Registro público
Informe de salud del softwareesquema 0.26.0 · métricas 1.13.0 · 2026-07-22 13:39 UTC

castai / image-analyzer

OCI images analyzer

GoApache-2.0★ 7 estrellas⑂ 0 forksdesde nov 2023Ver en GitHub ↗

castai/image-analyzer tiene un índice de salud de 53 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Sustainability & Governance (66/100) y la más baja, Community & Adoption (30/100). Se actualizó por última vez hace 1 día. 2 personas concentran la mayor parte del trabajo reciente.

53
global / 100
Moderado

Índice de salud del software

Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.

53
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
VitalidadComunidad yAdopciónSostenibilidady GobernanzaCalidad deIngenieríaSeguridadPreparaciónpara IA

Perfil de puntuación

Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.

Titularidad

CAST AIOrganización
251 seguidores109 repositorios públicosdesde oct 2018

Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.

Ecosistemas de paquetes

RegistroPaqueteVersiónDescargas / mesVersionesÚltima publicación
Gogithub.com/castai/image-analyzerv0.10.1-22hace 4 días

Métricas por categoría

Vitalidad

¿Está vivo el proyecto: se escribe código y se publican versiones?

64Moderado · 22% del índice global

Actividad de desarrollo

46En riesgo
Cómo se puntúa
36/36Recencia de push — último push hace 1 días
2.8/36Cadencia de commits — 4/52 semanas con commits
7.6/18Volumen de commits — 6 commits en el último año
0/10OpenSSF Scorecard: Maintained — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Datos de entrada utilizados
commits_last_year6
human_commit_share0,731
days_since_last_push1
active_weeks_last_year4

Disciplina de publicación

92Excelente
Cómo se puntúa
27/27Publica versiones — 20 versiones publicadas
36/36Recencia de las versiones — última versión hace 4 días
19.8/27Cadencia de publicación — una versión cada ~68,8 días
0/10OpenSSF Scorecard: Signed-Releases — sin datos
Datos de entrada utilizados
releases_count20
latest_release_tagv0.10.1
releases_from_tagsno
days_since_latest_release4
mean_days_between_releases68,8
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.

Comunidad y Adopción

¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?

30En riesgo · 18% del índice global

Popularidad y adopción

13Crítico
Cómo se puntúa
12.6/60Estrellas — 7 estrellas
0/25Forks — 0 forks
0/15Observadores — 2 observadores
Datos de entrada utilizados
forks0
stars7
watchers2
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Salud de la comunidad

50Moderado
Cómo se puntúa
22.5/22.5README
22.5/22.5Licencia — licencia reconocida (Apache-2.0)
0/18Guía CONTRIBUTING
0/13.5Código de conducta
0/7.2Plantilla de issues
0/6.3Plantilla de PR
Datos de entrada utilizados
has_readmesí
has_licensesí
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Sostenibilidad y Gobernanza

¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?

66Moderado · 24% del índice global

Resiliencia de mantenedores (factor bus)

61Moderado
Cómo se puntúa
25.2/54Factor bus — la mitad de los commits recae en 2 contribuyente(s)
13.8/22.5Distribución de commits — el principal contribuyente firma el 39% de los commits
12.2/13.5Amplitud de contribuyentes — 9 contribuyentes
10/10OpenSSF Scorecard: Contributors — project has 4 contributing companies or organizations
Datos de entrada utilizados
bus_factor2
contributors_sampled9
top_contributor_share0,386

Capacidad de respuesta a issues y PR

40En riesgo
Cómo se puntúa
0/46.8Resolución de issues — 0% de issues cerradas
25.3/38.3Aceptación de PR — 39/59 PR decididos fusionados
15/15OpenSSF Scorecard: Code-Review — all changesets reviewed
Datos de entrada utilizados
merged_prs39
open_issues1
closed_issues0
issue_closed_ratio0
closed_unmerged_prs20

Propiedad y custodia

72Bueno
Cómo se puntúa
30/30Respaldo de la propiedad — propiedad de una organización
0/20Dominio verificado
17.3/25Alcance del propietario — 251 seguidores de castai
25/25Trayectoria — 109 repos públicos, cuenta de ~7 años
Datos de entrada utilizados
followers251
owner_typeOrganization
is_verified—
owner_logincastai
public_repos109
account_age_days2821

Mantenimiento de paquetes

100Excelente
Cómo se puntúa
25/25Publicado y resoluble — 1 paquete(s) en go
35/35Recencia de publicación — última publicación hace 4 días
20/20Historial de versiones — 22 versiones en el registro
20/20No obsoleto — activo, ni obsoleto ni retirado
Datos de entrada utilizados
packagesgithub.com/castai/image-analyzer
ecosystemsgo
any_deprecatedno
min_days_since_publish4

Calidad de Ingeniería

¿Existen unas prácticas mínimas de ingeniería y documentación?

50Moderado · 20% del índice global

Prácticas de ingeniería

50Moderado
Cómo se puntúa
24/24Flujos de trabajo de CI — 1 flujo(s) de trabajo
24/24Pruebas presentes
0/16Configuración de linter
0/9.6Hooks de pre-commit
0/6.4.editorconfig
2/20OpenSSF Scorecard: CI-Tests — 4 out of 22 merged PRs checked by a CI test -- score normalized to 1
Datos de entrada utilizados
has_cisí
has_testssí
has_editorconfigno
has_linter_configno
has_precommit_configno

Documentación

50Moderado
Cómo se puntúa
30/30README
0/25Directorio de documentación
0/15Sitio de documentación / página del proyecto
10/10Descripción del repositorio
0/10Topics
10/10Wiki
Datos de entrada utilizados
topics—
has_wikisí
homepage—
has_readmesí
has_docs_dirno
has_descriptionsí

Seguridad

¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?

48En riesgo · 16% del índice global

Postura de seguridad

46En riesgo
Cómo se puntúa
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0.2/2.5CI-Tests — 4 out of 22 merged PRs checked by a CI test -- score normalized to 1
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
7.5/7.5Code-Review — all changesets reviewed
2.5/2.5Contributors — project has 4 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Licencia — license file detected
0/7.5Maintained — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5Packaging — sin datos
5/5Pinned-Dependencies — all dependencies are pinned
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — sin datos
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 53 existing vulnerabilities detected
Datos de entrada utilizados
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate4,6
Excluidos de la puntuación (sin datos o no aplicable): packaging, signed_releases. Los pesos restantes se han renormalizado.

Avisos de dependencias

55Moderado
Cómo se puntúa
8.7/35Dependencias directas libres de avisos conocidos — 2 afectados: github.com/aquasecurity/trivy v0.61.1 (high 7.5), github.com/docker/docker v27.5.1+incompatible (high 8.8)
0/25Dependencias indirectas libres de avisos conocidos — el conjunto transitivo no es separable de las dependencias de desarrollo y prueba en este alcance
32.8/40Sin avisos pendientes — 1 paquete(s) con avisos sin atender más allá de 90 días; el más antiguo publicado hace 357 días
Datos de entrada utilizados
sourceosv
advisories85
affected_packages22
assessed_packages320
unassessed_packages0
affected_by_severitycritical 1, high 11, moderate 5, low 1, unknown 4
direct_affected_packages2
Excluidos de la puntuación (sin datos o no aplicable): Dependencias indirectas libres de avisos conocidos. Los pesos restantes se han renormalizado. Se cotejaron 320 dependencias resueltas con OSV. Este repositorio no publica ningún paquete que el índice resuelva, por lo que se evaluó en su lugar el grafo de dependencias del repositorio. Ese grafo mezcla fijaciones de desarrollo y prueba con las dependencias distribuidas, de modo que solo se puntúan las dependencias declaradas en tiempo de ejecución; los hallazgos transitivos se informan como contexto y quedan excluidos de la puntuación. No se analiza la alcanzabilidad.

Preparación para IA

¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.

61Moderado · 0% del índice global

Contexto y guía para agentes

25Crítico
Cómo se puntúa
0/45Instrucciones para agentes — sin CLAUDE.md / AGENTS.md / reglas de editor
0/15Documentación legible por máquinas (llms.txt)
25/40Historial de commits legible — 23 de 49 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo)
Datos de entrada utilizados
has_llms_txtno
legible_history_share0,469
agent_instruction_files—
agent_instruction_max_bytes—

Bucle de verificación (compilación / pruebas / verificación de tipos)

74Bueno
Cómo se puntúa
12.6/18Arranque con un solo comando — go.mod (convención del toolchain, sin ejecutor de tareas)
22/22Pruebas automatizadas
0/11Configuración de lint / formato
11/11Verificación estática de tipos — Go (tipado estático)
10/10Entorno reproducible — lockfile
0/10Práctica demostrada con agentes — ningún commit con autoría de agente entre los últimos 67
8/8Mantenimiento automatizado — 18 de los últimos 67 commits son actualizaciones automáticas de dependencias
10/10OpenSSF Scorecard: Pinned-Dependencies — all dependencies are pinned
Datos de entrada utilizados
has_nixno
has_testssí
lockfilesgo.sum
has_dockerfileno
typed_languagesí
bootstrap_files—
has_devcontainerno
has_linter_configno
typecheck_configs—
agent_commit_share0
toolchain_manifestsgo.mod
dependency_bot_commit_share0,269

Legibilidad del código para modelos

100Excelente
Cómo se puntúa
45/45Código verificable por tipos — Go (tipado estático)
55/55Tamaños de archivo manejables — 0/18 archivos fuente de más de 60 KB
Datos de entrada utilizados
primary_languageGo
largest_source_bytes14.561
source_files_sampled18
oversized_source_files0

Datos clave

7estrellas de GitHub
9contribuidores
6commits en los últimos 12 meses
1días desde el último push
20versiones publicadas
2factor bus
1issues abiertas
Goecosistemas de paquetes

Advertencias de recopilación de datos

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Más detalle

OpenSSF Scorecard 4.6 / 10
4.6agregado

Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-22 13:39 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
1CI-Tests4 out of 22 merged PRs checked by a CI test -- score normalized to 1
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
10Code-Reviewall changesets reviewed
10Contributorsproject has 4 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintained1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
n/dPackagingpackaging workflow not detected
10Pinned-Dependenciesall dependencies are pinned
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
n/dSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities53 existing vulnerabilities detected
Dependencias directas 13
RegistroPaqueteRestricción de versiónManifiesto
Gogithub.com/aquasecurity/trivyv0.61.1go.mod
Gogithub.com/containerd/containerd/v2v2.2.5go.mod
Gogithub.com/containerd/platformsv1.0.0-rc.2go.mod
Gogithub.com/distribution/referencev0.6.0go.mod
Gogithub.com/docker/dockerv27.5.1+incompatiblego.mod
Gogithub.com/docker/go-connectionsv0.5.0go.mod
Gogithub.com/google/go-containerregistryv0.20.3go.mod
Gogithub.com/opencontainers/go-digestv1.0.0go.mod
Gogithub.com/opencontainers/image-specv1.1.1go.mod
Gogithub.com/samber/lov1.49.1go.mod
Gogithub.com/sirupsen/logrusv1.9.3go.mod
Gogithub.com/stretchr/testifyv1.11.1go.mod
Gogolang.org/x/syncv0.21.0go.mod
Todas las dependencias 320

Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 13 paquetes directos y 307 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.

RegistroPaqueteVersiónRelación
Gogithub.com/aquasecurity/trivyv0.61.1directa
Gogithub.com/containerd/containerd/v2v2.2.5directa
Gogithub.com/containerd/platformsv1.0.0-rc.2directa
Gogithub.com/distribution/referencev0.6.0directa
Gogithub.com/docker/dockerv27.5.1+incompatibledirecta
Gogithub.com/docker/go-connectionsv0.5.0directa
Gogithub.com/google/go-containerregistryv0.20.3directa
Gogithub.com/opencontainers/go-digestv1.0.0directa
Gogithub.com/opencontainers/image-specv1.1.1directa
Gogithub.com/samber/lov1.49.1directa
Gogithub.com/sirupsen/logrusv1.9.3directa
Gogithub.com/stretchr/testifyv1.11.1directa
Gogolang.org/x/syncv0.21.0directa
Gocel.dev/exprv0.24.0indirecta
Gocloud.google.com/gov0.116.0indirecta
Gocloud.google.com/go/authv0.14.0indirecta
Gocloud.google.com/go/auth/oauth2adaptv0.2.7indirecta
Gocloud.google.com/go/compute/metadatav0.9.0indirecta
Gocloud.google.com/go/iamv1.2.2indirecta
Gocloud.google.com/go/monitoringv1.21.2indirecta
Gocloud.google.com/go/storagev1.49.0indirecta
Godario.cat/mergov1.0.2indirecta
Gogithub.com/adalogics/go-fuzz-headersv0.0.0-20240806141605-e8a1dd7889d6indirecta
Gogithub.com/agext/levenshteinv1.2.3indirecta
Gogithub.com/agnivade/levenshteinv1.2.1indirecta
Gogithub.com/alecthomas/chromav0.10.0indirecta
Gogithub.com/anchore/go-struct-converterv0.0.0-20221118182256-c68fdcfa2092indirecta
Gogithub.com/apparentlymart/go-cidrv1.1.0indirecta
Gogithub.com/apparentlymart/go-textseg/v15v15.0.0indirecta
Gogithub.com/aquasecurity/go-npm-versionv0.0.1indirecta
Gogithub.com/aquasecurity/go-pep440-versionv0.0.1indirecta
Gogithub.com/aquasecurity/go-versionv0.0.1indirecta
Gogithub.com/aquasecurity/iamgov0.0.10indirecta
Gogithub.com/aquasecurity/jfatherv0.0.8indirecta
Gogithub.com/aquasecurity/trivy-checksv1.8.1indirecta
Gogithub.com/aquasecurity/trivy-dbv0.0.0-20250227071930-8bd8a9b89e2dindirecta
Gogithub.com/aquasecurity/trivy-java-dbv0.0.0-20240109071736-184bd7481d48indirecta
Gogithub.com/asaskevich/govalidatorv0.0.0-20230301143203-a9d515a09cc2indirecta
Gogithub.com/aws/aws-sdk-gov1.55.6indirecta
Gogithub.com/aws/aws-sdk-go-v2v1.36.3indirecta
Gogithub.com/aws/aws-sdk-go-v2/configv1.29.9indirecta
Gogithub.com/aws/aws-sdk-go-v2/credentialsv1.17.62indirecta
Gogithub.com/aws/aws-sdk-go-v2/feature/ec2/imdsv1.16.30indirecta
Gogithub.com/aws/aws-sdk-go-v2/internal/configsourcesv1.3.34indirecta
Gogithub.com/aws/aws-sdk-go-v2/internal/endpoints/v2v2.6.34indirecta
Gogithub.com/aws/aws-sdk-go-v2/internal/iniv1.8.3indirecta
Gogithub.com/aws/aws-sdk-go-v2/service/ecrv1.42.1indirecta
Gogithub.com/aws/aws-sdk-go-v2/service/internal/accept-encodingv1.12.3indirecta
Gogithub.com/aws/aws-sdk-go-v2/service/internal/presigned-urlv1.12.15indirecta
Gogithub.com/aws/aws-sdk-go-v2/service/s3v1.78.1indirecta
Gogithub.com/aws/aws-sdk-go-v2/service/ssov1.25.1indirecta
Gogithub.com/aws/aws-sdk-go-v2/service/ssooidcv1.29.1indirecta
Gogithub.com/aws/aws-sdk-go-v2/service/stsv1.33.17indirecta
Gogithub.com/aws/smithy-gov1.22.3indirecta
Gogithub.com/azure/azure-sdk-for-gov68.0.0+incompatibleindirecta
Gogithub.com/azure/azure-sdk-for-go/sdk/azcorev1.17.0indirecta
Gogithub.com/azure/azure-sdk-for-go/sdk/azidentityv1.8.2indirecta
Gogithub.com/azure/azure-sdk-for-go/sdk/internalv1.10.0indirecta
Gogithub.com/azure/go-ansitermv0.0.0-20230124172434-306776ec8161indirecta
Gogithub.com/azure/go-autorestv14.2.0+incompatibleindirecta
Gogithub.com/azure/go-autorest/autorestv0.11.29indirecta
Gogithub.com/azure/go-autorest/autorest/adalv0.9.23indirecta
Gogithub.com/azure/go-autorest/autorest/datev0.3.0indirecta
Gogithub.com/azure/go-autorest/loggerv0.2.1indirecta
Gogithub.com/azure/go-autorest/tracingv0.6.0indirecta
Gogithub.com/azuread/microsoft-authentication-library-for-gov1.3.3indirecta
Gogithub.com/beorn7/perksv1.0.1indirecta
Gogithub.com/bgentry/go-netrcv0.0.0-20140422174119-9fd32a8b3d3dindirecta
Gogithub.com/blang/semver/v4v4.0.0indirecta
Gogithub.com/bmatcuk/doublestar/v4v4.8.1indirecta
Gogithub.com/burntsushi/tomlv1.4.0indirecta
Gogithub.com/cespare/xxhash/v2v2.3.0indirecta
Gogithub.com/chai2010/gettext-gov1.0.2indirecta
Gogithub.com/cheggaaa/pb/v3v3.1.7indirecta
Gogithub.com/cloudflare/circlv1.6.0indirecta
Gogithub.com/cncf/xds/gov0.0.0-20251022180443-0feb69152e9findirecta
Gogithub.com/containerd/cgroups/v3v3.1.2indirecta
Gogithub.com/containerd/containerdv1.7.27indirecta
Gogithub.com/containerd/containerd/apiv1.10.0indirecta
Gogithub.com/containerd/continuityv0.4.5indirecta
Gogithub.com/containerd/errdefsv1.0.0indirecta
Gogithub.com/containerd/errdefs/pkgv0.3.0indirecta
Gogithub.com/containerd/fifov1.1.0indirecta
Gogithub.com/containerd/logv0.1.0indirecta
Gogithub.com/containerd/pluginv1.0.0indirecta
Gogithub.com/containerd/stargz-snapshotter/estargzv0.16.3indirecta
Gogithub.com/containerd/ttrpcv1.2.7indirecta
Gogithub.com/containerd/typeurl/v2v2.2.3indirecta
Gogithub.com/cyclonedx/cyclonedx-gov0.9.2indirecta
Gogithub.com/cyphar/filepath-securejoinv0.5.1indirecta
Gogithub.com/datadog/zstdv1.5.5indirecta
Gogithub.com/davecgh/go-spewv1.1.2-0.20180830191138-d8f796af33ccindirecta
Gogithub.com/dlclark/regexp2v1.4.0indirecta
Gogithub.com/docker/cliv27.5.0+incompatibleindirecta
Gogithub.com/docker/distributionv2.8.3+incompatibleindirecta
Gogithub.com/docker/docker-credential-helpersv0.8.2indirecta
Gogithub.com/docker/go-metricsv0.0.1indirecta
Gogithub.com/docker/go-unitsv0.5.0indirecta
Gogithub.com/emicklei/go-restful/v3v3.13.0indirecta
Gogithub.com/emirpasic/godsv1.18.1indirecta
Gogithub.com/envoyproxy/go-control-plane/envoyv1.35.0indirecta
Gogithub.com/envoyproxy/protoc-gen-validatev1.2.1indirecta
Gogithub.com/evanphx/json-patchv5.9.0+incompatibleindirecta
Gogithub.com/exponent-io/jsonpathv0.0.0-20210407135951-1de76d718b3findirecta
Gogithub.com/fatih/colorv1.18.0indirecta
Gogithub.com/felixge/httpsnoopv1.0.4indirecta
Gogithub.com/fxamacker/cbor/v2v2.9.0indirecta
Gogithub.com/go-errors/errorsv1.4.2indirecta
Gogithub.com/go-git/gcfgv1.5.1-0.20230307220236-3a3c6141e376indirecta
Gogithub.com/go-git/go-billy/v5v5.6.2indirecta
Gogithub.com/go-git/go-git/v5v5.14.0indirecta
Gogithub.com/go-gorp/gorp/v3v3.1.0indirecta
Gogithub.com/go-ini/iniv1.67.0indirecta
Gogithub.com/go-jose/go-jose/v4v4.1.4indirecta
Gogithub.com/go-json-experiment/jsonv0.0.0-20250211171154-1ae217ad3535indirecta
Gogithub.com/go-logr/logrv1.4.3indirecta
Gogithub.com/go-logr/stdrv1.2.2indirecta
Gogithub.com/go-openapi/jsonpointerv0.21.0indirecta
Gogithub.com/go-openapi/jsonreferencev0.21.0indirecta
Gogithub.com/go-openapi/swagv0.23.0indirecta
Gogithub.com/gobwas/globv0.2.3indirecta
Gogithub.com/gogo/protobufv1.3.2indirecta
Gogithub.com/golang-jwt/jwt/v4v4.5.2indirecta
Gogithub.com/golang-jwt/jwt/v5v5.2.2indirecta
Gogithub.com/golang/groupcachev0.0.0-20241129210726-2c02b8208cf8indirecta
Gogithub.com/google/btreev1.1.3indirecta
Gogithub.com/google/gnostic-modelsv0.7.0indirecta
Gogithub.com/google/go-cmpv0.7.0indirecta
Gogithub.com/google/go-github/v62v62.0.0indirecta
Gogithub.com/google/go-querystringv1.1.0indirecta
Gogithub.com/google/licenseclassifier/v2v2.0.0indirecta
Gogithub.com/google/s2a-gov0.1.9indirecta
Gogithub.com/google/shlexv0.0.0-20191202100458-e7afc7fbc510indirecta
Gogithub.com/google/uuidv1.6.0indirecta
Gogithub.com/googleapis/enterprise-certificate-proxyv0.3.4indirecta
Gogithub.com/googleapis/gax-go/v2v2.14.1indirecta
Gogithub.com/googlecloudplatform/docker-credential-gcrv2.0.5+incompatibleindirecta
Gogithub.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcpv1.30.0indirecta
Gogithub.com/googlecloudplatform/opentelemetry-operations-go/exporter/metricv0.48.1indirecta
Gogithub.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemappingv0.48.1indirecta
Gogithub.com/gorilla/muxv1.8.1indirecta
Gogithub.com/gorilla/websocketv1.5.4-0.20250319132907-e064f32e3674indirecta
Gogithub.com/gosuri/uitablev0.0.4indirecta
Gogithub.com/gregjones/httpcachev0.0.0-20190611155906-901d90724c79indirecta
Gogithub.com/hashicorp/errwrapv1.1.0indirecta
Gogithub.com/hashicorp/go-cleanhttpv0.5.2indirecta
Gogithub.com/hashicorp/go-getterv1.7.8indirecta
Gogithub.com/hashicorp/go-multierrorv1.1.1indirecta
Gogithub.com/hashicorp/go-safetempv1.0.0indirecta
Gogithub.com/hashicorp/go-uuidv1.0.3indirecta
Gogithub.com/hashicorp/go-versionv1.7.0indirecta
Gogithub.com/hashicorp/golang-lru/v2v2.0.7indirecta
Gogithub.com/hashicorp/hcl/v2v2.23.0indirecta
Gogithub.com/huandu/xstringsv1.5.0indirecta
Gogithub.com/in-toto/in-toto-golangv0.9.0indirecta
Gogithub.com/inconshreveable/mousetrapv1.1.0indirecta
Gogithub.com/jbenet/go-contextv0.0.0-20150711004518-d14ea06fba99indirecta
Gogithub.com/jmespath/go-jmespathv0.4.1-0.20220621161143-b0104c826a24indirecta
Gogithub.com/jmoiron/sqlxv1.4.0indirecta
Gogithub.com/josharian/internv1.0.0indirecta
Gogithub.com/json-iterator/gov1.1.12indirecta
Gogithub.com/kevinburke/ssh_configv1.2.0indirecta
Gogithub.com/klauspost/compressv1.18.5indirecta
Gogithub.com/knqyf263/go-apk-versionv0.0.0-20200609155635-041fdbb8563findirecta
Gogithub.com/knqyf263/go-deb-versionv0.0.0-20241115132648-6f4aee6ccd23indirecta
Gogithub.com/knqyf263/go-rpm-versionv0.0.0-20220614171824-631e686d1075indirecta
Gogithub.com/knqyf263/go-rpmdbv0.1.1indirecta
Gogithub.com/kylelemons/godebugv1.1.0indirecta
Gogithub.com/lann/builderv0.0.0-20180802200727-47ae307949d0indirecta
Gogithub.com/lann/psv0.0.0-20150810152359-62de8c46ede0indirecta
Gogithub.com/liamg/memoryfsv1.6.0indirecta
Gogithub.com/lib/pqv1.10.9indirecta
Gogithub.com/liggitt/tabwriterv0.0.0-20181228230101-89fcab3d43deindirecta
Gogithub.com/lunixbochs/strucv0.0.0-20200707160740-784aaebc1d40indirecta
Gogithub.com/mailru/easyjsonv0.7.7indirecta
Gogithub.com/makenowjust/heredocv1.0.0indirecta
Gogithub.com/masahiro331/go-diskv0.0.0-20240625071113-56c933208feeindirecta
Gogithub.com/masahiro331/go-ext4-filesystemv0.0.0-20240620024024-ca14e6327bbdindirecta
Gogithub.com/masahiro331/go-mvn-versionv0.0.0-20250131095131-f4974fa13b8aindirecta
Gogithub.com/masahiro331/go-xfs-filesystemv0.0.0-20231205045356-1b22259a6c44indirecta
Gogithub.com/masterminds/goutilsv1.1.1indirecta
Gogithub.com/masterminds/semver/v3v3.3.0indirecta
Gogithub.com/masterminds/sprig/v3v3.3.0indirecta
Gogithub.com/masterminds/squirrelv1.5.4indirecta
Gogithub.com/mattn/go-colorablev0.1.14indirecta
Gogithub.com/mattn/go-isattyv0.0.20indirecta
Gogithub.com/mattn/go-runewidthv0.0.16indirecta
Gogithub.com/mattn/go-shellwordsv1.0.12indirecta
Gogithub.com/microsoft/go-winiov0.6.2indirecta
Gogithub.com/microsoft/hcsshimv0.14.1indirecta
Gogithub.com/mitchellh/copystructurev1.2.0indirecta
Gogithub.com/mitchellh/go-homedirv1.1.0indirecta
Gogithub.com/mitchellh/go-testing-interfacev1.14.1indirecta
Gogithub.com/mitchellh/go-wordwrapv1.0.1indirecta
Gogithub.com/mitchellh/hashstructure/v2v2.0.2indirecta
Gogithub.com/mitchellh/mapstructurev1.5.0indirecta
Gogithub.com/mitchellh/reflectwalkv1.0.2indirecta
Gogithub.com/moby/buildkitv0.18.2indirecta
Gogithub.com/moby/docker-image-specv1.3.1indirecta
Gogithub.com/moby/lockerv1.0.1indirecta
Gogithub.com/moby/spdystreamv0.5.1indirecta
Gogithub.com/moby/sys/mountinfov0.7.2indirecta
Gogithub.com/moby/sys/sequentialv0.6.0indirecta
Gogithub.com/moby/sys/signalv0.7.1indirecta
Gogithub.com/moby/sys/userv0.4.0indirecta
Gogithub.com/moby/sys/usernsv0.1.0indirecta
Gogithub.com/moby/termv0.5.0indirecta
Gogithub.com/modern-go/concurrentv0.0.0-20180306012644-bacd9c7ef1ddindirecta
Gogithub.com/modern-go/reflect2v1.0.3-0.20250322232337-35a7c28c31eeindirecta
Gogithub.com/monochromegane/go-gitignorev0.0.0-20200626010858-205db1a8cc00indirecta
Gogithub.com/munnerz/goautonegv0.0.0-20191010083416-a7dc8b61c822indirecta
Gogithub.com/mxk/go-flowratev0.0.0-20140419014527-cca7078d478findirecta
Gogithub.com/oklog/ulid/v2v2.1.0indirecta
Gogithub.com/open-policy-agent/opav1.2.0indirecta
Gogithub.com/opencontainers/runtime-specv1.3.0indirecta
Gogithub.com/opencontainers/selinuxv1.13.1indirecta
Gogithub.com/owenrumney/squealerv1.2.11indirecta
Gogithub.com/package-url/packageurl-gov0.1.3indirecta
Gogithub.com/peterbourgon/diskvv2.0.1+incompatibleindirecta
Gogithub.com/pjbgf/sha1cdv0.3.2indirecta
Gogithub.com/pkg/browserv0.0.0-20240102092130-5ac0b6a4141cindirecta
Gogithub.com/pkg/errorsv0.9.1indirecta
Gogithub.com/planetscale/vtprotobufv0.6.1-0.20240319094008-0393e58bdf10indirecta
Gogithub.com/pmezard/go-difflibv1.0.1-0.20181226105442-5d4384ee4fb2indirecta
Gogithub.com/prometheus/client_golangv1.23.2indirecta
Gogithub.com/prometheus/client_modelv0.6.2indirecta
Gogithub.com/prometheus/commonv0.66.1indirecta
Gogithub.com/prometheus/procfsv0.16.1indirecta
Gogithub.com/protonmail/go-cryptov1.1.5indirecta
Gogithub.com/rcrowley/go-metricsv0.0.0-20201227073835-cf1acfcdf475indirecta
Gogithub.com/rivo/unisegv0.4.7indirecta
Gogithub.com/rubenv/sql-migratev1.7.1indirecta
Gogithub.com/russross/blackfriday/v2v2.1.0indirecta
Gogithub.com/rust-secure-code/go-rustauditv0.0.0-20250226111315-e20ec32e963cindirecta
Gogithub.com/samber/oopsv1.15.0indirecta
Gogithub.com/sassoftware/go-rpmutilsv0.4.0indirecta
Gogithub.com/secure-systems-lab/go-securesystemslibv0.9.0indirecta
Gogithub.com/sergi/go-diffv1.3.2-0.20230802210424-5b0b94c5c0d3indirecta
Gogithub.com/shibumi/go-pathspecv1.3.0indirecta
Gogithub.com/shopspring/decimalv1.4.0indirecta
Gogithub.com/skeema/knownhostsv1.3.1indirecta
Gogithub.com/spdx/tools-golangv0.5.5indirecta
Gogithub.com/spf13/castv1.7.1indirecta
Gogithub.com/spf13/cobrav1.9.1indirecta
Gogithub.com/spf13/pflagv1.0.6indirecta
Gogithub.com/spiffe/go-spiffe/v2v2.6.0indirecta
Gogithub.com/stretchr/objxv0.5.2indirecta
Gogithub.com/tchap/go-patricia/v2v2.3.3indirecta
Gogithub.com/tonistiigi/go-csvvaluev0.0.0-20240710180619-ddb21b71c0b4indirecta
Gogithub.com/ulikunitz/xzv0.5.12indirecta
Gogithub.com/vbatts/tar-splitv0.11.6indirecta
Gogithub.com/vividcortex/ewmav1.2.0indirecta
Gogithub.com/vmihailenco/msgpack/v5v5.4.1indirecta
Gogithub.com/vmihailenco/tagparser/v2v2.0.0indirecta
Gogithub.com/x448/float16v0.8.4indirecta
Gogithub.com/xanzy/ssh-agentv0.3.3indirecta
Gogithub.com/xeipuuv/gojsonpointerv0.0.0-20190905194746-02993c407bfbindirecta
Gogithub.com/xeipuuv/gojsonreferencev0.0.0-20180127040603-bd5ef7bd5415indirecta
Gogithub.com/xeipuuv/gojsonschemav1.2.0indirecta
Gogithub.com/xi2/xzv0.0.0-20171230120015-48954b6210f8indirecta
Gogithub.com/xlab/treeprintv1.2.0indirecta
Gogithub.com/yashtewari/glob-intersectionv0.2.0indirecta
Gogithub.com/zclconf/go-ctyv1.16.2indirecta
Gogithub.com/zclconf/go-cty-yamlv1.1.0indirecta
Gogo.etcd.io/bboltv1.4.3indirecta
Gogo.opencensus.iov0.24.0indirecta
Gogo.opentelemetry.io/auto/sdkv1.2.1indirecta
Gogo.opentelemetry.io/contrib/detectors/gcpv1.38.0indirecta
Gogo.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpcv0.60.0indirecta
Gogo.opentelemetry.io/contrib/instrumentation/net/http/otelhttpv0.60.0indirecta
Gogo.opentelemetry.io/otelv1.38.0indirecta
Gogo.opentelemetry.io/otel/metricv1.38.0indirecta
Gogo.opentelemetry.io/otel/sdkv1.38.0indirecta
Gogo.opentelemetry.io/otel/sdk/metricv1.38.0indirecta
Gogo.opentelemetry.io/otel/tracev1.38.0indirecta
Gogo.uber.org/multierrv1.11.0indirecta
Gogo.uber.org/zapv1.27.0indirecta
Gogo.yaml.in/yaml/v2v2.4.2indirecta
Gogo.yaml.in/yaml/v3v3.0.4indirecta
Gogolang.org/x/cryptov0.53.0indirecta
Gogolang.org/x/modv0.36.0indirecta
Gogolang.org/x/netv0.55.0indirecta
Gogolang.org/x/oauth2v0.32.0indirecta
Gogolang.org/x/sysv0.46.0indirecta
Gogolang.org/x/termv0.44.0indirecta
Gogolang.org/x/textv0.38.0indirecta
Gogolang.org/x/timev0.14.0indirecta
Gogolang.org/x/toolsv0.45.0indirecta
Gogolang.org/x/xerrorsv0.0.0-20240903120638-7835f813f4daindirecta
Gogoogle.golang.org/apiv0.218.0indirecta
Gogoogle.golang.org/genprotov0.0.0-20241118233622-e639e219e697indirecta
Gogoogle.golang.org/genproto/googleapis/apiv0.0.0-20251029180050-ab9386a59fdaindirecta
Gogoogle.golang.org/genproto/googleapis/rpcv0.0.0-20251029180050-ab9386a59fdaindirecta
Gogoogle.golang.org/grpcv1.78.0indirecta
Gogoogle.golang.org/protobufv1.36.10indirecta
Gogopkg.in/evanphx/json-patch.v4v4.12.0indirecta
Gogopkg.in/inf.v0v0.9.1indirecta
Gogopkg.in/warnings.v0v0.1.2indirecta
Gogopkg.in/yaml.v3v3.0.1indirecta
Gogotest.tools/v3v3.5.0indirecta
Gohelm.sh/helm/v3v3.17.2indirecta
Gok8s.io/apiv0.34.1indirecta
Gok8s.io/apiextensions-apiserverv0.32.2indirecta
Gok8s.io/apimachineryv0.34.1indirecta
Gok8s.io/apiserverv0.32.2indirecta
Gok8s.io/cli-runtimev0.32.3indirecta
Gok8s.io/client-gov0.34.1indirecta
Gok8s.io/component-basev0.32.3indirecta
Gok8s.io/klog/v2v2.130.1indirecta
Gok8s.io/kube-openapiv0.0.0-20250710124328-f3f2b991d03bindirecta
Gok8s.io/kubectlv0.32.3indirecta
Gok8s.io/utilsv0.0.0-20250604170112-4c0f3b243397indirecta
Gomvdan.cc/sh/v3v3.11.0indirecta
Gooras.land/oras-gov1.2.5indirecta
Gosigs.k8s.io/jsonv0.0.0-20241014173422-cfa47c3a1cc8indirecta
Gosigs.k8s.io/kustomize/apiv0.18.0indirecta
Gosigs.k8s.io/kustomize/kyamlv0.18.1indirecta
Gosigs.k8s.io/randfillv1.0.0indirecta
Gosigs.k8s.io/structured-merge-diff/v6v6.3.0indirecta
Gosigs.k8s.io/yamlv1.6.0indirecta
Avisos de dependencias 22

Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 320 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 22 tienen avisos conocidos, de los cuales 2 son directas.

PaqueteVersiónRelaciónGravedadAvisosCorregido en
google.golang.org/grpcv1.78.0indirectacrítica31.82.1
github.com/aquasecurity/trivyv0.61.1directaalta10.71.0
github.com/docker/dockerv27.5.1+incompatibledirectaalta1129.3.1
github.com/containerd/containerdv1.7.27indirectaalta132.3.2
github.com/docker/cliv27.5.0+incompatibleindirectaalta229.2.0+incompatible
github.com/go-git/go-billy/v5v5.6.2indirectaalta26.0.0-alpha.1
github.com/hashicorp/go-getterv1.7.8indirectaalta41.8.6
github.com/moby/buildkitv0.18.2indirectaalta40.28.1
github.com/open-policy-agent/opav1.2.0indirectaalta21.4.0
go.opentelemetry.io/otelv1.38.0indirectaalta11.41.0
go.opentelemetry.io/otel/sdkv1.38.0indirectaalta31.43.0
helm.sh/helm/v3v3.17.2indirectaalta114.1.4
github.com/aws/aws-sdk-go-v2/service/s3v1.78.1indirectamoderada21.97.3
github.com/cloudflare/circlv1.6.0indirectamoderada41.6.3
github.com/go-git/go-git/v5v5.14.0indirectamoderada126.0.0-alpha.4
github.com/in-toto/in-toto-golangv0.9.0indirectamoderada20.11.0
github.com/ulikunitz/xzv0.5.12indirectamoderada20.5.15
oras.land/oras-gov1.2.5indirectabaja12.6.1
github.com/aws/aws-sdk-gov1.55.6indirectadesconocida2—
golang.org/x/cryptov0.53.0indirectadesconocida1—
golang.org/x/netv0.55.0indirectadesconocida10.56.0
golang.org/x/textv0.38.0indirectadesconocida10.39.0

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

Informe JSON sin procesar legible por máquina
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 57364,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 63173,
        "Shell": 268
      },
      "pushed_at": "2026-07-20T19:16:23Z",
      "created_at": "2023-11-30T07:34:49Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-17T14:05:31Z",
      "description": "OCI images analyzer",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://cast.ai",
      "name": "CAST AI",
      "type": "Organization",
      "login": "castai",
      "company": null,
      "location": null,
      "followers": 251,
      "avatar_url": "https://avatars.githubusercontent.com/u/44625431?v=4",
      "created_at": "2018-10-31T00:13:08Z",
      "is_verified": null,
      "public_repos": 109,
      "account_age_days": 2821
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2026-07-17T20:33:34Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2025-10-01T07:26:22Z"
        },
        {
          "tag": "v0.9.1",
          "kind": "patch",
          "published_at": "2025-08-18T11:33:08Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2025-05-22T15:33:03Z"
        },
        {
          "tag": "v0.7.3",
          "kind": "patch",
          "published_at": "2025-04-15T14:29:47Z"
        },
        {
          "tag": "v0.7.2",
          "kind": "patch",
          "published_at": "2025-02-20T09:54:34Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2025-01-31T09:03:07Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2024-11-29T08:51:36Z"
        },
        {
          "tag": "v0.6.2",
          "kind": "patch",
          "published_at": "2024-11-26T11:42:58Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2024-11-05T13:54:20Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2024-10-22T11:05:05Z"
        },
        {
          "tag": "v0.5.2",
          "kind": "patch",
          "published_at": "2024-09-19T09:13:50Z"
        },
        {
          "tag": "v0.5.1",
          "kind": "patch",
          "published_at": "2024-05-23T07:10:32Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2024-05-17T11:41:43Z"
        },
        {
          "tag": "v0.4.3",
          "kind": "patch",
          "published_at": "2024-04-30T10:35:57Z"
        },
        {
          "tag": "v0.4.2",
          "kind": "patch",
          "published_at": "2024-04-30T07:35:04Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2024-04-18T07:58:40Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2024-04-15T11:29:15Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2024-01-31T07:51:00Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2023-11-30T12:56:50Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "9b4590d4af9d68d75612f9e983e19292b0eb50de",
          "body": "FIx CVEs by removing the containerd v1 direct dependency that pinned runtime-spec to v1.2.x (int64 Pids.Limit).\n\nThe v2 client has the same interface — only import paths changed.",
          "is_bot": false,
          "headline": "REP-2241: Migrate containerd client from v1 to v2 (#67)",
          "author_name": "krystiancastai",
          "author_login": "krystiancastai",
          "committed_at": "2026-07-17T14:04:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd29a67cbd5c61d2e64e1ad8bc04e7005e060836",
          "body": null,
          "is_bot": false,
          "headline": "Return index manifest and digest when scanning images (#61)",
          "author_name": "Samu",
          "author_login": null,
          "committed_at": "2025-10-01T07:16:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9690004e41d41c2514f4c0cce44827d59c605ed7",
          "body": "…or auth key\n\nSupport all possible docker image pull auth options, proper support for auth key",
          "is_bot": false,
          "headline": "Support all possible docker image pull auth options, proper support f…",
          "author_name": "Arnas Navašinskas",
          "author_login": "arnasnn",
          "committed_at": "2025-08-18T11:31:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44e9280684cb9ba429e5052c1a4ca0c77deb564c",
          "body": null,
          "is_bot": false,
          "headline": "Support all possible auth options, proper support for auth key",
          "author_name": "Arnas Navašinskas",
          "author_login": null,
          "committed_at": "2025-08-13T15:03:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e4b1e880aebf9c9e8146628ebb1e0ac087b1908",
          "body": "Support all possible auth options, proper support for auth key",
          "is_bot": false,
          "headline": "Support all possible auth options, proper support for auth key",
          "author_name": "Arnas Navašinskas",
          "author_login": "arnasnn",
          "committed_at": "2025-08-12T14:16:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f4301af9be887b912a6a27956abfa28fd6011c6",
          "body": null,
          "is_bot": false,
          "headline": "Support all possible auth options, proper support for auth key",
          "author_name": "Arnas Navašinskas",
          "author_login": null,
          "committed_at": "2025-08-12T13:28:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "599f8b1f089ffb1c13e5d6427bd8df3b1133afaf",
          "body": "Report installed files per package",
          "is_bot": false,
          "headline": "Merge pull request #53 from castai/pkgs-installed-files",
          "author_name": "Samu",
          "author_login": null,
          "committed_at": "2025-05-22T15:31:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eca6aeb1f4fdc23b0ec08dd612210dbf46baa77e",
          "body": null,
          "is_bot": false,
          "headline": "Report installed files per package",
          "author_name": "Samuel Veloso",
          "author_login": null,
          "committed_at": "2025-05-08T11:34:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c1c0d01ace847bb0b4aa34ab9b90f157541c0cf",
          "body": null,
          "is_bot": false,
          "headline": "Add devbox support for easier development",
          "author_name": "Domas Tamašauskas",
          "author_login": "domust",
          "committed_at": "2025-04-30T09:03:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "815f6ff9d8c34bab9f2983f791d218f9699b4886",
          "body": "* fix(deps): update golang.org/x/xerrors digest to 7835f81\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Patrick Pichler <patrick@cast.ai>",
          "is_bot": true,
          "headline": "fix(deps): update golang.org/x/xerrors digest to 7835f81 (#45)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2025-04-15T14:29:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34c0fbbfc3da396b11b9586beed30484babd4bbc",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-go digest to 0aaccfd",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2025-04-15T13:51:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "444f628553596bb068884ccbc3613d2194da63ef",
          "body": "* fix(deps): update all non-major dependencies\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Patrick Pichler <patrick@cast.ai>",
          "is_bot": true,
          "headline": "fix(deps): update all non-major dependencies (#49)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2025-04-15T13:50:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "216f5441a716e19cd7370ea0226dbf86b6c8e75f",
          "body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Patrick Pichler <patrick@cast.ai>",
          "is_bot": true,
          "headline": "fix(deps): update all non-major dependencies (#47)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2025-03-10T12:03:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "330359ad4c21a5090fedc59a61a5838eef8f621f",
          "body": "* fix(deps): update all non-major dependencies\n\n* Run go mod tidy\n\n---------\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>\nCo-authored-by: Patrick Pichler <patrick@cast.ai>",
          "is_bot": true,
          "headline": "fix(deps): update all non-major dependencies (#44)",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2025-02-20T09:54:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3e4411911f470ec7be9b81fee82aa71a3c402df",
          "body": null,
          "is_bot": false,
          "headline": "Perform trivy version update",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2025-01-31T09:02:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64f30302690ae99bd8d2f9eef9c560b35e44022f",
          "body": null,
          "is_bot": true,
          "headline": "fix(deps): update all non-major dependencies",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2025-01-31T09:02:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5a2d5389a8d0a3dc203c19f658fc4a247bd3c91",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-go digest to f111f33",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2025-01-30T12:58:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92ad7674f2852a700c186a8d685c13ab060f438c",
          "body": null,
          "is_bot": false,
          "headline": "Simplify artifact inspection logic",
          "author_name": "Domas Tamašauskas",
          "author_login": "domust",
          "committed_at": "2024-11-29T08:48:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5defd5557b0fbb2c4da6266db4c7cd12437a568",
          "body": null,
          "is_bot": false,
          "headline": "Run go mod tidy",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-11-27T12:45:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d02c5690df5f20940e58bcc5b8211183dcfda16",
          "body": null,
          "is_bot": true,
          "headline": "fix(deps): update github.com/knqyf263/go-deb-version digest to 6f4aee6",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2024-11-27T12:45:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9ed3703b279b7db0b23bb3e54c7bd2102bd4ecc",
          "body": null,
          "is_bot": false,
          "headline": "Run go mod tidy",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-11-27T12:40:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e87adcb1e2a155f5662f425094dc52ceac11b45d",
          "body": null,
          "is_bot": true,
          "headline": "fix(deps): update all non-major dependencies",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2024-11-27T12:40:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a5b153275ca00208441af1c11a432f29bceb559",
          "body": null,
          "is_bot": false,
          "headline": "Provide more context to artifact inspect errors",
          "author_name": "Domas Tamašauskas",
          "author_login": "domust",
          "committed_at": "2024-11-26T11:42:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efef2a8910542fb5a7ceb7b976e9fee2b6a0c36b",
          "body": null,
          "is_bot": true,
          "headline": "fix(deps): update module github.com/aquasecurity/trivy to v0.57.0",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2024-11-05T07:57:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60d37f7d4c6e64a8d0737f723ef8e67161b1d341",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-go digest to 41dfa10",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2024-11-05T07:10:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20ae72c4a22f1cf5ae7101f3d0c4716f0d001492",
          "body": "chore(deps): update actions/checkout digest to 11bd719",
          "is_bot": false,
          "headline": "Merge pull request #34 from castai/renovate/actions-checkout-digest",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-11-05T07:10:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d7144e30033b428a81ffd5629994c42fb879b9d",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/checkout digest to 11bd719",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2024-10-28T00:57:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "026fd3ceccfc956b97896e5f2ebddb6102c9c74a",
          "body": "fix(deps): update all non-major dependencies",
          "is_bot": false,
          "headline": "Merge pull request #29 from castai/renovate/all-minor-patch",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-10-22T11:02:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b5e505f774782961ee4010f311553213db3ddb6",
          "body": null,
          "is_bot": true,
          "headline": "fix(deps): update all non-major dependencies",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2024-10-22T10:59:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d4bdebe8a70603e9c6faea427cddd9573e5f3dd",
          "body": "…o-dep-parser-digest\n\nfix(deps): update github.com/aquasecurity/go-dep-parser digest to 1de9a37",
          "is_bot": false,
          "headline": "Merge pull request #25 from castai/renovate/github.com-aquasecurity-g…",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-10-22T10:21:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2524fd705b30543ed22abd9c77b0795669294377",
          "body": "…27.x\n\nfix(deps): update module github.com/docker/docker to v27",
          "is_bot": false,
          "headline": "Merge pull request #32 from castai/renovate/github.com-docker-docker-…",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-10-22T10:20:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31afa035be1a62a3b192bfc59d049c3482f05635",
          "body": null,
          "is_bot": true,
          "headline": "fix(deps): update module github.com/docker/docker to v27",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2024-10-22T10:17:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fdd527971b4a1f28549e5eca16f8875bd413e9d5",
          "body": "Replace usage of exp modules with stdlib",
          "is_bot": false,
          "headline": "Merge pull request #33 from castai/remove-go-exp-dependency",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-10-22T10:14:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3ba16bf79181c076bc556086bf456e34c7cf134",
          "body": null,
          "is_bot": false,
          "headline": "Replace xerrors with stdlib",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-10-22T10:12:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c742964ee3e871ae95dfb876ec8c3f6eb098a443",
          "body": null,
          "is_bot": false,
          "headline": "Replace usage of exp module with stdlib",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-10-22T10:09:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10ce55b4afb3152589c4be8058b4a57da85260f6",
          "body": "chore(deps): update dependency ubuntu to v24",
          "is_bot": false,
          "headline": "Merge pull request #31 from castai/renovate/ubuntu-24.x",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-10-22T10:04:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec74183ed01334051a188fcd65ce41fe548150d8",
          "body": "chore(deps): pin actions/checkout action to eef6144",
          "is_bot": false,
          "headline": "Merge pull request #24 from castai/renovate/pin-dependencies",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-10-22T10:00:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a7b75b2685292d0f63953fc25302c42304f1da9",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): pin actions/checkout action to eef6144",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2024-10-22T09:59:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "181677f1c68ee688942e868d5dd633a110c8f747",
          "body": "Setup go version based on go.mod file",
          "is_bot": false,
          "headline": "Merge pull request #28 from castai/setup-go-version-based-on-gomod",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-10-22T09:59:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e777f1035d6de1d5b842b0091f062be9adac086e",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update dependency ubuntu to v24",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2024-10-22T09:58:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ef2c7b821ceb9a540700ae794859196ddc1c9f9",
          "body": null,
          "is_bot": false,
          "headline": "Setup go version based on go.mod file",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-10-22T09:57:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0071e0e3b20ce20bf90c5625cea89c81027a03f",
          "body": "…9a37",
          "is_bot": true,
          "headline": "fix(deps): update github.com/aquasecurity/go-dep-parser digest to 1de…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2024-10-22T09:57:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b3db2b8edecb62dbc9eefd291b1646897f2ad98",
          "body": "chore: Configure Renovate",
          "is_bot": false,
          "headline": "Merge pull request #22 from castai/renovate/configure",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-10-22T09:53:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc29c133b9394c2794f2be2d93d96fa058ab2b76",
          "body": null,
          "is_bot": true,
          "headline": "Add renovate.json",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2024-10-22T09:52:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2597d9ba86e1c41fac6b092fc0e8fa488548a6db",
          "body": null,
          "is_bot": false,
          "headline": "Instrument remote image pulling",
          "author_name": "Domas Tamašauskas",
          "author_login": "domust",
          "committed_at": "2024-09-19T09:10:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9010cd3f3eada647427c030fc7be830e437294c3",
          "body": "feat: bump trivy to v0.51.2",
          "is_bot": false,
          "headline": "Merge pull request #18 from castai/feature/bump-trivy",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-05-23T07:09:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6701609f52984f69a392aa7e5b29c546869505b1",
          "body": "fix: close rpmdb",
          "is_bot": false,
          "headline": "Merge pull request #13 from testwill/close_rpmdb",
          "author_name": "Andžej Maciusovič",
          "author_login": "anjmao",
          "committed_at": "2024-05-23T07:06:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab32e27114fe244ff498dcfec8bc3b794819a11e",
          "body": "Trivy v0.51.2 contains important bug fixes on parsing versions of go\nbinary main module versions. Hence the version has been pumped.",
          "is_bot": false,
          "headline": "feat: bump trivy to v0.51.2",
          "author_name": "Patrick Pichler",
          "author_login": "patrickpichler",
          "committed_at": "2024-05-23T07:04:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3975453bfa1674937dc965bcbbcdad631722bef1",
          "body": "* bump trivy\r\n\r\n* fixes",
          "is_bot": false,
          "headline": "bump trivy (#17)",
          "author_name": "Matas Kulkovas",
          "author_login": "matas-cast",
          "committed_at": "2024-05-17T10:40:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf446243872fd9fd3a4d7f335418284339744e83",
          "body": "Fix username/password auth",
          "is_bot": false,
          "headline": "Merge pull request #16 from castai/fix-username-password-auth2",
          "author_name": "Andžej Maciusovič",
          "author_login": "anjmao",
          "committed_at": "2024-04-30T10:35:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8815f4eb8debe3ff78c1790607509786672e21a",
          "body": null,
          "is_bot": false,
          "headline": "Fix username/password auth",
          "author_name": "anjmao",
          "author_login": "anjmao",
          "committed_at": "2024-04-30T09:41:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98111c4a53edb2cebb169132167fd54f63e72e7f",
          "body": "Fix username/password auth",
          "is_bot": false,
          "headline": "Merge pull request #15 from castai/fix-username-password-auth",
          "author_name": "Andžej Maciusovič",
          "author_login": "anjmao",
          "committed_at": "2024-04-30T07:34:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e516689ec5f2246522ab7fcf5f76cfd23be6e07f",
          "body": null,
          "is_bot": false,
          "headline": "Fix username/password auth",
          "author_name": "anjmao",
          "author_login": "anjmao",
          "committed_at": "2024-04-30T07:28:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7276b5ffaf8c854988633e67d4a839e2b3f212d2",
          "body": null,
          "is_bot": false,
          "headline": "fix: close rpmdb",
          "author_name": "guangwu",
          "author_login": "testwill",
          "committed_at": "2024-04-20T05:56:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a3215212735150840f1de50144f63ab548c3d78",
          "body": null,
          "is_bot": false,
          "headline": "Reregister apk/dpkgs/rpm analyzers",
          "author_name": "Domas Tamašauskas",
          "author_login": "domust",
          "committed_at": "2024-04-18T06:51:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2d681df3d34bb42df6351ecd87f3f8e8ebaf6c4",
          "body": null,
          "is_bot": false,
          "headline": "Update trivy dependency and fix the code due to breaking changes",
          "author_name": "Domas Tamašauskas",
          "author_login": "domust",
          "committed_at": "2024-04-15T11:17:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17b62a1c0158d7ef0dc0ea0e0bd769d7a358ec5c",
          "body": "Upgrade trivy version",
          "is_bot": false,
          "headline": "Merge pull request #10 from castai/addimageanalyzer",
          "author_name": "Darius Mejeras",
          "author_login": "damejeras",
          "committed_at": "2024-01-31T07:50:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b71bc7d4b4c18799904a47b27f548e839891db22",
          "body": null,
          "is_bot": false,
          "headline": "Upgrade trivy version",
          "author_name": "Darius Mejeras",
          "author_login": "damejeras",
          "committed_at": "2024-01-31T07:25:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cddb0eb7986a052b84bfb55bffdf21f106b70756",
          "body": "get from remote by arch and os",
          "is_bot": false,
          "headline": "Merge pull request #2 from castai/support-arch-os",
          "author_name": "Aleksander Belov",
          "author_login": "zdarovich",
          "committed_at": "2023-12-05T10:19:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "000adc9beebce3731fbac956c9ccda12a3b7d9a6",
          "body": null,
          "is_bot": false,
          "headline": "get from remote by arch and os",
          "author_name": "zdarovich",
          "author_login": "zdarovich",
          "committed_at": "2023-12-05T10:05:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c0b2b837a199ad8437fa06605982bb0afb876dc",
          "body": "Add image-analyzer code",
          "is_bot": false,
          "headline": "Merge pull request #1 from castai/addimageanalyzer",
          "author_name": "Darius Mejeras",
          "author_login": "damejeras",
          "committed_at": "2023-11-30T12:56:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d4a27be31557bb0a876a50a59443587b29d5c05",
          "body": null,
          "is_bot": false,
          "headline": "Add notice",
          "author_name": "Darius Mejeras",
          "author_login": "damejeras",
          "committed_at": "2023-11-30T12:54:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "167a35b97d795eb799e6778183fd905fbda58ccd",
          "body": null,
          "is_bot": false,
          "headline": "V3",
          "author_name": "Darius Mejeras",
          "author_login": "damejeras",
          "committed_at": "2023-11-30T12:19:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09d4d4efae428265f8e37df0f4fc1f7ddf927041",
          "body": null,
          "is_bot": false,
          "headline": "Commit with less code",
          "author_name": "Darius Mejeras",
          "author_login": "damejeras",
          "committed_at": "2023-11-30T11:41:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "517ca9a41f9caabd949aeeaccfef0257324ffb71",
          "body": "This reverts commit da927e0c46c697d8b87c0bd6b5eb1f8f64d6efa4.",
          "is_bot": false,
          "headline": "Revert \"Add image-analyzer code\"",
          "author_name": "Darius Mejeras",
          "author_login": "damejeras",
          "committed_at": "2023-11-30T10:37:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da927e0c46c697d8b87c0bd6b5eb1f8f64d6efa4",
          "body": null,
          "is_bot": false,
          "headline": "Add image-analyzer code",
          "author_name": "Darius Mejeras",
          "author_login": "damejeras",
          "committed_at": "2023-11-30T09:26:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa551ed9064cf2b6a354524a6c01c04f4f143da2",
          "body": null,
          "is_bot": false,
          "headline": "Initial commit",
          "author_name": "Andžej Maciusovič",
          "author_login": "anjmao",
          "committed_at": "2023-11-30T07:34:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 20,
      "commits_last_year": 6,
      "latest_release_at": "2026-07-17T20:33:34Z",
      "latest_release_tag": "v0.10.1",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 4,
      "mean_days_between_releases": 68.8
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/castai/image-analyzer",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/castai/image-analyzer",
          "is_deprecated": false,
          "latest_version": "v0.10.1",
          "repository_url": "https://github.com/castai/image-analyzer",
          "versions_count": 22,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-17T14:04:23Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 4
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 7,
      "watchers": 2,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 8
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 14561,
      "source_files_sampled": 18,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.78.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf",
              "GHSA-p77j-4mvh-x3m3",
              "GO-2026-4762"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 3,
            "oldest_advisory_days": 125
          },
          {
            "name": "github.com/aquasecurity/trivy",
            "direct": true,
            "version": "v0.61.1",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-q3fv-x8vg-qqm4"
            ],
            "fixed_version": "0.71.0",
            "advisory_count": 1,
            "oldest_advisory_days": 7
          },
          {
            "name": "github.com/docker/docker",
            "direct": true,
            "version": "v27.5.1+incompatible",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-4vq8-7jfc-9cvp",
              "GHSA-pxq6-2prw-chj9",
              "GHSA-rg2x-37c3-w2rh",
              "GHSA-vp62-88p7-qqf5",
              "GHSA-x744-4wpc-v9h2",
              "GHSA-x86f-5xw2-fm2r",
              "GO-2026-4883",
              "GO-2026-4887",
              "GO-2026-5617",
              "GO-2026-5668"
            ],
            "fixed_version": "29.3.1",
            "advisory_count": 11,
            "oldest_advisory_days": 357
          },
          {
            "name": "github.com/containerd/containerd",
            "direct": false,
            "version": "v1.7.27",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-fqw6-gf59-qr4w",
              "GHSA-jpcc-p29g-p8mq",
              "GHSA-m6hq-p25p-ffr2",
              "GHSA-pwhc-rpq9-4c8w",
              "GHSA-xhf5-7wjv-pqxp",
              "GO-2025-4100",
              "GO-2025-4108",
              "GO-2026-5064",
              "GO-2026-5338",
              "GO-2026-5378"
            ],
            "fixed_version": "2.3.2",
            "advisory_count": 13,
            "oldest_advisory_days": 257
          },
          {
            "name": "github.com/docker/cli",
            "direct": false,
            "version": "v27.5.0+incompatible",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-p436-gjf2-799p",
              "GO-2026-4610"
            ],
            "fixed_version": "29.2.0+incompatible",
            "advisory_count": 2,
            "oldest_advisory_days": 139
          },
          {
            "name": "github.com/go-git/go-billy/v5",
            "direct": false,
            "version": "v5.6.2",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-m3xc-h892-ggx6",
              "GHSA-qw64-3x98-g7q2"
            ],
            "fixed_version": "6.0.0-alpha.1",
            "advisory_count": 2,
            "oldest_advisory_days": 69
          },
          {
            "name": "github.com/hashicorp/go-getter",
            "direct": false,
            "version": "v1.7.8",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-92mm-2pjq-r785",
              "GHSA-wjrx-6529-hcj3",
              "GO-2025-3892",
              "GO-2026-5058"
            ],
            "fixed_version": "1.8.6",
            "advisory_count": 4,
            "oldest_advisory_days": 340
          },
          {
            "name": "github.com/moby/buildkit",
            "direct": false,
            "version": "v0.18.2",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.4,
            "advisory_ids": [
              "GHSA-4c29-8rgm-jvjj",
              "GHSA-4vrq-3vrq-g6gg",
              "GO-2026-4858",
              "GO-2026-4859"
            ],
            "fixed_version": "0.28.1",
            "advisory_count": 4,
            "oldest_advisory_days": 117
          },
          {
            "name": "github.com/open-policy-agent/opa",
            "direct": false,
            "version": "v1.2.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-6m8w-jc87-6cr7",
              "GO-2025-3660"
            ],
            "fixed_version": "1.4.0",
            "advisory_count": 2,
            "oldest_advisory_days": 446
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.38.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-mh2q-q3fh-2475"
            ],
            "fixed_version": "1.41.0",
            "advisory_count": 1,
            "oldest_advisory_days": 105
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.38.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7,
            "advisory_ids": [
              "GHSA-9h8m-3fm2-qjrq",
              "GHSA-hfvc-g4fc-pqhx",
              "GO-2026-4394"
            ],
            "fixed_version": "1.43.0",
            "advisory_count": 3,
            "oldest_advisory_days": 169
          },
          {
            "name": "helm.sh/helm/v3",
            "direct": false,
            "version": "v3.17.2",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.5,
            "advisory_ids": [
              "GHSA-4hfp-h4cw-hj8p",
              "GHSA-557j-xg8c-q2mm",
              "GHSA-5xqw-8hwv-wg92",
              "GHSA-9h84-qmv7-982p",
              "GHSA-f9f8-9pmf-xv68",
              "GHSA-hr2v-4r36-88hr",
              "GO-2025-3601",
              "GO-2025-3602",
              "GO-2025-3802",
              "GO-2025-3887"
            ],
            "fixed_version": "4.1.4",
            "advisory_count": 11,
            "oldest_advisory_days": 467
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/s3",
            "direct": false,
            "version": "v1.78.1",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-xmrv-pmrh-hhx2",
              "GO-2026-5764"
            ],
            "fixed_version": "1.97.3",
            "advisory_count": 2,
            "oldest_advisory_days": 105
          },
          {
            "name": "github.com/cloudflare/circl",
            "direct": false,
            "version": "v1.6.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.6,
            "advisory_ids": [
              "GHSA-2x5j-vhc8-9cwm",
              "GHSA-q9hv-hpm4-hj6x",
              "GO-2025-3754",
              "GO-2026-4550"
            ],
            "fixed_version": "1.6.3",
            "advisory_count": 4,
            "oldest_advisory_days": 406
          },
          {
            "name": "github.com/go-git/go-git/v5",
            "direct": false,
            "version": "v5.14.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-37cx-329c-33x3",
              "GHSA-389r-gv7p-r3rp",
              "GHSA-3xc5-wrhm-f963",
              "GHSA-crhj-59gh-8x96",
              "GHSA-gm2x-2g9h-ccm8",
              "GHSA-jhf3-xxhw-2wpp",
              "GHSA-m7cr-m3pv-hgrp",
              "GHSA-w5pp-99ch-qj29",
              "GO-2026-4473",
              "GO-2026-4909"
            ],
            "fixed_version": "6.0.0-alpha.4",
            "advisory_count": 12,
            "oldest_advisory_days": 162
          },
          {
            "name": "github.com/in-toto/in-toto-golang",
            "direct": false,
            "version": "v0.9.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 4.1,
            "advisory_ids": [
              "GHSA-pmwq-pjrm-6p5r",
              "GO-2026-5547"
            ],
            "fixed_version": "0.11.0",
            "advisory_count": 2,
            "oldest_advisory_days": 74
          },
          {
            "name": "github.com/ulikunitz/xz",
            "direct": false,
            "version": "v0.5.12",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-jc7w-c686-c4v9",
              "GO-2025-3922"
            ],
            "fixed_version": "0.5.15",
            "advisory_count": 2,
            "oldest_advisory_days": 327
          },
          {
            "name": "oras.land/oras-go",
            "direct": false,
            "version": "v1.2.5",
            "severity": "low",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-xf85-363p-868w"
            ],
            "fixed_version": "2.6.1",
            "advisory_count": 1,
            "oldest_advisory_days": 20
          },
          {
            "name": "github.com/aws/aws-sdk-go",
            "direct": false,
            "version": "v1.55.6",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2022-0635",
              "GO-2022-0646"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": 1621
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.53.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 14
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 7
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 7
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 1,
          "high": 11,
          "unknown": 4,
          "critical": 1,
          "moderate": 5
        },
        "advisory_count": 85,
        "affected_count": 22,
        "assessed_count": 320,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 2
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/aquasecurity/trivy",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.61.1"
        },
        {
          "name": "github.com/containerd/containerd/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.2.5"
        },
        {
          "name": "github.com/containerd/platforms",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0-rc.2"
        },
        {
          "name": "github.com/distribution/reference",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.0"
        },
        {
          "name": "github.com/docker/docker",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v27.5.1+incompatible"
        },
        {
          "name": "github.com/docker/go-connections",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.5.0"
        },
        {
          "name": "github.com/google/go-containerregistry",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.3"
        },
        {
          "name": "github.com/opencontainers/go-digest",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/opencontainers/image-spec",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/samber/lo",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.49.1"
        },
        {
          "name": "github.com/sirupsen/logrus",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.9.3"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "golang.org/x/sync",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.21.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/aquasecurity/trivy",
            "direct": true,
            "version": "v0.61.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/containerd/v2",
            "direct": true,
            "version": "v2.2.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/platforms",
            "direct": true,
            "version": "v1.0.0-rc.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/distribution/reference",
            "direct": true,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker",
            "direct": true,
            "version": "v27.5.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-connections",
            "direct": true,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-containerregistry",
            "direct": true,
            "version": "v0.20.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": true,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/samber/lo",
            "direct": true,
            "version": "v1.49.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": true,
            "version": "v1.9.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": true,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "cel.dev/expr",
            "direct": false,
            "version": "v0.24.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go",
            "direct": false,
            "version": "v0.116.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth",
            "direct": false,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth/oauth2adapt",
            "direct": false,
            "version": "v0.2.7",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/compute/metadata",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/iam",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/monitoring",
            "direct": false,
            "version": "v1.21.2",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/storage",
            "direct": false,
            "version": "v1.49.0",
            "ecosystem": "go"
          },
          {
            "name": "dario.cat/mergo",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/adalogics/go-fuzz-headers",
            "direct": false,
            "version": "v0.0.0-20240806141605-e8a1dd7889d6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/agext/levenshtein",
            "direct": false,
            "version": "v1.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/agnivade/levenshtein",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecthomas/chroma",
            "direct": false,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anchore/go-struct-converter",
            "direct": false,
            "version": "v0.0.0-20221118182256-c68fdcfa2092",
            "ecosystem": "go"
          },
          {
            "name": "github.com/apparentlymart/go-cidr",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/apparentlymart/go-textseg/v15",
            "direct": false,
            "version": "v15.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aquasecurity/go-npm-version",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aquasecurity/go-pep440-version",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aquasecurity/go-version",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aquasecurity/iamgo",
            "direct": false,
            "version": "v0.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aquasecurity/jfather",
            "direct": false,
            "version": "v0.0.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aquasecurity/trivy-checks",
            "direct": false,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aquasecurity/trivy-db",
            "direct": false,
            "version": "v0.0.0-20250227071930-8bd8a9b89e2d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aquasecurity/trivy-java-db",
            "direct": false,
            "version": "v0.0.0-20240109071736-184bd7481d48",
            "ecosystem": "go"
          },
          {
            "name": "github.com/asaskevich/govalidator",
            "direct": false,
            "version": "v0.0.0-20230301143203-a9d515a09cc2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go",
            "direct": false,
            "version": "v1.55.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": false,
            "version": "v1.36.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": false,
            "version": "v1.29.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": false,
            "version": "v1.17.62",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
            "direct": false,
            "version": "v1.16.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
            "direct": false,
            "version": "v1.3.34",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
            "direct": false,
            "version": "v2.6.34",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/ini",
            "direct": false,
            "version": "v1.8.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ecr",
            "direct": false,
            "version": "v1.42.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
            "direct": false,
            "version": "v1.12.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
            "direct": false,
            "version": "v1.12.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/s3",
            "direct": false,
            "version": "v1.78.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sso",
            "direct": false,
            "version": "v1.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
            "direct": false,
            "version": "v1.29.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sts",
            "direct": false,
            "version": "v1.33.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/smithy-go",
            "direct": false,
            "version": "v1.22.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go",
            "direct": false,
            "version": "v68.0.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/azcore",
            "direct": false,
            "version": "v1.17.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/azidentity",
            "direct": false,
            "version": "v1.8.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/internal",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-ansiterm",
            "direct": false,
            "version": "v0.0.0-20230124172434-306776ec8161",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-autorest",
            "direct": false,
            "version": "v14.2.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-autorest/autorest",
            "direct": false,
            "version": "v0.11.29",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-autorest/autorest/adal",
            "direct": false,
            "version": "v0.9.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-autorest/autorest/date",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-autorest/logger",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-autorest/tracing",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azuread/microsoft-authentication-library-for-go",
            "direct": false,
            "version": "v1.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bgentry/go-netrc",
            "direct": false,
            "version": "v0.0.0-20140422174119-9fd32a8b3d3d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blang/semver/v4",
            "direct": false,
            "version": "v4.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bmatcuk/doublestar/v4",
            "direct": false,
            "version": "v4.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/burntsushi/toml",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/chai2010/gettext-go",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cheggaaa/pb/v3",
            "direct": false,
            "version": "v3.1.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cloudflare/circl",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cncf/xds/go",
            "direct": false,
            "version": "v0.0.0-20251022180443-0feb69152e9f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/cgroups/v3",
            "direct": false,
            "version": "v3.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/containerd",
            "direct": false,
            "version": "v1.7.27",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/containerd/api",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/continuity",
            "direct": false,
            "version": "v0.4.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs/pkg",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/fifo",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/log",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/plugin",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/stargz-snapshotter/estargz",
            "direct": false,
            "version": "v0.16.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/ttrpc",
            "direct": false,
            "version": "v1.2.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/typeurl/v2",
            "direct": false,
            "version": "v2.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cyclonedx/cyclonedx-go",
            "direct": false,
            "version": "v0.9.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cyphar/filepath-securejoin",
            "direct": false,
            "version": "v0.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/zstd",
            "direct": false,
            "version": "v1.5.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dlclark/regexp2",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/cli",
            "direct": false,
            "version": "v27.5.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/distribution",
            "direct": false,
            "version": "v2.8.3+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker-credential-helpers",
            "direct": false,
            "version": "v0.8.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-metrics",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-units",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emirpasic/gods",
            "direct": false,
            "version": "v1.18.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/go-control-plane/envoy",
            "direct": false,
            "version": "v1.35.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/protoc-gen-validate",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch",
            "direct": false,
            "version": "v5.9.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/exponent-io/jsonpath",
            "direct": false,
            "version": "v0.0.0-20210407135951-1de76d718b3f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": false,
            "version": "v1.18.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-errors/errors",
            "direct": false,
            "version": "v1.4.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/gcfg",
            "direct": false,
            "version": "v1.5.1-0.20230307220236-3a3c6141e376",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-billy/v5",
            "direct": false,
            "version": "v5.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-git/v5",
            "direct": false,
            "version": "v5.14.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-gorp/gorp/v3",
            "direct": false,
            "version": "v3.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ini/ini",
            "direct": false,
            "version": "v1.67.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-jose/go-jose/v4",
            "direct": false,
            "version": "v4.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-json-experiment/json",
            "direct": false,
            "version": "v0.0.0-20250211171154-1ae217ad3535",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gobwas/glob",
            "direct": false,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gogo/protobuf",
            "direct": false,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v4",
            "direct": false,
            "version": "v4.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v5",
            "direct": false,
            "version": "v5.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/groupcache",
            "direct": false,
            "version": "v0.0.0-20241129210726-2c02b8208cf8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/btree",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-github/v62",
            "direct": false,
            "version": "v62.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-querystring",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/licenseclassifier/v2",
            "direct": false,
            "version": "v2.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/s2a-go",
            "direct": false,
            "version": "v0.1.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/shlex",
            "direct": false,
            "version": "v0.0.0-20191202100458-e7afc7fbc510",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/enterprise-certificate-proxy",
            "direct": false,
            "version": "v0.3.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/gax-go/v2",
            "direct": false,
            "version": "v2.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/docker-credential-gcr",
            "direct": false,
            "version": "v2.0.5+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp",
            "direct": false,
            "version": "v1.30.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric",
            "direct": false,
            "version": "v0.48.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping",
            "direct": false,
            "version": "v0.48.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/mux",
            "direct": false,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/websocket",
            "direct": false,
            "version": "v1.5.4-0.20250319132907-e064f32e3674",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gosuri/uitable",
            "direct": false,
            "version": "v0.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gregjones/httpcache",
            "direct": false,
            "version": "v0.0.0-20190611155906-901d90724c79",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/errwrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-cleanhttp",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-getter",
            "direct": false,
            "version": "v1.7.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-multierror",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-safetemp",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-uuid",
            "direct": false,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-version",
            "direct": false,
            "version": "v1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru/v2",
            "direct": false,
            "version": "v2.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/hcl/v2",
            "direct": false,
            "version": "v2.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/huandu/xstrings",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/in-toto/in-toto-golang",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jbenet/go-context",
            "direct": false,
            "version": "v0.0.0-20150711004518-d14ea06fba99",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jmespath/go-jmespath",
            "direct": false,
            "version": "v0.4.1-0.20220621161143-b0104c826a24",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jmoiron/sqlx",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kevinburke/ssh_config",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knqyf263/go-apk-version",
            "direct": false,
            "version": "v0.0.0-20200609155635-041fdbb8563f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knqyf263/go-deb-version",
            "direct": false,
            "version": "v0.0.0-20241115132648-6f4aee6ccd23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knqyf263/go-rpm-version",
            "direct": false,
            "version": "v0.0.0-20220614171824-631e686d1075",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knqyf263/go-rpmdb",
            "direct": false,
            "version": "v0.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kylelemons/godebug",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lann/builder",
            "direct": false,
            "version": "v0.0.0-20180802200727-47ae307949d0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lann/ps",
            "direct": false,
            "version": "v0.0.0-20150810152359-62de8c46ede0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/liamg/memoryfs",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lib/pq",
            "direct": false,
            "version": "v1.10.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/liggitt/tabwriter",
            "direct": false,
            "version": "v0.0.0-20181228230101-89fcab3d43de",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lunixbochs/struc",
            "direct": false,
            "version": "v0.0.0-20200707160740-784aaebc1d40",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.7.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/makenowjust/heredoc",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masahiro331/go-disk",
            "direct": false,
            "version": "v0.0.0-20240625071113-56c933208fee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masahiro331/go-ext4-filesystem",
            "direct": false,
            "version": "v0.0.0-20240620024024-ca14e6327bbd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masahiro331/go-mvn-version",
            "direct": false,
            "version": "v0.0.0-20250131095131-f4974fa13b8a",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masahiro331/go-xfs-filesystem",
            "direct": false,
            "version": "v0.0.0-20231205045356-1b22259a6c44",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/goutils",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/sprig/v3",
            "direct": false,
            "version": "v3.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/squirrel",
            "direct": false,
            "version": "v1.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-shellwords",
            "direct": false,
            "version": "v1.0.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/hcsshim",
            "direct": false,
            "version": "v0.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/copystructure",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-homedir",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-testing-interface",
            "direct": false,
            "version": "v1.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-wordwrap",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/hashstructure/v2",
            "direct": false,
            "version": "v2.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/mapstructure",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/reflectwalk",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/buildkit",
            "direct": false,
            "version": "v0.18.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/docker-image-spec",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/locker",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/spdystream",
            "direct": false,
            "version": "v0.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/mountinfo",
            "direct": false,
            "version": "v0.7.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/sequential",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/signal",
            "direct": false,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/user",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/userns",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/term",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/monochromegane/go-gitignore",
            "direct": false,
            "version": "v0.0.0-20200626010858-205db1a8cc00",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mxk/go-flowrate",
            "direct": false,
            "version": "v0.0.0-20140419014527-cca7078d478f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oklog/ulid/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/open-policy-agent/opa",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/runtime-spec",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/selinux",
            "direct": false,
            "version": "v1.13.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/owenrumney/squealer",
            "direct": false,
            "version": "v1.2.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/package-url/packageurl-go",
            "direct": false,
            "version": "v0.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/peterbourgon/diskv",
            "direct": false,
            "version": "v2.0.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pjbgf/sha1cd",
            "direct": false,
            "version": "v0.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/browser",
            "direct": false,
            "version": "v0.0.0-20240102092130-5ac0b6a4141c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/planetscale/vtprotobuf",
            "direct": false,
            "version": "v0.6.1-0.20240319094008-0393e58bdf10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.66.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.16.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/protonmail/go-crypto",
            "direct": false,
            "version": "v1.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rcrowley/go-metrics",
            "direct": false,
            "version": "v0.0.0-20201227073835-cf1acfcdf475",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.4.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rubenv/sql-migrate",
            "direct": false,
            "version": "v1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/russross/blackfriday/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rust-secure-code/go-rustaudit",
            "direct": false,
            "version": "v0.0.0-20250226111315-e20ec32e963c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/samber/oops",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sassoftware/go-rpmutils",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/secure-systems-lab/go-securesystemslib",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sergi/go-diff",
            "direct": false,
            "version": "v1.3.2-0.20230802210424-5b0b94c5c0d3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shibumi/go-pathspec",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shopspring/decimal",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/skeema/knownhosts",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spdx/tools-golang",
            "direct": false,
            "version": "v0.5.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": false,
            "version": "v1.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spiffe/go-spiffe/v2",
            "direct": false,
            "version": "v2.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/objx",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tchap/go-patricia/v2",
            "direct": false,
            "version": "v2.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tonistiigi/go-csvvalue",
            "direct": false,
            "version": "v0.0.0-20240710180619-ddb21b71c0b4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ulikunitz/xz",
            "direct": false,
            "version": "v0.5.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vbatts/tar-split",
            "direct": false,
            "version": "v0.11.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vividcortex/ewma",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vmihailenco/msgpack/v5",
            "direct": false,
            "version": "v5.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vmihailenco/tagparser/v2",
            "direct": false,
            "version": "v2.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xanzy/ssh-agent",
            "direct": false,
            "version": "v0.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonpointer",
            "direct": false,
            "version": "v0.0.0-20190905194746-02993c407bfb",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonreference",
            "direct": false,
            "version": "v0.0.0-20180127040603-bd5ef7bd5415",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonschema",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xi2/xz",
            "direct": false,
            "version": "v0.0.0-20171230120015-48954b6210f8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xlab/treeprint",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yashtewari/glob-intersection",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zclconf/go-cty",
            "direct": false,
            "version": "v1.16.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zclconf/go-cty-yaml",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/bbolt",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "go.opencensus.io",
            "direct": false,
            "version": "v0.24.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/detectors/gcp",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
            "direct": false,
            "version": "v0.60.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.60.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/metric",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": false,
            "version": "v1.27.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.2",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.53.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.32.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.44.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.38.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/xerrors",
            "direct": false,
            "version": "v0.0.0-20240903120638-7835f813f4da",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/api",
            "direct": false,
            "version": "v0.218.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto",
            "direct": false,
            "version": "v0.0.0-20241118233622-e639e219e697",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20251029180050-ab9386a59fda",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20251029180050-ab9386a59fda",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.78.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.10",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.12.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/warnings.v0",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "gotest.tools/v3",
            "direct": false,
            "version": "v3.5.0",
            "ecosystem": "go"
          },
          {
            "name": "helm.sh/helm/v3",
            "direct": false,
            "version": "v3.17.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": false,
            "version": "v0.34.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiextensions-apiserver",
            "direct": false,
            "version": "v0.32.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": false,
            "version": "v0.34.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiserver",
            "direct": false,
            "version": "v0.32.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/cli-runtime",
            "direct": false,
            "version": "v0.32.3",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": false,
            "version": "v0.34.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/component-base",
            "direct": false,
            "version": "v0.32.3",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.130.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": false,
            "version": "v0.0.0-20250710124328-f3f2b991d03b",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kubectl",
            "direct": false,
            "version": "v0.32.3",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": false,
            "version": "v0.0.0-20250604170112-4c0f3b243397",
            "ecosystem": "go"
          },
          {
            "name": "mvdan.cc/sh/v3",
            "direct": false,
            "version": "v3.11.0",
            "ecosystem": "go"
          },
          {
            "name": "oras.land/oras-go",
            "direct": false,
            "version": "v1.2.5",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20241014173422-cfa47c3a1cc8",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/kustomize/api",
            "direct": false,
            "version": "v0.18.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/kustomize/kyaml",
            "direct": false,
            "version": "v0.18.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.3.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 320,
        "direct_count": 13,
        "indirect_count": 307
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 7,
        "merged_prs": 39,
        "open_issues": 1,
        "closed_ratio": 0,
        "closed_issues": 0,
        "closed_unmerged_prs": 20
      },
      "bus_factor": 2,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "patrickpichler",
          "commits": 17,
          "avatar_url": "https://avatars.githubusercontent.com/u/13838138?v=4"
        },
        {
          "type": "User",
          "login": "damejeras",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/13080333?v=4"
        },
        {
          "type": "User",
          "login": "domust",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/54954739?v=4"
        },
        {
          "type": "User",
          "login": "anjmao",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/3028012?v=4"
        },
        {
          "type": "User",
          "login": "arnasnn",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/13738023?v=4"
        },
        {
          "type": "User",
          "login": "zdarovich",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/14982360?v=4"
        },
        {
          "type": "User",
          "login": "matas-cast",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/91058680?v=4"
        },
        {
          "type": "User",
          "login": "testwill",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/8717479?v=4"
        },
        {
          "type": "User",
          "login": "krystiancastai",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/175596354?v=4"
        }
      ],
      "contributors_sampled": 9,
      "top_contributor_share": 0.386
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "default.yaml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 1,
            "reason": "4 out of 22 merged PRs checked by a CI test -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 4 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 10,
            "reason": "all dependencies are pinned",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "53 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "9b4590d4af9d68d75612f9e983e19292b0eb50de",
        "ran_at": "2026-07-22T13:39:19Z",
        "aggregate_score": 4.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-17T20:34:30Z",
      "oldest_open_prs": [
        {
          "number": 50,
          "created_at": "2025-04-21T01:53:24Z",
          "last_comment_at": "2025-12-15T14:37:39Z",
          "last_comment_author": "renovate"
        },
        {
          "number": 52,
          "created_at": "2025-05-05T01:38:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 54,
          "created_at": "2025-05-12T03:35:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 58,
          "created_at": "2025-08-25T00:57:42Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 64,
          "created_at": "2026-05-11T12:57:39Z",
          "last_comment_at": "2026-05-11T12:57:42Z",
          "last_comment_author": "kimchi-review"
        },
        {
          "number": 65,
          "created_at": "2026-05-20T11:11:03Z",
          "last_comment_at": "2026-05-20T11:11:11Z",
          "last_comment_author": "kimchi-review"
        },
        {
          "number": 66,
          "created_at": "2026-06-22T00:32:01Z",
          "last_comment_at": "2026-06-22T00:32:07Z",
          "last_comment_author": "kimchi-review"
        }
      ],
      "last_merged_pr_at": "2026-07-17T14:04:24Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 23,
          "created_at": "2024-10-22T09:53:34Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/castai/image-analyzer",
    "host": "github.com",
    "name": "image-analyzer",
    "owner": "castai"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 53,
      "inputs": {
        "security": 48,
        "vitality": 64,
        "community": 30,
        "governance": 66,
        "engineering": 50
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 64,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "at_risk",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 46,
            "inputs": {
              "commits_last_year": 6,
              "human_commit_share": 0.731,
              "days_since_last_push": 1,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "6 commits in the last year",
                "points": 7.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 92,
            "inputs": {
              "releases_count": 20,
              "latest_release_tag": "v0.10.1",
              "releases_from_tags": false,
              "days_since_latest_release": 4,
              "mean_days_between_releases": 68.8
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "20 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~68.8 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 68.8
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 4,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 4 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 30,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 13,
            "inputs": {
              "forks": 0,
              "stars": 7,
              "watchers": 2,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "7 stars",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "2 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 66,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 9,
              "top_contributor_share": 0.386
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 39% of commits",
                "points": 13.8,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 39
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "9 contributors",
                "points": 12.2,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "merged_prs": 39,
              "open_issues": 1,
              "closed_issues": 0,
              "issue_closed_ratio": 0,
              "closed_unmerged_prs": 20
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "0% of issues closed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 0
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "39/59 decided PRs merged",
                "points": 25.3,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 39,
                      "decided": 59
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "followers": 251,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "castai",
              "public_repos": 109,
              "account_age_days": 2821
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "251 followers of castai",
                "points": 17.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 251,
                      "login": "castai"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "109 public repos, account ~7 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 109
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 7
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/castai/image-analyzer"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 4
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 4 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "22 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 22
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 50,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "4 out of 22 merged PRs checked by a CI test -- score normalized to 1",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 48,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 46,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 4.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "4 out of 22 merged PRs checked by a CI test -- score normalized to 1",
                "points": 0.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "53 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 320 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 320
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 55,
            "inputs": {
              "source": "osv",
              "advisories": 85,
              "affected_packages": 22,
              "assessed_packages": 320,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, high 11, moderate 5, low 1, unknown 4",
              "direct_affected_packages": 2
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "2 affected: github.com/aquasecurity/trivy v0.61.1 (high 7.5), github.com/docker/docker v27.5.1+incompatible (high 8.8)",
                "points": 8.7,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 2,
                      "packages": "github.com/aquasecurity/trivy v0.61.1 (high 7.5), github.com/docker/docker v27.5.1+incompatible (high 8.8)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 357 days ago",
                "points": 32.8,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 357
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 320,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 6
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 61,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.469,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "23 of 49 human commits state their intent (structured subject or explanatory body)",
                "points": 25,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 23,
                      "sampled": 49
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.269
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 67",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 67
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "18 of the last 67 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 18,
                      "sampled": 67
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 14561,
              "source_files_sampled": 18,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/18 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 18,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-22T13:39:40.258160Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/castai/image-analyzer.svg",
  "full_name": "castai/image-analyzer",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Registros relacionados

Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con castai/image-analyzer. Leer en paralelo →

94wandb/wandbThe AI developer platform. Use Weights & Biases to train and fine-tune models, and manage models from experimentation to production.Excelente93apache/airflowApache Airflow - A platform to programmatically author, schedule, and monitor workflowsExcelente92envoyproxy/envoyCloud-native high-performance edge/middle/service proxyExcelente91Elastic/beats:tropical_fish: Beats - Lightweight shippers for Elasticsearch & LogstashExcelente91prometheus/prometheusThe Prometheus monitoring system and time series database.Excelente91rook/rookStorage Orchestration for KubernetesExcelente

Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.

Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.26.0 — metodología completa · wiki de métricas.

Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — Go.