump-vendir",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2026-04-21T15:04:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15ca1f18d6d26569c09eb7c63c4b31a1d27290d2",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "Unify semver library to carvel-dev/semver/v4 for kapp-controller root",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-04-17T11:19:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf89244662a4d1d02dbb47f6d9d3f66724f918e4",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>",
          "is_bot": false,
          "headline": "Bump Vendir to v0.45.3",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-04-16T09:08:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32fc39905c641679122a063bf021588e50a57925",
          "body": "* feat(apiserver): implement APIService caBundle reconciliation\n\nSigned-off-by: Himanshu Singh <himansh.singh3@gmail.com>\n\n* chore: resolve review comments\n\nSigned-off-by: Himanshu Singh <himansh.singh3@gmail.com>\n\n* chore: add vendor modules.txt changes\n\nSigned-off-by: Himanshu Singh <himansh.singh\n[…]\nff-by: Himanshu Singh <himansh.singh3@gmail.com>\n\n* go mod vendor changes\n\nSigned-off-by: Himanshu Singh <himansh.singh3@gmail.com>\n\n---------\n\nSigned-off-by: Himanshu Singh <himansh.singh3@gmail.com>",
          "is_bot": false,
          "headline": "feat(apiserver): implement APIService caBundle reconciliation (#1808)",
          "author_name": "Himanshu",
          "author_login": "himsngh",
          "committed_at": "2026-04-06T08:53:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "46eb34c3bea709ade62aed55bfe7bd9a334e98ba",
          "body": "* fix(apiserver): register OpenAPI v2 spec for aggregation\n\nSigned-off-by: Himanshu Singh <himansh.singh3@gmail.com>\n\n* fix(apiserver): initialize OpenAPI specs before applyTo and enforce v3 version\n\nThis commit addresses OpenAPI spec generation issues by ensuring both V2 and V3 configurations are i\n[…]\nnfo.Version' to 'v1alpha1' to satisfy strict OpenAPI schema requirements.\n\nSigned-off-by: Himanshu Singh <himansh.singh3@gmail.com>\n\n---------\n\nSigned-off-by: Himanshu Singh <himansh.singh3@gmail.com>",
          "is_bot": false,
          "headline": "fix(apiserver): register OpenAPI v2 spec for aggregation (#1803)",
          "author_name": "Himanshu",
          "author_login": "himsngh",
          "committed_at": "2026-04-06T06:57:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d7a222bee93801a38af7c8cc058d613d89e93fd",
          "body": "Signed-off-by: Praveen Rewar <8457124+praveenrewar@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Use v0.29.0 of buildkit in release process (#1810)",
          "author_name": "Praveen Rewar",
          "author_login": "praveenrewar",
          "committed_at": "2026-04-03T13:07:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a8f3e33aa7a0bb3778e623de257532fb60b6b83",
          "body": "Signed-off-by: Praveen Rewar <8457124+praveenrewar@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Disable docker buildx default attestations in release (#1809)",
          "author_name": "Praveen Rewar",
          "author_login": "praveenrewar",
          "committed_at": "2026-04-02T13:26:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a8f1e3ae7a0aa28028f223cbf3a3794a7b78bdc",
          "body": "* Fix zombie process race condition in sidecar container\n\nReplace custom reapZombies implementation with tini as PID 1 to eliminate\nrace condition causing \"waitid: no child processes\" errors during template\noperations.\n\nProblem:\n- reapZombies() used syscall.Wait4(-1, ...) which reaps ANY child proce\n[…]\n regular comments (#)\nto avoid template compilation errors.\n\nSigned-off-by: Marin Dzhigarov <m.dzhigarov@gmail.com>\nMade-with: Cursor\n\n---------\n\nSigned-off-by: Marin Dzhigarov <m.dzhigarov@gmail.com>",
          "is_bot": false,
          "headline": "Fix zombie process race condition in sidecar container (#1806)",
          "author_name": "Marin Dzhigarov",
          "author_login": "mdzhigarov",
          "committed_at": "2026-04-01T19:07:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "84c5e28775b1807645c02c2dfcb63ae09b9b9c68",
          "body": "Add --bundle flag for cosign blob sign and verify commands",
          "is_bot": false,
          "headline": "Merge pull request #1794 from carvel-dev/cosign-v4-fix",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-03-05T17:42:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f282a94102158ed240c804036fbd791cc067c056",
          "body": "for cosign v4 changes\n\nSigned-off-by: Devanshu <devanshu.d@broadcom.com>",
          "is_bot": false,
          "headline": "Add --bundle flag for cosign blob sign and verify commands",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-03-05T07:07:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "349e83c414e8b00396cefc402e78bd20948573c1",
          "body": "…ntelemetry.io/otel/sdk-1.40.0\n\nBump go.opentelemetry.io/otel/sdk from 1.32.0 to 1.40.0",
          "is_bot": false,
          "headline": "Merge pull request #1792 from carvel-dev/dependabot/go_modules/go.ope…",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-03-04T18:24:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bb4ea24ffa32f132f8ae8d812e6c9d71a365395",
          "body": "Downgrade helm from v4 to latest v3 patch",
          "is_bot": false,
          "headline": "Merge pull request #1793 from devanshuVmware/bump-kbld-helm-downgrade",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-03-04T17:46:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67798416e2d27fc7847be72e579e9884ecb6b41d",
          "body": null,
          "is_bot": false,
          "headline": "Update correct checksum for helm linux arm64",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-03-04T14:02:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c9012bab8e47581ed432d1785e13c5224efcd43",
          "body": "Bump dependencies",
          "is_bot": false,
          "headline": "Merge pull request #1791 from carvel-dev/bump-dependencies",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-03-04T12:20:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e511589ef1a7276529147562cf578867006d9d8",
          "body": "Signed-off-by: Carvel Bot <svc.bot.carvel@vmware.com>",
          "is_bot": false,
          "headline": "Bump dependencies",
          "author_name": "Carvel Bot",
          "author_login": "carvel-bot",
          "committed_at": "2026-03-04T10:37:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b5ce0b01d75148566b49497b4aa5e901474d45d",
          "body": "v4 introduces breaking changes for url scheme for registries\n\nSigned-off-by: Devanshu <devanshu.d@broadcom.com>",
          "is_bot": false,
          "headline": "Downgrade helm from v4 to latest v3 patch",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-03-03T11:49:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce5eb5c17c5dbbd22b5975c1889c6f1aaf84e5f9",
          "body": "…gstore/cosign-installer-4.0.0\n\nBump sigstore/cosign-installer from 3.9.1 to 4.0.0",
          "is_bot": false,
          "headline": "Merge pull request #1771 from carvel-dev/dependabot/github_actions/si…",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-03-03T11:32:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "132c923ade01ff23ae34071df0bb311d2b64b27b",
          "body": "…cker/login-action-3.6.0\n\nBump docker/login-action from 3.4.0 to 3.6.0",
          "is_bot": false,
          "headline": "Merge pull request #1763 from carvel-dev/dependabot/github_actions/do…",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-03-03T11:31:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32e42d1e7eaf1b0557391b552cb899f343588c5c",
          "body": "Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.32.0 to 1.40.0.\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\n- [Commits](https://\n[…]\n...v1.40.0)\n\n---\nupdated-dependencies:\n- dependency-name: go.opentelemetry.io/otel/sdk\n  dependency-version: 1.40.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump go.opentelemetry.io/otel/sdk from 1.32.0 to 1.40.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-01T22:23:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9671d15d5f1ec98dbf23a194dfdb2c176db5553c",
          "body": "Bumps [docker/login-action](https://github.com/docker/login-action) from 3.4.0 to 3.6.0.\n- [Release notes](https://github.com/docker/login-action/releases)\n- [Commits](https://github.com/docker/login-action/compare/v3.4.0...v3.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: docker/login-action\n  dependency-version: 3.6.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump docker/login-action from 3.4.0 to 3.6.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-19T18:51:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a53f88b79ff5ebbb0248e59347bf378db044335",
          "body": "Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.9.1 to 4.0.0.\n- [Release notes](https://github.com/sigstore/cosign-installer/releases)\n- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.9.1...v4.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: sigstore/cosign-installer\n  dependency-version: 4.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump sigstore/cosign-installer from 3.9.1 to 4.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-19T18:51:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5416cdcae968433a8d820ff94203eb031e44134",
          "body": "Bump Carvel Dependencies",
          "is_bot": false,
          "headline": "Merge pull request #1789 from CodesbyUnnati/bump-dependencies",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-02-19T09:20:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8021d7aebb873069edc583039f44eb4d9cf47f94",
          "body": "Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>\n\nBump deps\n\nSigned-off-by: Unnati Mishra <unnati.mishra@broadcom.com>\n\nBump cli\n\nSigned-off-by: Unnati Mishra <unnati.mishra@broadcom.com>",
          "is_bot": false,
          "headline": "Bump Carvel Dependencies",
          "author_name": "Unnati Mishra",
          "author_login": null,
          "committed_at": "2026-02-19T07:10:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d8c1ff6eb003f07c1808d610c2d375f51d07cff",
          "body": "Bump dependencies",
          "is_bot": false,
          "headline": "Merge pull request #1788 from carvel-dev/bump-dependencies",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-02-19T06:48:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec7cfb7724692b440a2ff82d2a3bff6062cc83ad",
          "body": "Signed-off-by: Carvel Bot <svc.bot.carvel@vmware.com>",
          "is_bot": false,
          "headline": "Bump dependencies",
          "author_name": "Carvel Bot",
          "author_login": "carvel-bot",
          "committed_at": "2026-02-17T12:19:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd69420827cd587a6e7b9d03aaa9c43ef8da07d2",
          "body": "Bump dependencies",
          "is_bot": false,
          "headline": "Merge pull request #1779 from carvel-dev/bump-dependencies",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-02-17T07:20:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c06532287bc30775a157c2e3e9bf47fdecc195bf",
          "body": "Signed-off-by: Carvel Bot <svc.bot.carvel@vmware.com>",
          "is_bot": false,
          "headline": "Bump dependencies",
          "author_name": "Carvel Bot",
          "author_login": "carvel-bot",
          "committed_at": "2026-02-17T06:39:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "81d71a4ac9623f21eccd57d6724e710a999fe45a",
          "body": "Bump golang 1.25.7 + golangci-lint",
          "is_bot": false,
          "headline": "Merge pull request #1784 from sameerforge/bump-golang-1.25.5",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2026-02-17T06:26:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "add7a84c937dfc038c430647148c577a011d9409",
          "body": "Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>",
          "is_bot": false,
          "headline": "Update new-from-rev SHA",
          "author_name": "Unnati Mishra",
          "author_login": null,
          "committed_at": "2026-02-16T12:42:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "775431e3f98cb6006e896c8ae7d353080ce07e6d",
          "body": "Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>",
          "is_bot": false,
          "headline": "Update go mod for cli folder",
          "author_name": "Unnati Mishra",
          "author_login": null,
          "committed_at": "2026-02-16T12:42:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25ac0350374389830a8d1afd8109208593171be4",
          "body": "Signed-off-by: Sameer <sameer.khan@broadcom.com>\n\nBump golang 1.25.7\n\nSigned-off-by: Unnati Mishra <unnati.mishra@broadcom.com>\n\nBump golang to 1.25.6 to fix CVEs\n\nSigned-off-by: Unnati Mishra <unnati.mishra@broadcom.com>",
          "is_bot": false,
          "headline": "Bump golang + golangci-lint",
          "author_name": "Sameer",
          "author_login": "sameerforge",
          "committed_at": "2026-02-16T12:42:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97995c030c948b44e4a79d3a94733f302d6ba6e9",
          "body": "Fix kapp ctrl CVEs on develop branch",
          "is_bot": false,
          "headline": "Merge pull request #1778 from CodesbyUnnati/fix-kapp-ctrl-cve",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2025-11-28T13:25:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1356f898a6a28e5b12e113cdc4cb5917d8f5bf89",
          "body": "Bump dependencies",
          "is_bot": false,
          "headline": "Merge pull request #1775 from carvel-dev/bump-dependencies",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2025-11-28T13:23:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "befc7e205b8612ddd91bd492413dc01161575da2",
          "body": "Signed-off-by: Devanshu <devanshu.d@broadcom.com>",
          "is_bot": false,
          "headline": "Bump helm dependency to v3.19.2 to avoid v4.x breaking changes",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2025-11-28T12:30:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "564a9ab2c5a0bc0b19ee8ab0139719ef26c6a7f1",
          "body": "Signed-off-by: Carvel Bot <svc.bot.carvel@vmware.com>",
          "is_bot": false,
          "headline": "Bump dependencies",
          "author_name": "Carvel Bot",
          "author_login": "carvel-bot",
          "committed_at": "2025-11-28T12:11:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6ff52818733525054a7c930b1b391a32be1c043",
          "body": "Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>\n\nFix formatted string error\n\nSigned-off-by: Unnati Mishra <unnati.mishra@broadcom.com>",
          "is_bot": false,
          "headline": "Fix formatted string error",
          "author_name": "Unnati Mishra",
          "author_login": null,
          "committed_at": "2025-11-28T07:23:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6af6c8f2d39f07c28d63eed7658a134465ae8cfc",
          "body": "Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>\n\nResolve build failures\n\nSigned-off-by: Unnati Mishra <unnati.mishra@broadcom.com>\n\nUpdate go mod\n\nUpdate go mod + vendor\n\nSigned-off-by: Unnati Mishra <unnati.mishra@broadcom.com>\n\nAdd kctrl with blank imports\n\nSigned-off-by: Unnati Mishra <unnati.mishra@broadcom.com>\n\nUpdate go mod for cli dir\n\nSigned-off-by: Unnati Mishra <unnati.mishra@broadcom.com>",
          "is_bot": false,
          "headline": "Update go mod for cli dir",
          "author_name": "Unnati Mishra",
          "author_login": null,
          "committed_at": "2025-11-28T06:03:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "394f8376c94b27cfd781dd02bfe8544570f962bb",
          "body": "Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>",
          "is_bot": false,
          "headline": "Bump vendir version + go mod/vendor",
          "author_name": "Unnati Mishra",
          "author_login": null,
          "committed_at": "2025-11-25T10:08:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "687b927a0793c18c03374a3df62ebc6179ceb62d",
          "body": "Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>",
          "is_bot": false,
          "headline": "go mod + vendor changes",
          "author_name": "Unnati Mishra",
          "author_login": null,
          "committed_at": "2025-11-25T10:05:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a00eba7b30b7525d4c569eb11879e3bebfb434c4",
          "body": "Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>",
          "is_bot": false,
          "headline": "Bump golang, crypto, oauth2",
          "author_name": "Unnati Mishra",
          "author_login": null,
          "committed_at": "2025-11-25T10:04:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "362e88c0159706ce3b66f22e4d342364699d5203",
          "body": "Bump dependencies",
          "is_bot": false,
          "headline": "Merge pull request #1733 from carvel-dev/bump-dependencies",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2025-11-12T13:31:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a8a3dcd6f83b5cea586318cd5289b81e14a2fc1",
          "body": "Signed-off-by: Carvel Bot <svc.bot.carvel@vmware.com>",
          "is_bot": false,
          "headline": "Bump dependencies",
          "author_name": "Carvel Bot",
          "author_login": "carvel-bot",
          "committed_at": "2025-11-11T12:11:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c1aa96fe67ef6edff6b3e1aa8016766fa392d2f",
          "body": "…onflicts (#1766)\n\n* Add retry logic for App CR updates to handle optimistic concurrency conflicts\n\n- Implement updateAppWithRetry() function in PackageInstall reconciler\n- Add retry logic with up to 5 attempts for App CR updates\n- Re-fetch App CR after each failed update to get latest resourceVersi\n[…]\nl other errors\n(including NotFound) are returned immediately without retries.\n\nSigned-off-by: Marin Dzhigarov <m.dzhigarov@gmail.com>\n\n---------\n\nSigned-off-by: Marin Dzhigarov <m.dzhigarov@gmail.com>",
          "is_bot": false,
          "headline": "Add retry logic for App CR updates to handle optimistic concurrency c…",
          "author_name": "Marin Dzhigarov",
          "author_login": "mdzhigarov",
          "committed_at": "2025-10-14T11:45:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e94726facd807c254369aa4d1c30afcb63384fca",
          "body": "* Bump minimum k8s version in tests\n\nSigned-off-by: Praveen Rewar <8457124+praveenrewar@users.noreply.github.com>\n\n* Use grafana chart to test helm\n\nSigned-off-by: Praveen Rewar <8457124+praveenrewar@users.noreply.github.com>\n\n* Skip some example helm tests for now\n\nSigned-off-by: Praveen Rewar <8457124+praveenrewar@users.noreply.github.com>\n\n---------\n\nSigned-off-by: Praveen Rewar <8457124+praveenrewar@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Bump minimum k8s version, images and helm chart in tests (#1767)",
          "author_name": "Praveen Rewar",
          "author_login": "praveenrewar",
          "committed_at": "2025-10-14T07:30:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "367ae9a5170db012d425404ecf7b09af0fb73369",
          "body": "* Fix PKGI reconciliation taking old App status during upgrade\n\nSigned-off-by: Marin Dzhigarov <mdzhigarov@vmware.com>\n\n* Addresses comments\n\nSigned-off-by: Marin Dzhigarov <mdzhigarov@vmware.com>\n\n---------\n\nSigned-off-by: Marin Dzhigarov <mdzhigarov@vmware.com>\nCo-authored-by: Marin Dzhigarov <mdzhigarov@vmware.com>",
          "is_bot": false,
          "headline": "Fix PKGI reconciliation taking old App status during upgrade (#1751)",
          "author_name": "Marin Dzhigarov",
          "author_login": "mdzhigarov",
          "committed_at": "2025-08-20T07:03:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb948f63b890ade2a4cf1923c12e69d15589b592",
          "body": "…ftprops/action-gh-release-2.3.2\n\nBump softprops/action-gh-release from 2.2.2 to 2.3.2",
          "is_bot": false,
          "headline": "Merge pull request #1735 from carvel-dev/dependabot/github_actions/so…",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2025-07-15T08:46:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72e047dbf9822e87b367731ccfeb7b9aa256df16",
          "body": "…gstore/cosign-installer-3.9.1\n\nBump sigstore/cosign-installer from 3.8.2 to 3.9.1",
          "is_bot": false,
          "headline": "Merge pull request #1738 from carvel-dev/dependabot/github_actions/si…",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2025-07-15T08:45:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d07121cda9c34bbfc9ca7ee73ab939390e453c75",
          "body": "Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.8.2 to 3.9.1.\n- [Release notes](https://github.com/sigstore/cosign-installer/releases)\n- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.8.2...v3.9.1)\n\n---\nupdated-dependencies:\n- dependency-name: sigstore/cosign-installer\n  dependency-version: 3.9.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump sigstore/cosign-installer from 3.8.2 to 3.9.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-23T23:02:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d655b2b0d90a9dde77f1f5f6afb777224f22994c",
          "body": "Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.2.2 to 2.3.2.\n- [Release notes](https://github.com/softprops/action-gh-release/releases)\n- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/so\n[…]\ny-name: softprops/action-gh-release\n  dependency-version: 2.3.2\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump softprops/action-gh-release from 2.2.2 to 2.3.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-16T23:05:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b221a850ba1c0eca77d3ca8fcb9917df19275b90",
          "body": "Update go version to fix CVEs",
          "is_bot": false,
          "headline": "Merge pull request #1732 from devanshuVmware/bump-go",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2025-05-27T07:13:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "69ed5ac9eeabbd7d72a7f93eb73be8e98e0ccc2a",
          "body": "Signed-off-by: Devanshu <devanshu.d@broadcom.com>",
          "is_bot": false,
          "headline": "Bump vendir for cli",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2025-05-26T11:30:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59cbdf67922adf3acf333e8ff5195e7a064582ed",
          "body": "Signed-off-by: Devanshu <devanshu.d@broadcom.com>",
          "is_bot": false,
          "headline": "Fix github workflows",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2025-05-26T11:14:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f3b6197bc8a9f6fa7104b93a171db1dacd95d74",
          "body": "Signed-off-by: Devanshu <devanshu.d@broadcom.com>",
          "is_bot": false,
          "headline": "Bump vendir version in go.mod",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2025-05-26T10:57:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2af569224af77fc30b6a4b8d6a8902c35168f875",
          "body": "update kapp-controller version in cli\n\nSigned-off-by: Devanshu <devanshu.d@broadcom.com>",
          "is_bot": false,
          "headline": "Update go version to fix CVEs",
          "author_name": "Devanshu",
          "author_login": "devacts",
          "committed_at": "2025-05-23T04:19:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46c341abfab13106f0d06761af7d1eefaf6e7e85",
          "body": "Signed-off-by: Carvel Bot <svc.bot.carvel@vmware.com>",
          "is_bot": false,
          "headline": "Bump dependencies (#1723)",
          "author_name": "Carvel Bot",
          "author_login": "carvel-bot",
          "committed_at": "2025-05-22T07:21:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0f44ca92a5e7adebbf4bb65ee4b3386b64b836f",
          "body": "…ackapi/slack-github-action-2.1.0\n\nBump slackapi/slack-github-action from 2.0.0 to 2.1.0",
          "is_bot": false,
          "headline": "Merge pull request #1728 from carvel-dev/dependabot/github_actions/sl…",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2025-05-16T17:33:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d58d7dd336112754d7796847899e3224fa501f5",
          "body": "…thub.com/getkin/kin-openapi-0.131.0\n\nBump github.com/getkin/kin-openapi from 0.81.0 to 0.131.0 in /cli",
          "is_bot": false,
          "headline": "Merge pull request #1729 from carvel-dev/dependabot/go_modules/cli/gi…",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2025-05-16T17:32:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7d19f6fba5930eaeabfbe855238dcd5f1bb9585",
          "body": "Bumps [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) from 0.81.0 to 0.131.0.\n- [Release notes](https://github.com/getkin/kin-openapi/releases)\n- [Commits](https://github.com/getkin/kin-openapi/compare/v0.81.0...v0.131.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/getkin/kin-openapi\n  dependency-version: 0.131.0\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump github.com/getkin/kin-openapi from 0.81.0 to 0.131.0 in /cli",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-15T16:49:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed679e57f08dae649085424235065ef84646e085",
          "body": "Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 2.0.0 to 2.1.0.\n- [Release notes](https://github.com/slackapi/slack-github-action/releases)\n- [Commits](https://github.com/slackapi/slack-github-action/compare/v2.0.0...v2.1.0)\n\n---\nupdated-dependencies:\n- dep\n[…]\n-name: slackapi/slack-github-action\n  dependency-version: 2.1.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump slackapi/slack-github-action from 2.0.0 to 2.1.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-12T21:42:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d38fe46a473ed2da06081004942cd7408d902950",
          "body": "Downgrade sops dependency to v3.9.0",
          "is_bot": false,
          "headline": "Merge pull request #1727 from aroradaman/fix-sops-license",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2025-05-12T14:40:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "983f94590c399ab93c3ca75b32d83b4673040420",
          "body": "This intentionally downgrades mozilla/sops version to v3.9.0.\nThe version v3.9.0 was built using MPL 2.0 licensed go module\nof hashicorp/vault, all the versions of sops greater than\nv3.9.0 are built using BSL 1.1 licensed go module of\nhashicorp/vault.\n\nSigned-off-by: Daman Arora <aroradaman@gmail.com>",
          "is_bot": false,
          "headline": "downgrade sops dependency to v3.9.0",
          "author_name": "Daman Arora",
          "author_login": "aroradaman",
          "committed_at": "2025-05-12T08:33:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c4be77ca64fe41b82f32584993439488308571d",
          "body": "Bump kc in kctrl",
          "is_bot": false,
          "headline": "Merge pull request #1726 from praveenrewar/bump-kc-in-kctrl",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2025-05-09T22:02:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d40fbf743fdc8ab6dc5580547a2014f332afadd",
          "body": "Signed-off-by: Praveen Rewar <8457124+praveenrewar@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Bump kc in kctrl",
          "author_name": "Praveen Rewar",
          "author_login": "praveenrewar",
          "committed_at": "2025-05-09T14:44:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a51bb23420dd0411d446ad54c9c3ecbf37e0aee",
          "body": "add optional kbld platform selection option in App/Package specs",
          "is_bot": false,
          "headline": "Merge pull request #1721 from carvel-dev/kbld-platform",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2025-05-06T14:51:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "920fcabbbc73d9fbfb98772bd8ba28dfe388a0d1",
          "body": "Signed-off-by: João Pereira <joao.pereira@broadcom.com>",
          "is_bot": false,
          "headline": "Run generation",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2025-05-01T17:41:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca74a6195afa227e549391bfd5be4c588d447baf",
          "body": "Signed-off-by: Dmitriy Kalinin <dkalinin@vmware.com>",
          "is_bot": false,
          "headline": "add optional kbld platform selection option in App/Package specs",
          "author_name": "Dmitriy Kalinin",
          "author_login": null,
          "committed_at": "2025-05-01T15:56:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c75a4952c46635ddaa45474cfacb1e034ac12e8",
          "body": "…gstore/cosign-installer-3.8.2\n\nBump sigstore/cosign-installer from 3.7.0 to 3.8.2",
          "is_bot": false,
          "headline": "Merge pull request #1718 from carvel-dev/dependabot/github_actions/si…",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2025-04-29T18:26:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c9bf5c4533b9a3a14c29011070b6a6941fe9fbb",
          "body": "…ftprops/action-gh-release-2.2.2\n\nBump softprops/action-gh-release from 2.0.5 to 2.2.2",
          "is_bot": false,
          "headline": "Merge pull request #1719 from carvel-dev/dependabot/github_actions/so…",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2025-04-29T18:25:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c105f6b839ed1008f6263e7d0fa31c13e64b74e",
          "body": "…tions/cache-4\n\nBump actions/cache from 3 to 4",
          "is_bot": false,
          "headline": "Merge pull request #1717 from carvel-dev/dependabot/github_actions/ac…",
          "author_name": "João Pereira",
          "author_login": "joaopapereira",
          "committed_at": "2025-04-29T18:25:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fcf93abcd0d52b655c3b2a14d709737de6077f49",
          "body": "Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.0.5 to 2.2.2.\n- [Release notes](https://github.com/softprops/action-gh-release/releases)\n- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/so\n[…]\ny-name: softprops/action-gh-release\n  dependency-version: 2.2.2\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump softprops/action-gh-release from 2.0.5 to 2.2.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-28T22:23:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "81587a503936cf271904e96eaefdf0edcd8c42a0",
          "body": "Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.7.0 to 3.8.2.\n- [Release notes](https://github.com/sigstore/cosign-installer/releases)\n- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.7.0...v3.8.2)\n\n---\nupdated-dependencies:\n- dependency-name: sigstore/cosign-installer\n  dependency-version: 3.8.2\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump sigstore/cosign-installer from 3.7.0 to 3.8.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-28T22:22:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 74,
      "latest_release_at": "2026-07-16T11:57:16Z",
      "latest_release_tag": "v0.60.4",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 24,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 16.3
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 87,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "carvel.dev/kapp-controller",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": null,
          "registry_url": "https://pkg.go.dev/carvel.dev/kapp-controller",
          "is_deprecated": false,
          "latest_version": "v0.60.4",
          "repository_url": null,
          "versions_count": 192,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-16T11:30:16Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 127,
      "stars": 316,
      "watchers": 16,
      "fork_history": {
        "days": [
          {
            "date": "2020-03-26",
            "count": 1
          },
          {
            "date": "2020-04-18",
            "count": 1
          },
          {
            "date": "2020-04-24",
            "count": 1
          },
          {
            "date": "2020-04-27",
            "count": 1
          },
          {
            "date": "2020-06-02",
            "count": 1
          },
          {
            "date": "2020-08-12",
            "count": 1
          },
          {
            "date": "2020-09-09",
            "count": 1
          },
          {
            "date": "2020-10-16",
            "count": 1
          },
          {
            "date": "2020-11-10",
            "count": 1
          },
          {
            "date": "2020-11-24",
            "count": 1
          },
          {
            "date": "2020-12-16",
            "count": 1
          },
          {
            "date": "2021-01-06",
            "count": 1
          },
          {
            "date": "2021-01-13",
            "count": 1
          },
          {
            "date": "2021-02-01",
            "count": 1
          },
          {
            "date": "2021-04-05",
            "count": 1
          },
          {
            "date": "2021-05-06",
            "count": 1
          },
          {
            "date": "2021-05-12",
            "count": 1
          },
          {
            "date": "2021-05-14",
            "count": 1
          },
          {
            "date": "2021-05-19",
            "count": 1
          },
          {
            "date": "2021-06-04",
            "count": 1
          },
          {
            "date": "2021-07-19",
            "count": 1
          },
          {
            "date": "2021-07-20",
            "count": 1
          },
          {
            "date": "2021-09-19",
            "count": 1
          },
          {
            "date": "2021-09-23",
            "count": 1
          },
          {
            "date": "2021-09-29",
            "count": 2
          },
          {
            "date": "2021-10-08",
            "count": 1
          },
          {
            "date": "2021-10-23",
            "count": 1
          },
          {
            "date": "2021-10-24",
            "count": 1
          },
          {
            "date": "2021-10-29",
            "count": 1
          },
          {
            "date": "2021-11-03",
            "count": 1
          },
          {
            "date": "2021-11-05",
            "count": 1
          },
          {
            "date": "2021-11-17",
            "count": 1
          },
          {
            "date": "2021-11-19",
            "count": 1
          },
          {
            "date": "2021-12-15",
            "count": 1
          },
          {
            "date": "2022-01-19",
            "count": 1
          },
          {
            "date": "2022-01-31",
            "count": 1
          },
          {
            "date": "2022-03-01",
            "count": 1
          },
          {
            "date": "2022-03-24",
            "count": 1
          },
          {
            "date": "2022-03-30",
            "count": 1
          },
          {
            "date": "2022-05-11",
            "count": 1
          },
          {
            "date": "2022-05-23",
            "count": 1
          },
          {
            "date": "2022-06-07",
            "count": 1
          },
          {
            "date": "2022-06-09",
            "count": 1
          },
          {
            "date": "2022-07-06",
            "count": 1
          },
          {
            "date": "2022-07-13",
            "count": 1
          },
          {
            "date": "2022-07-30",
            "count": 1
          },
          {
            "date": "2022-08-09",
            "count": 1
          },
          {
            "date": "2022-08-29",
            "count": 1
          },
          {
            "date": "2022-10-11",
            "count": 1
          },
          {
            "date": "2022-11-01",
            "count": 1
          },
          {
            "date": "2023-01-12",
            "count": 1
          },
          {
            "date": "2023-02-22",
            "count": 1
          },
          {
            "date": "2023-02-27",
            "count": 1
          },
          {
            "date": "2023-03-12",
            "count": 1
          },
          {
            "date": "2023-04-05",
            "count": 1
          },
          {
            "date": "2023-04-23",
            "count": 1
          },
          {
            "date": "2023-05-10",
            "count": 1
          },
          {
            "date": "2023-06-20",
            "count": 1
          },
          {
            "date": "2023-07-12",
            "count": 2
          },
          {
            "date": "2023-07-30",
            "count": 1
          },
          {
            "date": "2023-07-31",
            "count": 1
          },
          {
            "date": "2023-08-02",
            "count": 2
          },
          {
            "date": "2023-08-03",
            "count": 1
          },
          {
            "date": "2023-08-07",
            "count": 1
          },
          {
            "date": "2023-08-08",
            "count": 1
          },
          {
            "date": "2023-08-14",
            "count": 1
          },
          {
            "date": "2023-08-15",
            "count": 1
          },
          {
            "date": "2023-08-16",
            "count": 1
          },
          {
            "date": "2023-08-29",
            "count": 1
          },
          {
            "date": "2023-09-01",
            "count": 1
          },
          {
            "date": "2023-09-26",
            "count": 1
          },
          {
            "date": "2023-09-29",
            "count": 1
          },
          {
            "date": "2023-10-02",
            "count": 1
          },
          {
            "date": "2023-10-31",
            "count": 1
          },
          {
            "date": "2023-11-02",
            "count": 1
          },
          {
            "date": "2023-11-10",
            "count": 1
          },
          {
            "date": "2023-12-15",
            "count": 1
          },
          {
            "date": "2023-12-18",
            "count": 1
          },
          {
            "date": "2023-12-20",
            "count": 1
          },
          {
            "date": "2024-01-15",
            "count": 1
          },
          {
            "date": "2024-01-18",
            "count": 1
          },
          {
            "date": "2024-02-02",
            "count": 1
          },
          {
            "date": "2024-02-07",
            "count": 1
          },
          {
            "date": "2024-02-13",
            "count": 1
          },
          {
            "date": "2024-03-04",
            "count": 1
          },
          {
            "date": "2024-03-14",
            "count": 1
          },
          {
            "date": "2024-03-31",
            "count": 1
          },
          {
            "date": "2024-04-19",
            "count": 1
          },
          {
            "date": "2024-04-26",
            "count": 1
          },
          {
            "date": "2024-05-29",
            "count": 1
          },
          {
            "date": "2024-07-11",
            "count": 1
          },
          {
            "date": "2024-07-18",
            "count": 1
          },
          {
            "date": "2024-08-12",
            "count": 1
          },
          {
            "date": "2024-09-10",
            "count": 1
          },
          {
            "date": "2024-10-06",
            "count": 1
          },
          {
            "date": "2024-10-15",
            "count": 1
          },
          {
            "date": "2024-10-19",
            "count": 1
          },
          {
            "date": "2024-11-26",
            "count": 1
          },
          {
            "date": "2024-12-13",
            "count": 1
          },
          {
            "date": "2025-01-15",
            "count": 1
          },
          {
            "date": "2025-01-21",
            "count": 1
          },
          {
            "date": "2025-01-27",
            "count": 1
          },
          {
            "date": "2025-02-12",
            "count": 1
          },
          {
            "date": "2025-03-17",
            "count": 1
          },
          {
            "date": "2025-04-09",
            "count": 1
          },
          {
            "date": "2025-08-19",
            "count": 1
          },
          {
            "date": "2025-08-30",
            "count": 1
          },
          {
            "date": "2025-11-06",
            "count": 1
          },
          {
            "date": "2025-11-18",
            "count": 1
          },
          {
            "date": "2025-12-04",
            "count": 1
          },
          {
            "date": "2026-02-10",
            "count": 1
          },
          {
            "date": "2026-03-26",
            "count": 2
          },
          {
            "date": "2026-03-31",
            "count": 1
          },
          {
            "date": "2026-04-20",
            "count": 1
          },
          {
            "date": "2026-04-21",
            "count": 2
          },
          {
            "date": "2026-06-17",
            "count": 1
          },
          {
            "date": "2026-07-08",
            "count": 1
          },
          {
            "date": "2026-07-14",
            "count": 1
          },
          {
            "date": "2026-07-15",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 124,
        "total_forks": 127
      },
      "star_history": {
        "days": [
          {
            "date": "2019-11-13",
            "count": 1
          },
          {
            "date": "2019-11-21",
            "count": 1
          },
          {
            "date": "2019-11-25",
            "count": 2
          },
          {
            "date": "2019-12-20",
            "count": 1
          },
          {
            "date": "2019-12-23",
            "count": 1
          },
          {
            "date": "2019-12-28",
            "count": 1
          },
          {
            "date": "2020-01-07",
            "count": 1
          },
          {
            "date": "2020-02-06",
            "count": 1
          },
          {
            "date": "2020-02-09",
            "count": 2
          },
          {
            "date": "2020-02-10",
            "count": 1
          },
          {
            "date": "2020-03-06",
            "count": 1
          },
          {
            "date": "2020-04-01",
            "count": 1
          },
          {
            "date": "2020-04-24",
            "count": 1
          },
          {
            "date": "2020-04-28",
            "count": 1
          },
          {
            "date": "2020-05-08",
            "count": 1
          },
          {
            "date": "2020-05-13",
            "count": 1
          },
          {
            "date": "2020-05-29",
            "count": 1
          },
          {
            "date": "2020-06-03",
            "count": 1
          },
          {
            "date": "2020-06-16",
            "count": 1
          },
          {
            "date": "2020-06-24",
            "count": 1
          },
          {
            "date": "2020-06-25",
            "count": 1
          },
          {
            "date": "2020-07-09",
            "count": 1
          },
          {
            "date": "2020-07-10",
            "count": 1
          },
          {
            "date": "2020-07-16",
            "count": 1
          },
          {
            "date": "2020-07-18",
            "count": 1
          },
          {
            "date": "2020-07-27",
            "count": 1
          },
          {
            "date": "2020-07-31",
            "count": 1
          },
          {
            "date": "2020-08-11",
            "count": 1
          },
          {
            "date": "2020-08-20",
            "count": 1
          },
          {
            "date": "2020-08-21",
            "count": 1
          },
          {
            "date": "2020-08-27",
            "count": 1
          },
          {
            "date": "2020-09-02",
            "count": 1
          },
          {
            "date": "2020-09-03",
            "count": 1
          },
          {
            "date": "2020-09-06",
            "count": 1
          },
          {
            "date": "2020-09-10",
            "count": 1
          },
          {
            "date": "2020-09-18",
            "count": 1
          },
          {
            "date": "2020-10-01",
            "count": 1
          },
          {
            "date": "2020-10-04",
            "count": 1
          },
          {
            "date": "2020-10-06",
            "count": 1
          },
          {
            "date": "2020-11-07",
            "count": 1
          },
          {
            "date": "2020-11-10",
            "count": 1
          },
          {
            "date": "2020-11-15",
            "count": 1
          },
          {
            "date": "2020-11-20",
            "count": 1
          },
          {
            "date": "2020-12-01",
            "count": 1
          },
          {
            "date": "2020-12-13",
            "count": 1
          },
          {
            "date": "2020-12-16",
            "count": 1
          },
          {
            "date": "2020-12-28",
            "count": 1
          },
          {
            "date": "2021-01-06",
            "count": 2
          },
          {
            "date": "2021-01-15",
            "count": 1
          },
          {
            "date": "2021-01-19",
            "count": 1
          },
          {
            "date": "2021-01-20",
            "count": 1
          },
          {
            "date": "2021-01-21",
            "count": 1
          },
          {
            "date": "2021-01-24",
            "count": 1
          },
          {
            "date": "2021-01-27",
            "count": 1
          },
          {
            "date": "2021-01-29",
            "count": 1
          },
          {
            "date": "2021-02-01",
            "count": 1
          },
          {
            "date": "2021-02-02",
            "count": 2
          },
          {
            "date": "2021-02-03",
            "count": 1
          },
          {
            "date": "2021-03-01",
            "count": 1
          },
          {
            "date": "2021-03-20",
            "count": 1
          },
          {
            "date": "2021-03-27",
            "count": 1
          },
          {
            "date": "2021-04-01",
            "count": 1
          },
          {
            "date": "2021-04-02",
            "count": 1
          },
          {
            "date": "2021-04-12",
            "count": 1
          },
          {
            "date": "2021-04-25",
            "count": 1
          },
          {
            "date": "2021-05-13",
            "count": 2
          },
          {
            "date": "2021-05-14",
            "count": 1
          },
          {
            "date": "2021-05-17",
            "count": 1
          },
          {
            "date": "2021-06-28",
            "count": 1
          },
          {
            "date": "2021-07-13",
            "count": 1
          },
          {
            "date": "2021-07-30",
            "count": 1
          },
          {
            "date": "2021-08-05",
            "count": 1
          },
          {
            "date": "2021-08-17",
            "count": 1
          },
          {
            "date": "2021-08-19",
            "count": 1
          },
          {
            "date": "2021-08-31",
            "count": 1
          },
          {
            "date": "2021-09-08",
            "count": 1
          },
          {
            "date": "2021-09-10",
            "count": 1
          },
          {
            "date": "2021-09-16",
            "count": 1
          },
          {
            "date": "2021-09-20",
            "count": 1
          },
          {
            "date": "2021-09-27",
            "count": 1
          },
          {
            "date": "2021-09-29",
            "count": 2
          },
          {
            "date": "2021-10-03",
            "count": 1
          },
          {
            "date": "2021-10-06",
            "count": 1
          },
          {
            "date": "2021-10-09",
            "count": 1
          },
          {
            "date": "2021-10-26",
            "count": 1
          },
          {
            "date": "2021-10-27",
            "count": 1
          },
          {
            "date": "2021-11-05",
            "count": 1
          },
          {
            "date": "2021-11-09",
            "count": 1
          },
          {
            "date": "2021-11-10",
            "count": 1
          },
          {
            "date": "2021-11-23",
            "count": 1
          },
          {
            "date": "2021-12-05",
            "count": 1
          },
          {
            "date": "2021-12-15",
            "count": 1
          },
          {
            "date": "2022-01-19",
            "count": 1
          },
          {
            "date": "2022-01-22",
            "count": 1
          },
          {
            "date": "2022-01-27",
            "count": 2
          },
          {
            "date": "2022-01-28",
            "count": 1
          },
          {
            "date": "2022-02-08",
            "count": 1
          },
          {
            "date": "2022-02-11",
            "count": 1
          },
          {
            "date": "2022-03-11",
            "count": 2
          },
          {
            "date": "2022-03-14",
            "count": 1
          },
          {
            "date": "2022-03-17",
            "count": 1
          },
          {
            "date": "2022-03-23",
            "count": 1
          },
          {
            "date": "2022-03-24",
            "count": 1
          },
          {
            "date": "2022-03-25",
            "count": 1
          },
          {
            "date": "2022-03-27",
            "count": 1
          },
          {
            "date": "2022-04-01",
            "count": 1
          },
          {
            "date": "2022-04-19",
            "count": 1
          },
          {
            "date": "2022-04-29",
            "count": 1
          },
          {
            "date": "2022-05-12",
            "count": 2
          },
          {
            "date": "2022-05-17",
            "count": 1
          },
          {
            "date": "2022-05-18",
            "count": 1
          },
          {
            "date": "2022-05-23",
            "count": 1
          },
          {
            "date": "2022-05-26",
            "count": 1
          },
          {
            "date": "2022-06-09",
            "count": 1
          },
          {
            "date": "2022-06-22",
            "count": 1
          },
          {
            "date": "2022-06-24",
            "count": 1
          },
          {
            "date": "2022-06-26",
            "count": 1
          },
          {
            "date": "2022-07-02",
            "count": 1
          },
          {
            "date": "2022-07-23",
            "count": 1
          },
          {
            "date": "2022-07-25",
            "count": 2
          },
          {
            "date": "2022-07-28",
            "count": 1
          },
          {
            "date": "2022-08-02",
            "count": 1
          },
          {
            "date": "2022-08-17",
            "count": 1
          },
          {
            "date": "2022-08-26",
            "count": 1
          },
          {
            "date": "2022-08-28",
            "count": 1
          },
          {
            "date": "2022-08-29",
            "count": 1
          },
          {
            "date": "2022-08-30",
            "count": 1
          },
          {
            "date": "2022-09-21",
            "count": 1
          },
          {
            "date": "2022-09-30",
            "count": 1
          },
          {
            "date": "2022-10-02",
            "count": 1
          },
          {
            "date": "2022-10-10",
            "count": 1
          },
          {
            "date": "2022-10-12",
            "count": 1
          },
          {
            "date": "2022-10-26",
            "count": 2
          },
          {
            "date": "2022-11-06",
            "count": 1
          },
          {
            "date": "2022-11-09",
            "count": 1
          },
          {
            "date": "2022-12-01",
            "count": 1
          },
          {
            "date": "2023-01-10",
            "count": 1
          },
          {
            "date": "2023-01-19",
            "count": 1
          },
          {
            "date": "2023-02-01",
            "count": 1
          },
          {
            "date": "2023-02-13",
            "count": 1
          },
          {
            "date": "2023-02-19",
            "count": 1
          },
          {
            "date": "2023-02-20",
            "count": 1
          },
          {
            "date": "2023-03-04",
            "count": 2
          },
          {
            "date": "2023-03-06",
            "count": 1
          },
          {
            "date": "2023-03-13",
            "count": 1
          },
          {
            "date": "2023-03-29",
            "count": 1
          },
          {
            "date": "2023-04-01",
            "count": 1
          },
          {
            "date": "2023-04-27",
            "count": 1
          },
          {
            "date": "2023-04-29",
            "count": 3
          },
          {
            "date": "2023-05-02",
            "count": 2
          },
          {
            "date": "2023-05-13",
            "count": 1
          },
          {
            "date": "2023-05-26",
            "count": 1
          },
          {
            "date": "2023-06-01",
            "count": 1
          },
          {
            "date": "2023-06-03",
            "count": 1
          },
          {
            "date": "2023-06-05",
            "count": 1
          },
          {
            "date": "2023-06-08",
            "count": 1
          },
          {
            "date": "2023-06-15",
            "count": 1
          },
          {
            "date": "2023-06-17",
            "count": 1
          },
          {
            "date": "2023-07-06",
            "count": 1
          },
          {
            "date": "2023-07-10",
            "count": 8
          },
          {
            "date": "2023-07-11",
            "count": 19
          },
          {
            "date": "2023-07-12",
            "count": 1
          },
          {
            "date": "2023-07-14",
            "count": 3
          },
          {
            "date": "2023-07-17",
            "count": 1
          },
          {
            "date": "2023-07-19",
            "count": 1
          },
          {
            "date": "2023-07-20",
            "count": 2
          },
          {
            "date": "2023-07-24",
            "count": 1
          },
          {
            "date": "2023-07-25",
            "count": 1
          },
          {
            "date": "2023-07-28",
            "count": 1
          },
          {
            "date": "2023-08-03",
            "count": 1
          },
          {
            "date": "2023-08-05",
            "count": 1
          },
          {
            "date": "2023-08-06",
            "count": 1
          },
          {
            "date": "2023-08-08",
            "count": 1
          },
          {
            "date": "2023-08-10",
            "count": 1
          },
          {
            "date": "2023-08-11",
            "count": 1
          },
          {
            "date": "2023-08-15",
            "count": 1
          },
          {
            "date": "2023-08-24",
            "count": 1
          },
          {
            "date": "2023-09-11",
            "count": 1
          },
          {
            "date": "2023-09-18",
            "count": 1
          },
          {
            "date": "2023-09-20",
            "count": 1
          },
          {
            "date": "2023-09-22",
            "count": 1
          },
          {
            "date": "2023-09-28",
            "count": 1
          },
          {
            "date": "2023-10-12",
            "count": 1
          },
          {
            "date": "2023-10-23",
            "count": 1
          },
          {
            "date": "2023-11-02",
            "count": 1
          },
          {
            "date": "2023-11-10",
            "count": 1
          },
          {
            "date": "2023-11-13",
            "count": 1
          },
          {
            "date": "2023-11-25",
            "count": 1
          },
          {
            "date": "2023-11-28",
            "count": 1
          },
          {
            "date": "2023-12-03",
            "count": 1
          },
          {
            "date": "2023-12-11",
            "count": 1
          },
          {
            "date": "2023-12-23",
            "count": 1
          },
          {
            "date": "2024-01-14",
            "count": 1
          },
          {
            "date": "2024-01-19",
            "count": 1
          },
          {
            "date": "2024-01-27",
            "count": 1
          },
          {
            "date": "2024-02-07",
            "count": 1
          },
          {
            "date": "2024-02-10",
            "count": 1
          },
          {
            "date": "2024-02-14",
            "count": 1
          },
          {
            "date": "2024-02-18",
            "count": 1
          },
          {
            "date": "2024-03-05",
            "count": 1
          },
          {
            "date": "2024-03-10",
            "count": 1
          },
          {
            "date": "2024-03-14",
            "count": 1
          },
          {
            "date": "2024-03-19",
            "count": 1
          },
          {
            "date": "2024-03-22",
            "count": 1
          },
          {
            "date": "2024-03-26",
            "count": 2
          },
          {
            "date": "2024-04-09",
            "count": 1
          },
          {
            "date": "2024-04-16",
            "count": 1
          },
          {
            "date": "2024-05-02",
            "count": 1
          },
          {
            "date": "2024-05-08",
            "count": 1
          },
          {
            "date": "2024-05-10",
            "count": 1
          },
          {
            "date": "2024-06-07",
            "count": 1
          },
          {
            "date": "2024-06-26",
            "count": 1
          },
          {
            "date": "2024-07-01",
            "count": 1
          },
          {
            "date": "2024-07-10",
            "count": 1
          },
          {
            "date": "2024-07-11",
            "count": 1
          },
          {
            "date": "2024-07-24",
            "count": 1
          },
          {
            "date": "2024-07-28",
            "count": 1
          },
          {
            "date": "2024-08-11",
            "count": 1
          },
          {
            "date": "2024-08-17",
            "count": 1
          },
          {
            "date": "2024-08-25",
            "count": 1
          },
          {
            "date": "2024-10-06",
            "count": 1
          },
          {
            "date": "2024-10-16",
            "count": 1
          },
          {
            "date": "2024-11-12",
            "count": 1
          },
          {
            "date": "2024-11-20",
            "count": 1
          },
          {
            "date": "2024-11-22",
            "count": 1
          },
          {
            "date": "2024-11-27",
            "count": 1
          },
          {
            "date": "2024-12-11",
            "count": 1
          },
          {
            "date": "2024-12-19",
            "count": 1
          },
          {
            "date": "2025-02-09",
            "count": 1
          },
          {
            "date": "2025-02-11",
            "count": 1
          },
          {
            "date": "2025-02-16",
            "count": 1
          },
          {
            "date": "2025-03-04",
            "count": 1
          },
          {
            "date": "2025-03-14",
            "count": 1
          },
          {
            "date": "2025-03-16",
            "count": 1
          },
          {
            "date": "2025-03-28",
            "count": 1
          },
          {
            "date": "2025-04-02",
            "count": 1
          },
          {
            "date": "2025-04-13",
            "count": 1
          },
          {
            "date": "2025-05-01",
            "count": 1
          },
          {
            "date": "2025-05-03",
            "count": 1
          },
          {
            "date": "2025-05-07",
            "count": 1
          },
          {
            "date": "2025-05-13",
            "count": 1
          },
          {
            "date": "2025-06-10",
            "count": 1
          },
          {
            "date": "2025-06-24",
            "count": 1
          },
          {
            "date": "2025-07-27",
            "count": 1
          },
          {
            "date": "2025-07-29",
            "count": 1
          },
          {
            "date": "2025-08-09",
            "count": 1
          },
          {
            "date": "2025-08-29",
            "count": 1
          },
          {
            "date": "2025-09-02",
            "count": 1
          },
          {
            "date": "2025-09-26",
            "count": 1
          },
          {
            "date": "2025-09-27",
            "count": 1
          },
          {
            "date": "2025-11-09",
            "count": 1
          },
          {
            "date": "2025-11-16",
            "count": 1
          },
          {
            "date": "2025-12-02",
            "count": 1
          },
          {
            "date": "2025-12-08",
            "count": 1
          },
          {
            "date": "2025-12-29",
            "count": 1
          },
          {
            "date": "2026-01-23",
            "count": 1
          },
          {
            "date": "2026-02-09",
            "count": 1
          },
          {
            "date": "2026-03-02",
            "count": 1
          },
          {
            "date": "2026-03-16",
            "count": 1
          },
          {
            "date": "2026-03-20",
            "count": 1
          },
          {
            "date": "2026-03-29",
            "count": 1
          },
          {
            "date": "2026-04-13",
            "count": 1
          },
          {
            "date": "2026-04-25",
            "count": 1
          },
          {
            "date": "2026-05-10",
            "count": 1
          },
          {
            "date": "2026-05-18",
            "count": 1
          },
          {
            "date": "2026-05-26",
            "count": 1
          },
          {
            "date": "2026-06-02",
            "count": 1
          },
          {
            "date": "2026-06-10",
            "count": 1
          },
          {
            "date": "2026-06-19",
            "count": 1
          },
          {
            "date": "2026-06-23",
            "count": 1
          },
          {
            "date": "2026-07-03",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 315,
        "total_stars": 316
      },
      "open_issues_and_prs": 203
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "cli/vendor/github.com/emicklei/go-restful/v3/Makefile",
        "cli/vendor/github.com/gogo/protobuf/proto/Makefile",
        "cli/vendor/github.com/munnerz/goautoneg/Makefile",
        "cli/vendor/github.com/prometheus/procfs/Makefile",
        "cli/vendor/github.com/spf13/cobra/Makefile",
        "cli/vendor/go.uber.org/multierr/Makefile",
        "cli/vendor/go.uber.org/zap/Makefile",
        "cli/vendor/sigs.k8s.io/json/Makefile",
        "vendor/github.com/emicklei/go-restful/v3/Makefile",
        "vendor/github.com/felixge/httpsnoop/Makefile",
        "vendor/github.com/gobuffalo/flect/Makefile",
        "vendor/github.com/gogo/protobuf/gogoproto/Makefile",
        "vendor/github.com/gogo/protobuf/proto/Makefile",
        "vendor/github.com/gogo/protobuf/protoc-gen-gogo/Makefile",
        "vendor/github.com/gogo/protobuf/protoc-gen-gogo/descriptor/Makefile",
        "vendor/github.com/gogo/protobuf/protoc-gen-gogo/plugin/Makefile",
        "vendor/github.com/munnerz/goautoneg/Makefile",
        "vendor/github.com/prometheus/procfs/Makefile",
        "vendor/github.com/spf13/cobra/Makefile",
        "vendor/go.opentelemetry.io/otel/Makefile",
        "vendor/go.uber.org/multierr/Makefile",
        "vendor/go.uber.org/zap/Makefile",
        "vendor/google.golang.org/grpc/Makefile",
        "vendor/k8s.io/gengo/v2/Makefile",
        "vendor/sigs.k8s.io/json/Makefile"
      ],
      "api_schema_files": [
        "cli/vendor/carvel.dev/kapp-controller/pkg/apis/kappctrl/v1alpha1/generated.proto",
        "cli/vendor/carvel.dev/kapp-controller/pkg/apiserver/apis/datapackaging/v1alpha1/generated.proto",
        "cli/vendor/carvel.dev/vendir/pkg/vendir/versions/v1alpha1/generated.proto",
        "cli/vendor/github.com/google/gnostic-models/extensions/extension.proto",
        "cli/vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.proto",
        "cli/vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.proto",
        "cli/vendor/github.com/google/gnostic-models/openapiv3/annotations.proto",
        "cli/vendor/k8s.io/api/admission/v1/generated.proto",
        "cli/vendor/k8s.io/api/admission/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/admissionregistration/v1/generated.proto",
        "cli/vendor/k8s.io/api/admissionregistration/v1alpha1/generated.proto",
        "cli/vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/apidiscovery/v2/generated.proto",
        "cli/vendor/k8s.io/api/apidiscovery/v2beta1/generated.proto",
        "cli/vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto",
        "cli/vendor/k8s.io/api/apps/v1/generated.proto",
        "cli/vendor/k8s.io/api/apps/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/apps/v1beta2/generated.proto",
        "cli/vendor/k8s.io/api/authentication/v1/generated.proto",
        "cli/vendor/k8s.io/api/authentication/v1alpha1/generated.proto",
        "cli/vendor/k8s.io/api/authentication/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/authorization/v1/generated.proto",
        "cli/vendor/k8s.io/api/authorization/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/autoscaling/v1/generated.proto",
        "cli/vendor/k8s.io/api/autoscaling/v2/generated.proto",
        "cli/vendor/k8s.io/api/batch/v1/generated.proto",
        "cli/vendor/k8s.io/api/batch/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/certificates/v1/generated.proto",
        "cli/vendor/k8s.io/api/certificates/v1alpha1/generated.proto",
        "cli/vendor/k8s.io/api/certificates/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/coordination/v1/generated.proto",
        "cli/vendor/k8s.io/api/coordination/v1alpha2/generated.proto",
        "cli/vendor/k8s.io/api/coordination/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/core/v1/generated.proto",
        "cli/vendor/k8s.io/api/discovery/v1/generated.proto",
        "cli/vendor/k8s.io/api/discovery/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/events/v1/generated.proto",
        "cli/vendor/k8s.io/api/events/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/extensions/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/flowcontrol/v1/generated.proto",
        "cli/vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/flowcontrol/v1beta2/generated.proto",
        "cli/vendor/k8s.io/api/flowcontrol/v1beta3/generated.proto",
        "cli/vendor/k8s.io/api/networking/v1/generated.proto",
        "cli/vendor/k8s.io/api/networking/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/node/v1/generated.proto",
        "cli/vendor/k8s.io/api/node/v1alpha1/generated.proto",
        "cli/vendor/k8s.io/api/node/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/policy/v1/generated.proto",
        "cli/vendor/k8s.io/api/policy/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/rbac/v1/generated.proto",
        "cli/vendor/k8s.io/api/rbac/v1alpha1/generated.proto",
        "cli/vendor/k8s.io/api/rbac/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/resource/v1/generated.proto",
        "cli/vendor/k8s.io/api/resource/v1alpha3/generated.proto",
        "cli/vendor/k8s.io/api/resource/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/resource/v1beta2/generated.proto",
        "cli/vendor/k8s.io/api/scheduling/v1/generated.proto",
        "cli/vendor/k8s.io/api/scheduling/v1alpha2/generated.proto",
        "cli/vendor/k8s.io/api/scheduling/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/storage/v1/generated.proto",
        "cli/vendor/k8s.io/api/storage/v1alpha1/generated.proto",
        "cli/vendor/k8s.io/api/storage/v1beta1/generated.proto",
        "cli/vendor/k8s.io/api/storagemigration/v1beta1/generated.proto",
        "cli/vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto",
        "cli/vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto",
        "cli/vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto",
        "cli/vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto",
        "cli/vendor/k8s.io/apimachinery/pkg/runtime/generated.proto",
        "cli/vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto",
        "cli/vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto",
        "pkg/apis/kappctrl/v1alpha1/generated.proto",
        "pkg/apiserver/apis/datapackaging/v1alpha1/generated.proto",
        "vendor/carvel.dev/vendir/pkg/vendir/versions/v1alpha1/generated.proto",
        "vendor/github.com/gogo/protobuf/gogoproto/gogo.proto",
        "vendor/github.com/google/gnostic-models/extensions/extension.proto",
        "vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.proto",
        "vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.proto",
        "vendor/github.com/google/gnostic-models/openapiv3/annotations.proto",
        "vendor/github.com/grpc-ecosystem/grpc-gateway/v2/protoc-gen-openapiv2/options/annotations.proto",
        "vendor/github.com/grpc-ecosystem/grpc-gateway/v2/protoc-gen-openapiv2/options/openapiv2.proto",
        "vendor/go.etcd.io/etcd/api/v3/authpb/auth.proto",
        "vendor/go.etcd.io/etcd/api/v3/etcdserverpb/etcdserver.proto",
        "vendor/go.etcd.io/etcd/api/v3/etcdserverpb/raft_internal.proto",
        "vendor/go.etcd.io/etcd/api/v3/etcdserverpb/rpc.proto",
        "vendor/go.etcd.io/etcd/api/v3/membershippb/membership.proto",
        "vendor/go.etcd.io/etcd/api/v3/mvccpb/kv.proto",
        "vendor/go.etcd.io/etcd/api/v3/versionpb/version.proto",
        "vendor/k8s.io/api/admission/v1/generated.proto",
        "vendor/k8s.io/api/admission/v1beta1/generated.proto",
        "vendor/k8s.io/api/admissionregistration/v1/generated.proto",
        "vendor/k8s.io/api/admissionregistration/v1alpha1/generated.proto",
        "vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto",
        "vendor/k8s.io/api/apidiscovery/v2/generated.proto",
        "vendor/k8s.io/api/apidiscovery/v2beta1/generated.proto",
        "vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto",
        "vendor/k8s.io/api/apps/v1/generated.proto",
        "vendor/k8s.io/api/apps/v1beta1/generated.proto",
        "vendor/k8s.io/api/apps/v1beta2/generated.proto",
        "vendor/k8s.io/api/authentication/v1/generated.proto",
        "vendor/k8s.io/api/authentication/v1alpha1/generated.proto",
        "vendor/k8s.io/api/authentication/v1beta1/generated.proto",
        "vendor/k8s.io/api/authorization/v1/generated.proto",
        "vendor/k8s.io/api/authorization/v1beta1/generated.proto",
        "vendor/k8s.io/api/autoscaling/v1/generated.proto",
        "vendor/k8s.io/api/autoscaling/v2/generated.proto",
        "vendor/k8s.io/api/batch/v1/generated.proto",
        "vendor/k8s.io/api/batch/v1beta1/generated.proto",
        "vendor/k8s.io/api/certificates/v1/generated.proto",
        "vendor/k8s.io/api/certificates/v1alpha1/generated.proto",
        "vendor/k8s.io/api/certificates/v1beta1/generated.proto",
        "vendor/k8s.io/api/coordination/v1/generated.proto",
        "vendor/k8s.io/api/coordination/v1alpha2/generated.proto",
        "vendor/k8s.io/api/coordination/v1beta1/generated.proto",
        "vendor/k8s.io/api/core/v1/generated.proto",
        "vendor/k8s.io/api/discovery/v1/generated.proto",
        "vendor/k8s.io/api/discovery/v1beta1/generated.proto",
        "vendor/k8s.io/api/events/v1/generated.proto",
        "vendor/k8s.io/api/events/v1beta1/generated.proto",
        "vendor/k8s.io/api/extensions/v1beta1/generated.proto",
        "vendor/k8s.io/api/flowcontrol/v1/generated.proto",
        "vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto",
        "vendor/k8s.io/api/flowcontrol/v1beta2/generated.proto",
        "vendor/k8s.io/api/flowcontrol/v1beta3/generated.proto",
        "vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto",
        "vendor/k8s.io/api/networking/v1/generated.proto",
        "vendor/k8s.io/api/networking/v1beta1/generated.proto",
        "vendor/k8s.io/api/node/v1/generated.proto",
        "vendor/k8s.io/api/node/v1alpha1/generated.proto",
        "vendor/k8s.io/api/node/v1beta1/generated.proto",
        "vendor/k8s.io/api/policy/v1/generated.proto",
        "vendor/k8s.io/api/policy/v1beta1/generated.proto",
        "vendor/k8s.io/api/rbac/v1/generated.proto",
        "vendor/k8s.io/api/rbac/v1alpha1/generated.proto",
        "vendor/k8s.io/api/rbac/v1beta1/generated.proto",
        "vendor/k8s.io/api/resource/v1/generated.proto",
        "vendor/k8s.io/api/resource/v1alpha3/generated.proto",
        "vendor/k8s.io/api/resource/v1beta1/generated.proto",
        "vendor/k8s.io/api/resource/v1beta2/generated.proto",
        "vendor/k8s.io/api/scheduling/v1/generated.proto",
        "vendor/k8s.io/api/scheduling/v1alpha2/generated.proto",
        "vendor/k8s.io/api/scheduling/v1beta1/generated.proto",
        "vendor/k8s.io/api/storage/v1/generated.proto",
        "vendor/k8s.io/api/storage/v1alpha1/generated.proto",
        "vendor/k8s.io/api/storage/v1beta1/generated.proto",
        "vendor/k8s.io/api/storagemigration/v1beta1/generated.proto",
        "vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto",
        "vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/apis/testapigroup/v1/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/runtime/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto",
        "vendor/k8s.io/apiserver/pkg/apis/audit/v1/generated.proto",
        "vendor/k8s.io/apiserver/pkg/storage/value/encrypt/envelope/kmsv2/v2/api.proto",
        "vendor/k8s.io/kms/apis/v1beta1/api.proto",
        "vendor/k8s.io/kms/apis/v2/api.proto",
        "vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/generated.proto",
        "vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/generated.proto",
        "vendor/sigs.k8s.io/apiserver-network-proxy/konnectivity-client/proto/client/client.proto"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "cli/go.mod",
        "go.mod"
      ],
      "largest_source_bytes": 909731,
      "source_files_sampled": 393,
      "oversized_source_files": 3,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "cli/go.mod",
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.79.3",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 1,
            "oldest_advisory_days": 0
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.40.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7,
            "advisory_ids": [
              "GHSA-hfvc-g4fc-pqhx"
            ],
            "fixed_version": "1.43.0",
            "advisory_count": 1,
            "oldest_advisory_days": 104
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.53.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 14
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 7
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 7
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 1,
          "unknown": 3,
          "critical": 1
        },
        "advisory_count": 5,
        "affected_count": 5,
        "assessed_count": 130,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "carvel.dev/kapp-controller",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.60.1-0.20260601134914-cb4fbdccc76a"
        },
        {
          "name": "carvel.dev/vendir",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.4"
        },
        {
          "name": "github.com/cppforlife/cobrautil",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20221130162803-acdfead391ef"
        },
        {
          "name": "github.com/cppforlife/color",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.9.1-0.20200716202919-6706ac40b835"
        },
        {
          "name": "github.com/cppforlife/go-cli-ui",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20220520125801-e45d9169a663"
        },
        {
          "name": "github.com/getkin/kin-openapi",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.131.0"
        },
        {
          "name": "github.com/google/gnostic-models",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.0"
        },
        {
          "name": "github.com/google/go-containerregistry",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.6"
        },
        {
          "name": "github.com/k14s/difflib",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20201117154628-0c031775bf57"
        },
        {
          "name": "github.com/mitchellh/go-wordwrap",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.1"
        },
        {
          "name": "github.com/otiai10/copy",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "github.com/spf13/pflag",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.10"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "go.yaml.in/yaml/v2",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.4"
        },
        {
          "name": "go.yaml.in/yaml/v3",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.4"
        },
        {
          "name": "k8s.io/api",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "k8s.io/apiextensions-apiserver",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "sigs.k8s.io/controller-runtime",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.24.1"
        },
        {
          "name": "sigs.k8s.io/yaml",
          "manifest": "cli/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "carvel.dev/vendir",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.4"
        },
        {
          "name": "github.com/gogo/protobuf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.2"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.23.2"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.53.0"
        },
        {
          "name": "golang.org/x/tools",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.0"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "k8s.io/apiserver",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "k8s.io/code-generator",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "k8s.io/kube-aggregator",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "k8s.io/kube-openapi",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260427204847-8949caaa1199"
        },
        {
          "name": "sigs.k8s.io/controller-runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.24.1"
        },
        {
          "name": "sigs.k8s.io/controller-tools",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.1"
        },
        {
          "name": "sigs.k8s.io/yaml",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/blang/semver/v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.0.0"
        },
        {
          "name": "github.com/carvel-dev/semver/v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.0.1"
        },
        {
          "name": "github.com/cppforlife/go-cli-ui",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20220520125801-e45d9169a663"
        },
        {
          "name": "github.com/go-logr/logr",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.3"
        },
        {
          "name": "github.com/prometheus/client_model",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.2"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "go.yaml.in/yaml/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.4"
        },
        {
          "name": "golang.org/x/sync",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.21.0"
        },
        {
          "name": "k8s.io/component-base",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "k8s.io/klog/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.140.0"
        },
        {
          "name": "k8s.io/utils",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260210185600-b8788abfbbc2"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "carvel.dev/kapp-controller",
            "direct": true,
            "version": "v0.60.1-0.20260601134914-cb4fbdccc76a",
            "ecosystem": "go"
          },
          {
            "name": "carvel.dev/vendir",
            "direct": true,
            "version": "v0.45.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blang/semver/v4",
            "direct": true,
            "version": "v4.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/carvel-dev/semver/v4",
            "direct": true,
            "version": "v4.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cppforlife/cobrautil",
            "direct": true,
            "version": "v0.0.0-20221130162803-acdfead391ef",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cppforlife/color",
            "direct": true,
            "version": "v1.9.1-0.20200716202919-6706ac40b835",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cppforlife/go-cli-ui",
            "direct": true,
            "version": "v0.0.0-20220520125801-e45d9169a663",
            "ecosystem": "go"
          },
          {
            "name": "github.com/getkin/kin-openapi",
            "direct": true,
            "version": "v0.131.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": true,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gogo/protobuf",
            "direct": true,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": true,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-containerregistry",
            "direct": true,
            "version": "v0.20.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/k14s/difflib",
            "direct": true,
            "version": "v0.0.0-20201117154628-0c031775bf57",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-wordwrap",
            "direct": true,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/otiai10/copy",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": true,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": true,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": true,
            "version": "v2.4.4",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": true,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.53.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": true,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": true,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiextensions-apiserver",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiserver",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/code-generator",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/component-base",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": true,
            "version": "v2.140.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-aggregator",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": true,
            "version": "v0.0.0-20260427204847-8949caaa1199",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": true,
            "version": "v0.0.0-20260210185600-b8788abfbbc2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/controller-runtime",
            "direct": true,
            "version": "v0.24.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/controller-tools",
            "direct": true,
            "version": "v0.20.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "cel.dev/expr",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/antlr4-go/antlr/v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/coreos/go-semver",
            "direct": false,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/coreos/go-systemd/v22",
            "direct": false,
            "version": "v22.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch",
            "direct": false,
            "version": "v5.6.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch/v5",
            "direct": false,
            "version": "v5.9.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": false,
            "version": "v1.18.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/zapr",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.20.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gobuffalo/flect",
            "direct": false,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/protobuf",
            "direct": false,
            "version": "v1.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/cel-go",
            "direct": false,
            "version": "v0.26.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/go-grpc-middleware/v2",
            "direct": false,
            "version": "v2.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.27.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-version",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kylelemons/godebug",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.7.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mohae/deepcopy",
            "direct": false,
            "version": "v0.0.0-20170929034955-c48cc78d4826",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nytimes/gziphandler",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oasdiff/yaml",
            "direct": false,
            "version": "v0.0.0-20250309154309-f31be36b4037",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oasdiff/yaml3",
            "direct": false,
            "version": "v0.0.0-20250309153720-d2182401db90",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/perimeterx/marshmallow",
            "direct": false,
            "version": "v1.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.67.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.19.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stoewer/go-strcase",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vito/go-interact",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/etcd/api/v3",
            "direct": false,
            "version": "v3.6.8",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/etcd/client/pkg/v3",
            "direct": false,
            "version": "v3.6.8",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/etcd/client/v3",
            "direct": false,
            "version": "v3.6.8",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
            "direct": false,
            "version": "v0.65.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.65.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.41.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
            "direct": false,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.41.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.41.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": false,
            "version": "v1.27.1",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20251219203646-944ab1f22d93",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/telemetry",
            "direct": false,
            "version": "v0.0.0-20260508192327-42602be52be6",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.44.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "gomodules.xyz/jsonpatch/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260128011058-8636f8732409",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260128011058-8636f8732409",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.79.3",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.12-0.20260120151049-f2248ac996af",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/natefinch/lumberjack.v2",
            "direct": false,
            "version": "v2.2.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/gengo/v2",
            "direct": false,
            "version": "v2.0.0-20250922181213-ec3ebc5fd46b",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kms",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/streaming",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/apiserver-network-proxy/konnectivity-client",
            "direct": false,
            "version": "v0.34.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20250730193827-2d320260d730",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.3.2",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 130,
        "direct_count": 39,
        "indirect_count": 91
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 48,
        "merged_prs": 841,
        "open_issues": 155,
        "closed_ratio": 0.714,
        "closed_issues": 387,
        "closed_unmerged_prs": 407
      },
      "bus_factor": 5,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "100mik",
          "commits": 179,
          "avatar_url": "https://avatars.githubusercontent.com/u/33070011?v=4"
        },
        {
          "type": "User",
          "login": "neil-hickey",
          "commits": 171,
          "avatar_url": "https://avatars.githubusercontent.com/u/6075668?v=4"
        },
        {
          "type": "User",
          "login": "danielhelfand",
          "commits": 167,
          "avatar_url": "https://avatars.githubusercontent.com/u/34258252?v=4"
        },
        {
          "type": "User",
          "login": "praveenrewar",
          "commits": 158,
          "avatar_url": "https://avatars.githubusercontent.com/u/8457124?v=4"
        },
        {
          "type": "User",
          "login": "cppforlife",
          "commits": 156,
          "avatar_url": "https://avatars.githubusercontent.com/u/185847?v=4"
        },
        {
          "type": "User",
          "login": "ewrenn8",
          "commits": 129,
          "avatar_url": "https://avatars.githubusercontent.com/u/40366170?v=4"
        },
        {
          "type": "User",
          "login": "benmoss",
          "commits": 106,
          "avatar_url": "https://avatars.githubusercontent.com/u/239754?v=4"
        },
        {
          "type": "User",
          "login": "joe-kimmel-vmw",
          "commits": 73,
          "avatar_url": "https://avatars.githubusercontent.com/u/86852107?v=4"
        },
        {
          "type": "User",
          "login": "joaopapereira",
          "commits": 61,
          "avatar_url": "https://avatars.githubusercontent.com/u/1826130?v=4"
        },
        {
          "type": "User",
          "login": "carvel-bot",
          "commits": 56,
          "avatar_url": "https://avatars.githubusercontent.com/u/98549719?v=4"
        }
      ],
      "contributors_sampled": 69,
      "top_contributor_share": 0.118
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "add-to-project.yml",
        "benchmark-action.yaml",
        "closed-issue-comment.yml",
        "closed-issue.yml",
        "dependency-updater.yml",
        "golangci-lint.yml",
        "inclusive-language-check.yml",
        "kind-action.yml",
        "misspell.yml",
        "release-process.yml",
        "release-published.yml",
        "reopen-issue.yml",
        "stale-issues-action.yml",
        "test-gh.yml",
        "test-kctrl-gh.yml",
        "trivy-scan.yml",
        "upgrade-testing.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yaml",
        ".golangci.yml"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 14 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "27 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 1,
            "reason": "dependency not pinned by hash detected -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 6,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 5,
            "reason": "5 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "651cb15b323be56df3b03af3c87ae57bf8a2d7ca",
        "ran_at": "2026-07-22T03:01:02Z",
        "aggregate_score": 5.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-22T00:38:36Z",
      "oldest_open_prs": [
        {
          "number": 785,
          "created_at": "2022-07-13T19:36:51Z",
          "last_comment_at": "2022-07-15T18:21:36Z",
          "last_comment_author": "cppforlife"
        },
        {
          "number": 936,
          "created_at": "2022-10-13T22:12:24Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 962,
          "created_at": "2022-10-28T07:48:42Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 963,
          "created_at": "2022-10-28T07:51:29Z",
          "last_comment_at": "2024-08-01T09:44:18Z",
          "last_comment_author": "xlf12"
        },
        {
          "number": 1061,
          "created_at": "2023-01-20T07:55:23Z",
          "last_comment_at": "2023-02-24T09:34:08Z",
          "last_comment_author": "gberche-orange"
        },
        {
          "number": 1115,
          "created_at": "2023-02-27T13:43:30Z",
          "last_comment_at": "2023-04-18T18:10:47Z",
          "last_comment_author": "wolfedale"
        },
        {
          "number": 1195,
          "created_at": "2023-05-11T18:24:09Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1206,
          "created_at": "2023-05-18T22:14:06Z",
          "last_comment_at": "2023-06-15T22:10:10Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 1221,
          "created_at": "2023-05-29T21:45:20Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1282,
          "created_at": "2023-07-31T19:38:14Z",
          "last_comment_at": "2023-08-15T18:11:49Z",
          "last_comment_author": "neil-hickey"
        },
        {
          "number": 1285,
          "created_at": "2023-08-06T17:52:57Z",
          "last_comment_at": "2023-08-19T10:46:45Z",
          "last_comment_author": "basit9958"
        },
        {
          "number": 1360,
          "created_at": "2023-10-18T13:52:00Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1382,
          "created_at": "2023-10-27T22:43:48Z",
          "last_comment_at": "2023-12-29T06:02:04Z",
          "last_comment_author": "prembhaskal"
        },
        {
          "number": 1483,
          "created_at": "2024-02-13T12:43:46Z",
          "last_comment_at": "2024-02-16T11:52:43Z",
          "last_comment_author": "praveenrewar"
        },
        {
          "number": 1484,
          "created_at": "2024-02-14T09:33:19Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1498,
          "created_at": "2024-02-26T10:03:01Z",
          "last_comment_at": "2024-03-20T05:18:33Z",
          "last_comment_author": "prembhaskal"
        },
        {
          "number": 1499,
          "created_at": "2024-03-04T17:48:38Z",
          "last_comment_at": "2024-04-08T19:34:57Z",
          "last_comment_author": "hoegaarden"
        },
        {
          "number": 1598,
          "created_at": "2024-07-18T14:15:16Z",
          "last_comment_at": "2024-10-29T07:10:42Z",
          "last_comment_author": "rohitagg2020"
        },
        {
          "number": 1649,
          "created_at": "2024-11-23T07:12:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1682,
          "created_at": "2025-02-07T04:59:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-16T11:30:16Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 6,
          "created_at": "2020-05-06T11:59:46Z",
          "last_comment_at": "2023-02-22T20:50:33Z",
          "last_comment_author": "neil-hickey"
        },
        {
          "number": 8,
          "created_at": "2020-05-13T12:01:16Z",
          "last_comment_at": "2020-05-22T18:03:05Z",
          "last_comment_author": "cppforlife"
        },
        {
          "number": 10,
          "created_at": "2020-05-15T00:43:00Z",
          "last_comment_at": "2020-05-15T00:49:50Z",
          "last_comment_author": "voor"
        },
        {
          "number": 18,
          "created_at": "2020-07-16T15:22:46Z",
          "last_comment_at": "2023-02-22T20:51:55Z",
          "last_comment_author": "neil-hickey"
        },
        {
          "number": 34,
          "created_at": "2020-09-17T13:47:30Z",
          "last_comment_at": "2022-05-03T21:33:47Z",
          "last_comment_author": "benmoss"
        },
        {
          "number": 36,
          "created_at": "2020-10-16T17:07:32Z",
          "last_comment_at": "2020-10-21T10:11:06Z",
          "last_comment_author": "voor"
        },
        {
          "number": 37,
          "created_at": "2020-10-26T19:43:26Z",
          "last_comment_at": "2021-02-20T20:29:05Z",
          "last_comment_author": "mtricht"
        },
        {
          "number": 60,
          "created_at": "2020-12-14T16:30:21Z",
          "last_comment_at": "2022-08-05T16:30:56Z",
          "last_comment_author": "joe-kimmel-vmw"
        },
        {
          "number": 81,
          "created_at": "2021-01-30T02:45:41Z",
          "last_comment_at": "2021-03-18T17:24:35Z",
          "last_comment_author": "aaronshurley"
        },
        {
          "number": 99,
          "created_at": "2021-02-09T05:42:44Z",
          "last_comment_at": "2021-02-18T06:57:40Z",
          "last_comment_author": "absoludity"
        },
        {
          "number": 114,
          "created_at": "2021-02-25T15:44:06Z",
          "last_comment_at": "2024-01-13T04:22:58Z",
          "last_comment_author": "ragaskar"
        },
        {
          "number": 118,
          "created_at": "2021-03-02T19:21:38Z",
          "last_comment_at": "2023-10-23T10:25:46Z",
          "last_comment_author": "praveenrewar"
        },
        {
          "number": 122,
          "created_at": "2021-03-03T00:22:26Z",
          "last_comment_at": "2023-08-09T06:35:12Z",
          "last_comment_author": "jessehu"
        },
        {
          "number": 123,
          "created_at": "2021-03-03T01:23:16Z",
          "last_comment_at": "2021-06-29T13:53:09Z",
          "last_comment_author": "ahuffman"
        },
        {
          "number": 126,
          "created_at": "2021-03-03T21:02:58Z",
          "last_comment_at": "2021-10-24T00:40:57Z",
          "last_comment_author": "voor"
        },
        {
          "number": 138,
          "created_at": "2021-03-15T22:31:58Z",
          "last_comment_at": "2021-03-16T21:29:10Z",
          "last_comment_author": "aaronshurley"
        },
        {
          "number": 142,
          "created_at": "2021-03-19T19:44:51Z",
          "last_comment_at": "2021-04-06T16:55:53Z",
          "last_comment_author": "aaronshurley"
        },
        {
          "number": 155,
          "created_at": "2021-04-06T22:09:42Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 161,
          "created_at": "2021-04-12T19:16:34Z",
          "last_comment_at": "2022-02-25T19:33:41Z",
          "last_comment_author": "cppforlife"
        },
        {
          "number": 187,
          "created_at": "2021-05-03T16:49:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/carvel-dev/kapp-controller",
    "host": "github.com",
    "name": "kapp-controller",
    "owner": "carvel-dev"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 80,
      "inputs": {
        "security": 65,
        "vitality": 83,
        "community": 77,
        "governance": 81,
        "engineering": 90
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 83,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 79,
            "inputs": {
              "commits_last_year": 74,
              "human_commit_share": 0.91,
              "days_since_last_push": 5,
              "active_weeks_last_year": 24
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "24/52 weeks with commits",
                "points": 16.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 24
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "74 commits in the last year",
                "points": 16.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 74
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "27 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v0.60.4",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 16.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~16.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 16.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 5,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 5 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "good",
        "name": "Community & Adoption",
        "value": 77,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "forks": 127,
              "stars": 316,
              "watchers": 16,
              "growth_state": "organic",
              "growth_factor_pct": 100
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "316 stars",
                "points": 40.5,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 316
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "127 forks",
                "points": 17.5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 127
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "16 watchers",
                "points": 6.5,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 81,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "excellent",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 89,
            "inputs": {
              "bus_factor": 5,
              "contributors_sampled": 69,
              "top_contributor_share": 0.118
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "5 contributor(s) cover half of all commits",
                "points": 45.9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 12% of commits",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 12
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "69 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 69
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 14 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "merged_prs": 841,
              "open_issues": 155,
              "closed_issues": 387,
              "issue_closed_ratio": 0.714,
              "closed_unmerged_prs": 407
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "71% of issues closed",
                "points": 33.4,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 71
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "841/1248 decided PRs merged",
                "points": 25.8,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 841,
                      "decided": 1248
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "followers": 122,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "carvel-dev",
              "public_repos": 32,
              "account_age_days": 1369
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "122 followers of carvel-dev",
                "points": 15,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 122,
                      "login": "carvel-dev"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "32 public repos, account ~3 yr old",
                "points": 18.6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 32
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 3
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "carvel.dev/kapp-controller"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "192 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 192
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 90,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "17 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 17
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yaml, .golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml, .golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [
                "ytt",
                "kapp",
                "helm",
                "declarative",
                "operator",
                "k8s",
                "kubernetes",
                "gitops",
                "continious-delivery",
                "cd",
                "controller",
                "carvel"
              ],
              "has_wiki": false,
              "homepage": "https://carvel.dev/kapp-controller",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://carvel.dev/kapp-controller",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "12 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 65,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 59,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 5.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 14 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "27 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 0.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "5 existing vulnerabilities detected",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 130 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 130
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 89,
            "inputs": {
              "source": "osv",
              "advisories": 5,
              "affected_packages": 5,
              "assessed_packages": 130,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, high 1, unknown 3",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: golang.org/x/crypto v0.53.0 (unknown)",
                "points": 26.6,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "golang.org/x/crypto v0.53.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 130,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 8
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 72,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 38,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.703,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "64 of 91 human commits state their intent (structured subject or explanatory body)",
                "points": 37.5,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 64,
                      "sampled": 91
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "cli/vendor/github.com/emicklei/go-restful/v3/Makefile",
                "cli/vendor/github.com/gogo/protobuf/proto/Makefile",
                "cli/vendor/github.com/munnerz/goautoneg/Makefile",
                "cli/vendor/github.com/prometheus/procfs/Makefile",
                "cli/vendor/github.com/spf13/cobra/Makefile",
                "cli/vendor/go.uber.org/multierr/Makefile",
                "cli/vendor/go.uber.org/zap/Makefile",
                "cli/vendor/sigs.k8s.io/json/Makefile",
                "vendor/github.com/emicklei/go-restful/v3/Makefile",
                "vendor/github.com/felixge/httpsnoop/Makefile",
                "vendor/github.com/gobuffalo/flect/Makefile",
                "vendor/github.com/gogo/protobuf/gogoproto/Makefile",
                "vendor/github.com/gogo/protobuf/proto/Makefile",
                "vendor/github.com/gogo/protobuf/protoc-gen-gogo/Makefile",
                "vendor/github.com/gogo/protobuf/protoc-gen-gogo/descriptor/Makefile",
                "vendor/github.com/gogo/protobuf/protoc-gen-gogo/plugin/Makefile",
                "vendor/github.com/munnerz/goautoneg/Makefile",
                "vendor/github.com/prometheus/procfs/Makefile",
                "vendor/github.com/spf13/cobra/Makefile",
                "vendor/go.opentelemetry.io/otel/Makefile",
                "vendor/go.uber.org/multierr/Makefile",
                "vendor/go.uber.org/zap/Makefile",
                "vendor/google.golang.org/grpc/Makefile",
                "vendor/k8s.io/gengo/v2/Makefile",
                "vendor/sigs.k8s.io/json/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.02,
              "toolchain_manifests": [
                "cli/go.mod",
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.09
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "cli/vendor/github.com/emicklei/go-restful/v3/Makefile, cli/vendor/github.com/gogo/protobuf/proto/Makefile, cli/vendor/github.com/munnerz/goautoneg/Makefile, cli/vendor/github.com/prometheus/procfs/Makefile, cli/vendor/github.com/spf13/cobra/Makefile, cli/vendor/go.uber.org/multierr/Makefile, cli/vendor/go.uber.org/zap/Makefile, cli/vendor/sigs.k8s.io/json/Makefile, vendor/github.com/emicklei/go-restful/v3/Makefile, vendor/github.com/felixge/httpsnoop/Makefile, vendor/github.com/gobuffalo/flect/Makefile, vendor/github.com/gogo/protobuf/gogoproto/Makefile, vendor/github.com/gogo/protobuf/proto/Makefile, vendor/github.com/gogo/protobuf/protoc-gen-gogo/Makefile, vendor/github.com/gogo/protobuf/protoc-gen-gogo/descriptor/Makefile, vendor/github.com/gogo/protobuf/protoc-gen-gogo/plugin/Makefile, vendor/github.com/munnerz/goautoneg/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/go.opentelemetry.io/otel/Makefile, vendor/go.uber.org/multierr/Makefile, vendor/go.uber.org/zap/Makefile, vendor/google.golang.org/grpc/Makefile, vendor/k8s.io/gengo/v2/Makefile, vendor/sigs.k8s.io/json/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "cli/vendor/github.com/emicklei/go-restful/v3/Makefile, cli/vendor/github.com/gogo/protobuf/proto/Makefile, cli/vendor/github.com/munnerz/goautoneg/Makefile, cli/vendor/github.com/prometheus/procfs/Makefile, cli/vendor/github.com/spf13/cobra/Makefile, cli/vendor/go.uber.org/multierr/Makefile, cli/vendor/go.uber.org/zap/Makefile, cli/vendor/sigs.k8s.io/json/Makefile, vendor/github.com/emicklei/go-restful/v3/Makefile, vendor/github.com/felixge/httpsnoop/Makefile, vendor/github.com/gobuffalo/flect/Makefile, vendor/github.com/gogo/protobuf/gogoproto/Makefile, vendor/github.com/gogo/protobuf/proto/Makefile, vendor/github.com/gogo/protobuf/protoc-gen-gogo/Makefile, vendor/github.com/gogo/protobuf/protoc-gen-gogo/descriptor/Makefile, vendor/github.com/gogo/protobuf/protoc-gen-gogo/plugin/Makefile, vendor/github.com/munnerz/goautoneg/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/go.opentelemetry.io/otel/Makefile, vendor/go.uber.org/multierr/Makefile, vendor/go.uber.org/zap/Makefile, vendor/google.golang.org/grpc/Makefile, vendor/k8s.io/gengo/v2/Makefile, vendor/sigs.k8s.io/json/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yaml, .golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yaml, .golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "2 of the last 100 commits agent-authored or agent-credited",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "9 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 9,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 909731,
              "source_files_sampled": 393,
              "oversized_source_files": 3
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "3/393 source files over 60KB",
                "points": 54.6,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 393,
                      "oversized": 3
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "good",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": [
                "cli/vendor/carvel.dev/kapp-controller/pkg/apis/kappctrl/v1alpha1/generated.proto",
                "cli/vendor/carvel.dev/kapp-controller/pkg/apiserver/apis/datapackaging/v1alpha1/generated.proto",
                "cli/vendor/carvel.dev/vendir/pkg/vendir/versions/v1alpha1/generated.proto",
                "cli/vendor/github.com/google/gnostic-models/extensions/extension.proto",
                "cli/vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.proto",
                "cli/vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.proto",
                "cli/vendor/github.com/google/gnostic-models/openapiv3/annotations.proto",
                "cli/vendor/k8s.io/api/admission/v1/generated.proto",
                "cli/vendor/k8s.io/api/admission/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/admissionregistration/v1/generated.proto",
                "cli/vendor/k8s.io/api/admissionregistration/v1alpha1/generated.proto",
                "cli/vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/apidiscovery/v2/generated.proto",
                "cli/vendor/k8s.io/api/apidiscovery/v2beta1/generated.proto",
                "cli/vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto",
                "cli/vendor/k8s.io/api/apps/v1/generated.proto",
                "cli/vendor/k8s.io/api/apps/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/apps/v1beta2/generated.proto",
                "cli/vendor/k8s.io/api/authentication/v1/generated.proto",
                "cli/vendor/k8s.io/api/authentication/v1alpha1/generated.proto",
                "cli/vendor/k8s.io/api/authentication/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/authorization/v1/generated.proto",
                "cli/vendor/k8s.io/api/authorization/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/autoscaling/v1/generated.proto",
                "cli/vendor/k8s.io/api/autoscaling/v2/generated.proto",
                "cli/vendor/k8s.io/api/batch/v1/generated.proto",
                "cli/vendor/k8s.io/api/batch/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/certificates/v1/generated.proto",
                "cli/vendor/k8s.io/api/certificates/v1alpha1/generated.proto",
                "cli/vendor/k8s.io/api/certificates/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/coordination/v1/generated.proto",
                "cli/vendor/k8s.io/api/coordination/v1alpha2/generated.proto",
                "cli/vendor/k8s.io/api/coordination/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/core/v1/generated.proto",
                "cli/vendor/k8s.io/api/discovery/v1/generated.proto",
                "cli/vendor/k8s.io/api/discovery/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/events/v1/generated.proto",
                "cli/vendor/k8s.io/api/events/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/extensions/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/flowcontrol/v1/generated.proto",
                "cli/vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/flowcontrol/v1beta2/generated.proto",
                "cli/vendor/k8s.io/api/flowcontrol/v1beta3/generated.proto",
                "cli/vendor/k8s.io/api/networking/v1/generated.proto",
                "cli/vendor/k8s.io/api/networking/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/node/v1/generated.proto",
                "cli/vendor/k8s.io/api/node/v1alpha1/generated.proto",
                "cli/vendor/k8s.io/api/node/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/policy/v1/generated.proto",
                "cli/vendor/k8s.io/api/policy/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/rbac/v1/generated.proto",
                "cli/vendor/k8s.io/api/rbac/v1alpha1/generated.proto",
                "cli/vendor/k8s.io/api/rbac/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/resource/v1/generated.proto",
                "cli/vendor/k8s.io/api/resource/v1alpha3/generated.proto",
                "cli/vendor/k8s.io/api/resource/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/resource/v1beta2/generated.proto",
                "cli/vendor/k8s.io/api/scheduling/v1/generated.proto",
                "cli/vendor/k8s.io/api/scheduling/v1alpha2/generated.proto",
                "cli/vendor/k8s.io/api/scheduling/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/storage/v1/generated.proto",
                "cli/vendor/k8s.io/api/storage/v1alpha1/generated.proto",
                "cli/vendor/k8s.io/api/storage/v1beta1/generated.proto",
                "cli/vendor/k8s.io/api/storagemigration/v1beta1/generated.proto",
                "cli/vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto",
                "cli/vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto",
                "cli/vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto",
                "cli/vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto",
                "cli/vendor/k8s.io/apimachinery/pkg/runtime/generated.proto",
                "cli/vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto",
                "cli/vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto",
                "pkg/apis/kappctrl/v1alpha1/generated.proto",
                "pkg/apiserver/apis/datapackaging/v1alpha1/generated.proto",
                "vendor/carvel.dev/vendir/pkg/vendir/versions/v1alpha1/generated.proto",
                "vendor/github.com/gogo/protobuf/gogoproto/gogo.proto",
                "vendor/github.com/google/gnostic-models/extensions/extension.proto",
                "vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.proto",
                "vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.proto",
                "vendor/github.com/google/gnostic-models/openapiv3/annotations.proto",
                "vendor/github.com/grpc-ecosystem/grpc-gateway/v2/protoc-gen-openapiv2/options/annotations.proto",
                "vendor/github.com/grpc-ecosystem/grpc-gateway/v2/protoc-gen-openapiv2/options/openapiv2.proto",
                "vendor/go.etcd.io/etcd/api/v3/authpb/auth.proto",
                "vendor/go.etcd.io/etcd/api/v3/etcdserverpb/etcdserver.proto",
                "vendor/go.etcd.io/etcd/api/v3/etcdserverpb/raft_internal.proto",
                "vendor/go.etcd.io/etcd/api/v3/etcdserverpb/rpc.proto",
                "vendor/go.etcd.io/etcd/api/v3/membershippb/membership.proto",
                "vendor/go.etcd.io/etcd/api/v3/mvccpb/kv.proto",
                "vendor/go.etcd.io/etcd/api/v3/versionpb/version.proto",
                "vendor/k8s.io/api/admission/v1/generated.proto",
                "vendor/k8s.io/api/admission/v1beta1/generated.proto",
                "vendor/k8s.io/api/admissionregistration/v1/generated.proto",
                "vendor/k8s.io/api/admissionregistration/v1alpha1/generated.proto",
                "vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto",
                "vendor/k8s.io/api/apidiscovery/v2/generated.proto",
                "vendor/k8s.io/api/apidiscovery/v2beta1/generated.proto",
                "vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto",
                "vendor/k8s.io/api/apps/v1/generated.proto",
                "vendor/k8s.io/api/apps/v1beta1/generated.proto",
                "vendor/k8s.io/api/apps/v1beta2/generated.proto",
                "vendor/k8s.io/api/authentication/v1/generated.proto",
                "vendor/k8s.io/api/authentication/v1alpha1/generated.proto",
                "vendor/k8s.io/api/authentication/v1beta1/generated.proto",
                "vendor/k8s.io/api/authorization/v1/generated.proto",
                "vendor/k8s.io/api/authorization/v1beta1/generated.proto",
                "vendor/k8s.io/api/autoscaling/v1/generated.proto",
                "vendor/k8s.io/api/autoscaling/v2/generated.proto",
                "vendor/k8s.io/api/batch/v1/generated.proto",
                "vendor/k8s.io/api/batch/v1beta1/generated.proto",
                "vendor/k8s.io/api/certificates/v1/generated.proto",
                "vendor/k8s.io/api/certificates/v1alpha1/generated.proto",
                "vendor/k8s.io/api/certificates/v1beta1/generated.proto",
                "vendor/k8s.io/api/coordination/v1/generated.proto",
                "vendor/k8s.io/api/coordination/v1alpha2/generated.proto",
                "vendor/k8s.io/api/coordination/v1beta1/generated.proto",
                "vendor/k8s.io/api/core/v1/generated.proto",
                "vendor/k8s.io/api/discovery/v1/generated.proto",
                "vendor/k8s.io/api/discovery/v1beta1/generated.proto",
                "vendor/k8s.io/api/events/v1/generated.proto",
                "vendor/k8s.io/api/events/v1beta1/generated.proto",
                "vendor/k8s.io/api/extensions/v1beta1/generated.proto",
                "vendor/k8s.io/api/flowcontrol/v1/generated.proto",
                "vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto",
                "vendor/k8s.io/api/flowcontrol/v1beta2/generated.proto",
                "vendor/k8s.io/api/flowcontrol/v1beta3/generated.proto",
                "vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto",
                "vendor/k8s.io/api/networking/v1/generated.proto",
                "vendor/k8s.io/api/networking/v1beta1/generated.proto",
                "vendor/k8s.io/api/node/v1/generated.proto",
                "vendor/k8s.io/api/node/v1alpha1/generated.proto",
                "vendor/k8s.io/api/node/v1beta1/generated.proto",
                "vendor/k8s.io/api/policy/v1/generated.proto",
                "vendor/k8s.io/api/policy/v1beta1/generated.proto",
                "vendor/k8s.io/api/rbac/v1/generated.proto",
                "vendor/k8s.io/api/rbac/v1alpha1/generated.proto",
                "vendor/k8s.io/api/rbac/v1beta1/generated.proto",
                "vendor/k8s.io/api/resource/v1/generated.proto",
                "vendor/k8s.io/api/resource/v1alpha3/generated.proto",
                "vendor/k8s.io/api/resource/v1beta1/generated.proto",
                "vendor/k8s.io/api/resource/v1beta2/generated.proto",
                "vendor/k8s.io/api/scheduling/v1/generated.proto",
                "vendor/k8s.io/api/scheduling/v1alpha2/generated.proto",
                "vendor/k8s.io/api/scheduling/v1beta1/generated.proto",
                "vendor/k8s.io/api/storage/v1/generated.proto",
                "vendor/k8s.io/api/storage/v1alpha1/generated.proto",
                "vendor/k8s.io/api/storage/v1beta1/generated.proto",
                "vendor/k8s.io/api/storagemigration/v1beta1/generated.proto",
                "vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto",
                "vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/apis/testapigroup/v1/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/runtime/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto",
                "vendor/k8s.io/apiserver/pkg/apis/audit/v1/generated.proto",
                "vendor/k8s.io/apiserver/pkg/storage/value/encrypt/envelope/kmsv2/v2/api.proto",
                "vendor/k8s.io/kms/apis/v1beta1/api.proto",
                "vendor/k8s.io/kms/apis/v2/api.proto",
                "vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/generated.proto",
                "vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/generated.proto",
                "vendor/sigs.k8s.io/apiserver-network-proxy/konnectivity-client/proto/client/client.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "cli/vendor/carvel.dev/kapp-controller/pkg/apis/kappctrl/v1alpha1/generated.proto, cli/vendor/carvel.dev/kapp-controller/pkg/apiserver/apis/datapackaging/v1alpha1/generated.proto, cli/vendor/carvel.dev/vendir/pkg/vendir/versions/v1alpha1/generated.proto, cli/vendor/github.com/google/gnostic-models/extensions/extension.proto, cli/vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.proto, cli/vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.proto, cli/vendor/github.com/google/gnostic-models/openapiv3/annotations.proto, cli/vendor/k8s.io/api/admission/v1/generated.proto, cli/vendor/k8s.io/api/admission/v1beta1/generated.proto, cli/vendor/k8s.io/api/admissionregistration/v1/generated.proto, cli/vendor/k8s.io/api/admissionregistration/v1alpha1/generated.proto, cli/vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, cli/vendor/k8s.io/api/apidiscovery/v2/generated.proto, cli/vendor/k8s.io/api/apidiscovery/v2beta1/generated.proto, cli/vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, cli/vendor/k8s.io/api/apps/v1/generated.proto, cli/vendor/k8s.io/api/apps/v1beta1/generated.proto, cli/vendor/k8s.io/api/apps/v1beta2/generated.proto, cli/vendor/k8s.io/api/authentication/v1/generated.proto, cli/vendor/k8s.io/api/authentication/v1alpha1/generated.proto, cli/vendor/k8s.io/api/authentication/v1beta1/generated.proto, cli/vendor/k8s.io/api/authorization/v1/generated.proto, cli/vendor/k8s.io/api/authorization/v1beta1/generated.proto, cli/vendor/k8s.io/api/autoscaling/v1/generated.proto, cli/vendor/k8s.io/api/autoscaling/v2/generated.proto, cli/vendor/k8s.io/api/batch/v1/generated.proto, cli/vendor/k8s.io/api/batch/v1beta1/generated.proto, cli/vendor/k8s.io/api/certificates/v1/generated.proto, cli/vendor/k8s.io/api/certificates/v1alpha1/generated.proto, cli/vendor/k8s.io/api/certificates/v1beta1/generated.proto, cli/vendor/k8s.io/api/coordination/v1/generated.proto, cli/vendor/k8s.io/api/coordination/v1alpha2/generated.proto, cli/vendor/k8s.io/api/coordination/v1beta1/generated.proto, cli/vendor/k8s.io/api/core/v1/generated.proto, cli/vendor/k8s.io/api/discovery/v1/generated.proto, cli/vendor/k8s.io/api/discovery/v1beta1/generated.proto, cli/vendor/k8s.io/api/events/v1/generated.proto, cli/vendor/k8s.io/api/events/v1beta1/generated.proto, cli/vendor/k8s.io/api/extensions/v1beta1/generated.proto, cli/vendor/k8s.io/api/flowcontrol/v1/generated.proto, cli/vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, cli/vendor/k8s.io/api/flowcontrol/v1beta2/generated.proto, cli/vendor/k8s.io/api/flowcontrol/v1beta3/generated.proto, cli/vendor/k8s.io/api/networking/v1/generated.proto, cli/vendor/k8s.io/api/networking/v1beta1/generated.proto, cli/vendor/k8s.io/api/node/v1/generated.proto, cli/vendor/k8s.io/api/node/v1alpha1/generated.proto, cli/vendor/k8s.io/api/node/v1beta1/generated.proto, cli/vendor/k8s.io/api/policy/v1/generated.proto, cli/vendor/k8s.io/api/policy/v1beta1/generated.proto, cli/vendor/k8s.io/api/rbac/v1/generated.proto, cli/vendor/k8s.io/api/rbac/v1alpha1/generated.proto, cli/vendor/k8s.io/api/rbac/v1beta1/generated.proto, cli/vendor/k8s.io/api/resource/v1/generated.proto, cli/vendor/k8s.io/api/resource/v1alpha3/generated.proto, cli/vendor/k8s.io/api/resource/v1beta1/generated.proto, cli/vendor/k8s.io/api/resource/v1beta2/generated.proto, cli/vendor/k8s.io/api/scheduling/v1/generated.proto, cli/vendor/k8s.io/api/scheduling/v1alpha2/generated.proto, cli/vendor/k8s.io/api/scheduling/v1beta1/generated.proto, cli/vendor/k8s.io/api/storage/v1/generated.proto, cli/vendor/k8s.io/api/storage/v1alpha1/generated.proto, cli/vendor/k8s.io/api/storage/v1beta1/generated.proto, cli/vendor/k8s.io/api/storagemigration/v1beta1/generated.proto, cli/vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, cli/vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, cli/vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, cli/vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, cli/vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, cli/vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, cli/vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto, pkg/apis/kappctrl/v1alpha1/generated.proto, pkg/apiserver/apis/datapackaging/v1alpha1/generated.proto, vendor/carvel.dev/vendir/pkg/vendir/versions/v1alpha1/generated.proto, vendor/github.com/gogo/protobuf/gogoproto/gogo.proto, vendor/github.com/google/gnostic-models/extensions/extension.proto, vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.proto, vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.proto, vendor/github.com/google/gnostic-models/openapiv3/annotations.proto, vendor/github.com/grpc-ecosystem/grpc-gateway/v2/protoc-gen-openapiv2/options/annotations.proto, vendor/github.com/grpc-ecosystem/grpc-gateway/v2/protoc-gen-openapiv2/options/openapiv2.proto, vendor/go.etcd.io/etcd/api/v3/authpb/auth.proto, vendor/go.etcd.io/etcd/api/v3/etcdserverpb/etcdserver.proto, vendor/go.etcd.io/etcd/api/v3/etcdserverpb/raft_internal.proto, vendor/go.etcd.io/etcd/api/v3/etcdserverpb/rpc.proto, vendor/go.etcd.io/etcd/api/v3/membershippb/membership.proto, vendor/go.etcd.io/etcd/api/v3/mvccpb/kv.proto, vendor/go.etcd.io/etcd/api/v3/versionpb/version.proto, vendor/k8s.io/api/admission/v1/generated.proto, vendor/k8s.io/api/admission/v1beta1/generated.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1alpha1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apidiscovery/v2/generated.proto, vendor/k8s.io/api/apidiscovery/v2beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1alpha1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1alpha1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1alpha2/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta2/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta3/generated.proto, vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/resource/v1/generated.proto, vendor/k8s.io/api/resource/v1alpha3/generated.proto, vendor/k8s.io/api/resource/v1beta1/generated.proto, vendor/k8s.io/api/resource/v1beta2/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha2/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/api/storagemigration/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/testapigroup/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto, vendor/k8s.io/apiserver/pkg/apis/audit/v1/generated.proto, vendor/k8s.io/apiserver/pkg/storage/value/encrypt/envelope/kmsv2/v2/api.proto, vendor/k8s.io/kms/apis/v1beta1/api.proto, vendor/k8s.io/kms/apis/v2/api.proto, vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/generated.proto, vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/generated.proto, vendor/sigs.k8s.io/apiserver-network-proxy/konnectivity-client/proto/client/client.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "cli/vendor/carvel.dev/kapp-controller/pkg/apis/kappctrl/v1alpha1/generated.proto, cli/vendor/carvel.dev/kapp-controller/pkg/apiserver/apis/datapackaging/v1alpha1/generated.proto, cli/vendor/carvel.dev/vendir/pkg/vendir/versions/v1alpha1/generated.proto, cli/vendor/github.com/google/gnostic-models/extensions/extension.proto, cli/vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.proto, cli/vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.proto, cli/vendor/github.com/google/gnostic-models/openapiv3/annotations.proto, cli/vendor/k8s.io/api/admission/v1/generated.proto, cli/vendor/k8s.io/api/admission/v1beta1/generated.proto, cli/vendor/k8s.io/api/admissionregistration/v1/generated.proto, cli/vendor/k8s.io/api/admissionregistration/v1alpha1/generated.proto, cli/vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, cli/vendor/k8s.io/api/apidiscovery/v2/generated.proto, cli/vendor/k8s.io/api/apidiscovery/v2beta1/generated.proto, cli/vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, cli/vendor/k8s.io/api/apps/v1/generated.proto, cli/vendor/k8s.io/api/apps/v1beta1/generated.proto, cli/vendor/k8s.io/api/apps/v1beta2/generated.proto, cli/vendor/k8s.io/api/authentication/v1/generated.proto, cli/vendor/k8s.io/api/authentication/v1alpha1/generated.proto, cli/vendor/k8s.io/api/authentication/v1beta1/generated.proto, cli/vendor/k8s.io/api/authorization/v1/generated.proto, cli/vendor/k8s.io/api/authorization/v1beta1/generated.proto, cli/vendor/k8s.io/api/autoscaling/v1/generated.proto, cli/vendor/k8s.io/api/autoscaling/v2/generated.proto, cli/vendor/k8s.io/api/batch/v1/generated.proto, cli/vendor/k8s.io/api/batch/v1beta1/generated.proto, cli/vendor/k8s.io/api/certificates/v1/generated.proto, cli/vendor/k8s.io/api/certificates/v1alpha1/generated.proto, cli/vendor/k8s.io/api/certificates/v1beta1/generated.proto, cli/vendor/k8s.io/api/coordination/v1/generated.proto, cli/vendor/k8s.io/api/coordination/v1alpha2/generated.proto, cli/vendor/k8s.io/api/coordination/v1beta1/generated.proto, cli/vendor/k8s.io/api/core/v1/generated.proto, cli/vendor/k8s.io/api/discovery/v1/generated.proto, cli/vendor/k8s.io/api/discovery/v1beta1/generated.proto, cli/vendor/k8s.io/api/events/v1/generated.proto, cli/vendor/k8s.io/api/events/v1beta1/generated.proto, cli/vendor/k8s.io/api/extensions/v1beta1/generated.proto, cli/vendor/k8s.io/api/flowcontrol/v1/generated.proto, cli/vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, cli/vendor/k8s.io/api/flowcontrol/v1beta2/generated.proto, cli/vendor/k8s.io/api/flowcontrol/v1beta3/generated.proto, cli/vendor/k8s.io/api/networking/v1/generated.proto, cli/vendor/k8s.io/api/networking/v1beta1/generated.proto, cli/vendor/k8s.io/api/node/v1/generated.proto, cli/vendor/k8s.io/api/node/v1alpha1/generated.proto, cli/vendor/k8s.io/api/node/v1beta1/generated.proto, cli/vendor/k8s.io/api/policy/v1/generated.proto, cli/vendor/k8s.io/api/policy/v1beta1/generated.proto, cli/vendor/k8s.io/api/rbac/v1/generated.proto, cli/vendor/k8s.io/api/rbac/v1alpha1/generated.proto, cli/vendor/k8s.io/api/rbac/v1beta1/generated.proto, cli/vendor/k8s.io/api/resource/v1/generated.proto, cli/vendor/k8s.io/api/resource/v1alpha3/generated.proto, cli/vendor/k8s.io/api/resource/v1beta1/generated.proto, cli/vendor/k8s.io/api/resource/v1beta2/generated.proto, cli/vendor/k8s.io/api/scheduling/v1/generated.proto, cli/vendor/k8s.io/api/scheduling/v1alpha2/generated.proto, cli/vendor/k8s.io/api/scheduling/v1beta1/generated.proto, cli/vendor/k8s.io/api/storage/v1/generated.proto, cli/vendor/k8s.io/api/storage/v1alpha1/generated.proto, cli/vendor/k8s.io/api/storage/v1beta1/generated.proto, cli/vendor/k8s.io/api/storagemigration/v1beta1/generated.proto, cli/vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, cli/vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, cli/vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, cli/vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, cli/vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, cli/vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, cli/vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto, pkg/apis/kappctrl/v1alpha1/generated.proto, pkg/apiserver/apis/datapackaging/v1alpha1/generated.proto, vendor/carvel.dev/vendir/pkg/vendir/versions/v1alpha1/generated.proto, vendor/github.com/gogo/protobuf/gogoproto/gogo.proto, vendor/github.com/google/gnostic-models/extensions/extension.proto, vendor/github.com/google/gnostic-models/openapiv2/OpenAPIv2.proto, vendor/github.com/google/gnostic-models/openapiv3/OpenAPIv3.proto, vendor/github.com/google/gnostic-models/openapiv3/annotations.proto, vendor/github.com/grpc-ecosystem/grpc-gateway/v2/protoc-gen-openapiv2/options/annotations.proto, vendor/github.com/grpc-ecosystem/grpc-gateway/v2/protoc-gen-openapiv2/options/openapiv2.proto, vendor/go.etcd.io/etcd/api/v3/authpb/auth.proto, vendor/go.etcd.io/etcd/api/v3/etcdserverpb/etcdserver.proto, vendor/go.etcd.io/etcd/api/v3/etcdserverpb/raft_internal.proto, vendor/go.etcd.io/etcd/api/v3/etcdserverpb/rpc.proto, vendor/go.etcd.io/etcd/api/v3/membershippb/membership.proto, vendor/go.etcd.io/etcd/api/v3/mvccpb/kv.proto, vendor/go.etcd.io/etcd/api/v3/versionpb/version.proto, vendor/k8s.io/api/admission/v1/generated.proto, vendor/k8s.io/api/admission/v1beta1/generated.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1alpha1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apidiscovery/v2/generated.proto, vendor/k8s.io/api/apidiscovery/v2beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1alpha1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1alpha1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1alpha2/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta2/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta3/generated.proto, vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/resource/v1/generated.proto, vendor/k8s.io/api/resource/v1alpha3/generated.proto, vendor/k8s.io/api/resource/v1beta1/generated.proto, vendor/k8s.io/api/resource/v1beta2/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha2/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/api/storagemigration/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/testapigroup/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto, vendor/k8s.io/apiserver/pkg/apis/audit/v1/generated.proto, vendor/k8s.io/apiserver/pkg/storage/value/encrypt/envelope/kmsv2/v2/api.proto, vendor/k8s.io/kms/apis/v1beta1/api.proto, vendor/k8s.io/kms/apis/v2/api.proto, vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/generated.proto, vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/generated.proto, vendor/sigs.k8s.io/apiserver-network-proxy/konnectivity-client/proto/client/client.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Could not fetch go package 'carvel.dev/kapp-controller/cli' from its registry"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-22T03:01:35.189030Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/carvel-dev/kapp-controller.svg",
  "full_name": "carvel-dev/kapp-controller",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}