Registro público
Informe de salud del softwareesquema 0.30.0 · métricas 2.3.1 · 2026-08-04 00:56 UTC

eth-cscs / manta

Another CLI for Alps

Rust · ShellBSD-3-Clause★ 23 estrellas⑂ 4 forksdesde mar 2023Ver en GitHub ↗
TipoBibliotecaHerramienta de línea de comandosServicio de redInterfaz de terminalcómo se determina
#alps#cli#csm#productivity#cscs

eth-cscs/manta tiene un índice de salud de 78 sobre 100, lo que lo sitúa en la banda Bueno. Su puntuación más alta es Vitality (88/100) y la más baja, Community & Adoption (42/100). Se actualizó por última vez hace 15 días. Una sola persona concentra la mayor parte del trabajo reciente.

78
global / 100
Bueno

Índice de salud del software

Las métricas se agrupan en categorías ponderadas sobre una escala estandarizada de 1 a 100. El resultado global parte de su media ponderada, calibrada contra la distribución del registro público para que las bandas tengan significado percentil; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe un límite «En riesgo» de 34.

78
Excepcional93-100El nivel más alto del registro (≈ el 5% superior); cumple prácticamente todos los criterios evaluados
Excelente80-92Sólido en todos los frentes; carencias menores
Bueno65-79Saludable; carencias limitadas y manejables
Moderado50-64Aceptable con carencias notables; se recomienda revisión
Débil35-49Debilidades sustanciales en varias áreas
En riesgo20-34Debilidades significativas; su adopción exige cautela
Crítico1-19Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
VitalidadComunidad yAdopciónSostenibilidady GobernanzaCalidad deIngenieríaSeguridadPreparaciónpara IA

Perfil de puntuación

Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.

El resultado global ponderado 67 se calibra a 78 en la escala publicada del índice (calibración del registro 2026-08-02).

Titularidad

Swiss National Supercomputing Center (CSCS)Organización
181 seguidores142 repositorios públicosdesde oct 2013

Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.

Ecosistemas de paquetes

RegistroPaqueteVersiónDescargas / mesVersionesÚltima publicaciónEtiquetas
crates.iomanta-cli1.71.1417127hace 22 díascliproductivity
crates.iomanta-server2.0.0-beta.62112hace 22 días—
crates.iomanta-shared2.0.0-beta.6242057hace 22 días—

Métricas por categoría

Vitalidad

¿Está vivo el proyecto: se escribe código y se publican versiones?

88Excelente · 21% del índice global

Actividad de desarrollo

87Excelente
Cómo se puntúa
28.8/36Recencia de push — último push hace 15 días
29.8/36Cadencia de commits — 43/52 semanas con commits
18/18Volumen de commits — 964 commits en el último año
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Datos de entrada utilizados
commits_last_year964
human_commit_share0,89
days_since_last_push15
active_weeks_last_year43

Disciplina de publicación

90Excelente
Cómo se puntúa
27/27Publica versiones — 100 versiones publicadas
36/36Recencia de las versiones — última versión hace 22 días
27/27Cadencia de publicación — una versión cada ~2,3 días
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Datos de entrada utilizados
releases_count100
latest_release_tagv2.0.0-beta.62
releases_from_tagsno
days_since_latest_release22
mean_days_between_releases2,3

Comunidad y Adopción

¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?

42Débil · 17% del índice global

Popularidad y adopción

30En riesgo
Cómo se puntúa
21.8/60Estrellas — 23 estrellas
4/25Forks — 4 forks
4.7/15Observadores — 8 observadores
Datos de entrada utilizados
forks4
stars23
watchers8
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Salud de la comunidad

50Moderado
Cómo se puntúa
22.5/22.5README
22.5/22.5Licencia — licencia reconocida (BSD-3-Clause)
0/18Guía CONTRIBUTING
0/13.5Código de conducta
0/7.2Plantilla de issues
0/6.3Plantilla de PR
Datos de entrada utilizados
has_readmesí
has_licensesí
readme_badges0
has_contributingno
has_issue_templateno
has_code_of_conductno
readme_badge_services—
has_pull_request_templateno

Adopción en el ecosistema (descargas)

49Débil
Cómo se puntúa
39.1/80Descargas mensuales — 848 descargas/mes en crates
0/20Dependientes en el registro — no lo informa este ecosistema
Datos de entrada utilizados
packagesmanta-cli, manta-server, manta-shared
dependents—
ecosystemscrates
total_downloads5424
monthly_downloads848
Excluidos de la puntuación (sin datos o no aplicable): Dependientes en el registro. Los pesos restantes se han renormalizado.

Sostenibilidad y Gobernanza

¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?

66Bueno · 23% del índice global

Resiliencia de mantenedores (factor bus)

31En riesgo
Cómo se puntúa
9/54Factor bus — la mitad de los commits recae en 1 contribuyente(s)
7.7/22.5Distribución de commits — el principal contribuyente firma el 66% de los commits
8.1/13.5Amplitud de contribuyentes — 6 contribuyentes
6/10OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Datos de entrada utilizados
bus_factor1
contributors_sampled6
top_contributor_share0,659

Capacidad de respuesta a issues y PR

77Bueno
Cómo se puntúa
38.6/42Resolución de issues — 92% de issues cerradas
28.6/30Aceptación de PR — 20/21 PR decididos fusionados
0/13Newcomer PR acceptance — ningún PR de un contribuyente primerizo decidido en 30 d
0/15OpenSSF Scorecard: Code-Review — Found 1/30 approved changesets -- score normalized to 0
Datos de entrada utilizados
merged_prs20
open_issues7
closed_issues81
prs_merged_7d0
prs_decided_7d0
prs_merged_30d1
prs_decided_30d1
issue_closed_ratio0,92
closed_unmerged_prs1
first_time_authors_30d0
first_time_prs_merged_30d0
first_time_prs_decided_30d0
Excluidos de la puntuación (sin datos o no aplicable): newcomer_pr_acceptance. Los pesos restantes se han renormalizado.

Propiedad y custodia

71Bueno
Cómo se puntúa
30/30Respaldo de la propiedad — propiedad de una organización
0/20Dominio verificado
16.2/25Alcance del propietario — 181 seguidores de eth-cscs
25/25Trayectoria — 142 repos públicos, cuenta de ~12 años
Datos de entrada utilizados
followers181
owner_typeOrganization
is_verified—
owner_logineth-cscs
public_repos142
account_age_days4668

Mantenimiento de paquetes

100Excepcional
Cómo se puntúa
25/25Publicado y resoluble — 3 paquete(s) en crates
35/35Recencia de publicación — última publicación hace 22 días
20/20Historial de versiones — 127 versiones en el registro
20/20No obsoleto — activo, ni obsoleto ni retirado
Datos de entrada utilizados
packagesmanta-cli, manta-server, manta-shared
ecosystemscrates
any_deprecatedno
min_days_since_publish22

Calidad de Ingeniería

¿Existen unas prácticas mínimas de ingeniería y documentación?

81Excelente · 19% del índice global

Prácticas de ingeniería

68Bueno
Cómo se puntúa
24/24Flujos de trabajo de CI — 5 flujo(s) de trabajo
24/24Pruebas presentes
0/16Configuración de linter
0/9.6Hooks de pre-commit
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 3 out of 3 merged PRs checked by a CI test -- score normalized to 10
Datos de entrada utilizados
has_cisí
has_testssí
has_editorconfigno
has_linter_configno
has_precommit_configno

Documentación

100Excepcional
Cómo se puntúa
30/30README
25/25Directorio de documentación
15/15Sitio de documentación / página del proyecto — https://eth-cscs.github.io/manta/
10/10Descripción del repositorio
10/10Topics — 5 topics
10/10Wiki
Datos de entrada utilizados
topicsalps, cli, csm, productivity, cscs
has_wikisí
homepagehttps://eth-cscs.github.io/manta/
has_readmesí
has_docs_dirsí
has_descriptionsí

Seguridad

¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?

47Débil · 16% del índice global

Postura de seguridad

47Débil
Cómo se puntúa
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5CI-Tests — 3 out of 3 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 1/30 approved changesets -- score normalized to 0
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Licencia — license file detected
7.5/7.5Maintained — 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Datos de entrada utilizados
sourceopenssf_scorecard
checks_evaluated18
scorecard_versionv5.5.0
checks_inconclusive0
scorecard_aggregate4,7

Preparación para IA

¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Tiene un peso deliberadamente pequeño (4%): las herramientas para agentes son una señal real de mantenimiento, pero un repositorio sin ninguna puede alcanzar igualmente 100/100.

79Bueno · 4% del índice global

Contexto y guía para agentes

85Excelente
Cómo se puntúa
45/45Instrucciones para agentes — CLAUDE.md
0/15Documentación legible por máquinas (llms.txt)
40/40Historial de commits legible — 88 de 89 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo)
Datos de entrada utilizados
has_llms_txtno
legible_history_share0,989
agent_instruction_filesCLAUDE.md
agent_instruction_max_bytes2147

Bucle de verificación (compilación / pruebas / verificación de tipos)

66Bueno
Cómo se puntúa
12.6/18Arranque con un solo comando — Cargo.toml, crates/manta-cli/Cargo.toml, crates/manta-server/Cargo.toml (convención del toolchain, sin ejecutor de tareas)
22/22Pruebas automatizadas
0/11Configuración de lint / formato
11/11Verificación estática de tipos — Rust (tipado estático)
10/10Entorno reproducible — Dockerfile
10/10Práctica demostrada con agentes — 6 de los últimos 100 commits con autoría o crédito de agente
0/8Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Datos de entrada utilizados
has_nixno
has_testssí
lockfiles—
has_dockerfilesí
typed_languagesí
bootstrap_files—
has_devcontainerno
has_linter_configno
typecheck_configs—
agent_commit_share0,06
toolchain_manifestsCargo.toml, crates/manta-cli/Cargo.toml, crates/manta-server/Cargo.toml, crates/manta-shared/Cargo.toml
dependency_bot_commit_share0

Legibilidad del código para modelos

100Excepcional
Cómo se puntúa
45/45Código verificable por tipos — Rust (tipado estático)
55/55Tamaños de archivo manejables — 0/228 archivos fuente de más de 60 KB
Datos de entrada utilizados
primary_languageRust
largest_source_bytes40.182
source_files_sampled228
oversized_source_files0

Interfaces legibles por máquina

80Excelente
Cómo se puntúa
40/40Esquema de API (OpenAPI/GraphQL/proto) — crates/manta-cli/openapi.json
0/20Servidor MCP
40/40Ejemplos ejecutables — examples
Datos de entrada utilizados
example_dirsexamples
has_mcp_signalno
api_schema_filescrates/manta-cli/openapi.json

Datos clave

23estrellas de GitHub
6contribuidores
964commits en los últimos 12 meses
15días desde el último push
100versiones publicadas
1factor bus
7issues abiertas
crates.ioecosistemas de paquetes

Advertencias de recopilación de datos

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • No resolved dependencies carried a version and a supported ecosystem

Más detalle

Historial de estrellas y forks 0 ★ / 4 ⇿
0Estrellas
4Forks

Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.

1223344412023-072024-022024-10

Cada punto abarca 2 días.

OpenSSF Scorecard 4.7 / 10
4.7agregado

Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-08-04 00:56 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
10CI-Tests3 out of 3 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 1/30 approved changesets -- score normalized to 0
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
10Security-Policysecurity policy file detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Dependencias directas 70
RegistroPaqueteRestricción de versiónManifiesto
crates.iomanta-shared—crates/manta-cli/Cargo.toml
crates.ionodeset0.5.0crates/manta-cli/Cargo.toml
crates.iochrono0.4.41crates/manta-cli/Cargo.toml
crates.ioanyhow1.0.44crates/manta-cli/Cargo.toml
crates.ioreqwest0.13.4crates/manta-cli/Cargo.toml
crates.ioserde1.0.219crates/manta-cli/Cargo.toml
crates.ioserde_json1.0.140crates/manta-cli/Cargo.toml
crates.ioserde_yaml0.9.34crates/manta-cli/Cargo.toml
crates.iotracing0.1crates/manta-cli/Cargo.toml
crates.iotokio1.45crates/manta-cli/Cargo.toml
crates.iotokio-util0.7.4crates/manta-cli/Cargo.toml
crates.iominijinja—crates/manta-cli/Cargo.toml
crates.iouuid1.16.0crates/manta-cli/Cargo.toml
crates.iogit20.21crates/manta-cli/Cargo.toml
crates.iodialoguer0.12.0crates/manta-cli/Cargo.toml
crates.iofutures0.3.31crates/manta-cli/Cargo.toml
crates.iotoml_edit0.22.27crates/manta-cli/Cargo.toml
crates.ioclap4.5.60crates/manta-cli/Cargo.toml
crates.ioclap_complete4.5.66crates/manta-cli/Cargo.toml
crates.ioclap_mangen0.3.0crates/manta-cli/Cargo.toml
crates.iocomfy-table7.2.2crates/manta-cli/Cargo.toml
crates.iocrossterm0.29.0crates/manta-cli/Cargo.toml
crates.ioexecute0.2.13crates/manta-cli/Cargo.toml
crates.iois_executable1.0.1crates/manta-cli/Cargo.toml
crates.ioconfig0.15.19crates/manta-cli/Cargo.toml
crates.iotokio-tungstenite0.29crates/manta-cli/Cargo.toml
crates.ioself_update0.44crates/manta-cli/Cargo.toml
crates.ioxz20.1crates/manta-cli/Cargo.toml
crates.iotar0.4crates/manta-cli/Cargo.toml
crates.iosemver1.0crates/manta-cli/Cargo.toml
crates.ioprogenitor-client0.14crates/manta-cli/Cargo.toml
crates.iomanta-shared—crates/manta-server/Cargo.toml
crates.iomanta-backend-dispatcher—crates/manta-server/Cargo.toml
crates.iocsm-rs—crates/manta-server/Cargo.toml
crates.ioochami-rs—crates/manta-server/Cargo.toml
crates.ioaxum0.8crates/manta-server/Cargo.toml
crates.ioaxum-server0.8crates/manta-server/Cargo.toml
crates.iotower-http0.6crates/manta-server/Cargo.toml
crates.iotokio—crates/manta-server/Cargo.toml
crates.iotokio-util—crates/manta-server/Cargo.toml
crates.iofutures—crates/manta-server/Cargo.toml
crates.ioutoipa—crates/manta-server/Cargo.toml
crates.ioutoipa-swagger-ui9crates/manta-server/Cargo.toml
crates.iorustls0.23crates/manta-server/Cargo.toml
crates.iobase64—crates/manta-server/Cargo.toml
crates.iochrono—crates/manta-server/Cargo.toml
crates.iordkafka—crates/manta-server/Cargo.toml
crates.iocomfy-table7.2.2crates/manta-server/Cargo.toml
crates.ioglobset0.4crates/manta-server/Cargo.toml
crates.iohostlist-parser0.1.6crates/manta-server/Cargo.toml
crates.ioregex—crates/manta-server/Cargo.toml
crates.ioreqwest—crates/manta-server/Cargo.toml
crates.ioserde—crates/manta-server/Cargo.toml
crates.ioserde_json—crates/manta-server/Cargo.toml
crates.ioserde_yaml—crates/manta-server/Cargo.toml
crates.iotracing—crates/manta-server/Cargo.toml
crates.iomanta-backend-dispatcher—crates/manta-shared/Cargo.toml
crates.iobase64—crates/manta-shared/Cargo.toml
crates.ioserde—crates/manta-shared/Cargo.toml
crates.ioserde_json—crates/manta-shared/Cargo.toml
crates.ioserde_yaml—crates/manta-shared/Cargo.toml
crates.iochrono—crates/manta-shared/Cargo.toml
crates.ioutoipa—crates/manta-shared/Cargo.toml
crates.iotracing—crates/manta-shared/Cargo.toml
crates.iotracing-subscriber—crates/manta-shared/Cargo.toml
crates.ioconfig—crates/manta-shared/Cargo.toml
crates.iodirectories—crates/manta-shared/Cargo.toml
crates.iotoml_edit—crates/manta-shared/Cargo.toml
crates.ioreqwest—crates/manta-shared/Cargo.toml
crates.iothiserror—crates/manta-shared/Cargo.toml
Todas las dependencias 47

Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 36 paquetes directos y 11 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.

RegistroPaqueteVersiónRelación
crates.ioanyhow—directa
crates.ioaxum—directa
crates.ioaxum-server—directa
crates.iobase64—directa
crates.iochrono—directa
crates.ioclap—directa
crates.ioclap_complete—directa
crates.ioclap_mangen—directa
crates.iocomfy-table—directa
crates.ioconfig—directa
crates.iocrossterm—directa
crates.iodialoguer—directa
crates.ioexecute—directa
crates.iofutures—directa
crates.iogit2—directa
crates.iohostlist-parser—directa
crates.iois_executable—directa
crates.ionodeset—directa
crates.ioprogenitor-client—directa
crates.ioreqwest—directa
crates.iorustls—directa
crates.ioself_update—directa
crates.iosemver—directa
crates.ioserde—directa
crates.ioserde_json—directa
crates.ioserde_yaml—directa
crates.iotar—directa
crates.iotokio—directa
crates.iotokio-tungstenite—directa
crates.iotokio-util—directa
crates.iotoml_edit—directa
crates.iotower-http—directa
crates.iotracing—directa
crates.ioutoipa-swagger-ui—directa
crates.iouuid—directa
crates.ioxz2—directa
crates.ioassert_cmd—indirecta
crates.iohttp-body-util—indirecta
crates.ioopenapiv3—indirecta
crates.iopredicates—indirecta
crates.ioprettyplease—indirecta
crates.ioprogenitor—indirecta
crates.iosyn—indirecta
crates.iotempfile—indirecta
crates.iotoml—indirecta
crates.iotower—indirecta
crates.iowiremock—indirecta
Avisos de dependencias sin evaluar

El cotejo de avisos no pudo ejecutarse para este informe: No resolved dependencies carried a version and a supported ecosystem

Informe JSON sin procesar legible por máquina
{
  "data": {
    "repo": {
      "topics": [
        "alps",
        "cli",
        "csm",
        "productivity",
        "cscs"
      ],
      "is_fork": false,
      "size_kb": 8012,
      "has_wiki": true,
      "homepage": "https://eth-cscs.github.io/manta/",
      "languages": {
        "Roff": 51669,
        "Rust": 1477296,
        "Shell": 373137,
        "Elvish": 96682,
        "Dockerfile": 5726
      },
      "pushed_at": "2026-07-19T13:29:08Z",
      "created_at": "2023-03-27T13:31:03Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-17T12:03:56Z",
      "description": "Another CLI for Alps",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "BSD-3-Clause",
      "default_branch": "main",
      "license_spdx_raw": "BSD-3-Clause",
      "primary_language": "Rust",
      "significant_languages": [
        "Rust",
        "Shell"
      ]
    },
    "owner": {
      "blog": "https://www.cscs.ch/",
      "name": "Swiss National Supercomputing Center (CSCS)",
      "type": "Organization",
      "login": "eth-cscs",
      "company": null,
      "location": "Lugano, Switzerland",
      "followers": 181,
      "avatar_url": "https://avatars.githubusercontent.com/u/5744410?v=4",
      "created_at": "2013-10-22T07:14:44Z",
      "is_verified": null,
      "public_repos": 142,
      "account_age_days": 4668
    },
    "license": {
      "state": "standard",
      "spdx_id": "BSD-3-Clause",
      "raw_spdx": "BSD-3-Clause",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.0.0-beta.62",
          "kind": "prerelease",
          "published_at": "2026-07-12T19:59:26Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.62",
          "kind": "other",
          "published_at": "2026-07-12T19:38:36Z"
        },
        {
          "tag": "v2.0.0-beta.61",
          "kind": "prerelease",
          "published_at": "2026-06-28T09:14:39Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.61",
          "kind": "other",
          "published_at": "2026-06-28T08:47:42Z"
        },
        {
          "tag": "v2.0.0-beta.60",
          "kind": "prerelease",
          "published_at": "2026-06-25T12:37:23Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.60",
          "kind": "other",
          "published_at": "2026-06-25T12:10:21Z"
        },
        {
          "tag": "v2.0.0-beta.59",
          "kind": "prerelease",
          "published_at": "2026-06-22T10:13:56Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.59",
          "kind": "other",
          "published_at": "2026-06-22T09:51:54Z"
        },
        {
          "tag": "v2.0.0-beta.57",
          "kind": "prerelease",
          "published_at": "2026-06-22T10:00:32Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.57",
          "kind": "other",
          "published_at": "2026-06-22T09:37:52Z"
        },
        {
          "tag": "v2.0.0-beta.56",
          "kind": "prerelease",
          "published_at": "2026-06-16T01:23:38Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.56",
          "kind": "other",
          "published_at": "2026-06-16T01:05:20Z"
        },
        {
          "tag": "v1.71.1",
          "kind": "patch",
          "published_at": "2026-06-15T09:39:16Z"
        },
        {
          "tag": "v2.0.0-beta.55",
          "kind": "prerelease",
          "published_at": "2026-06-14T20:37:29Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.55",
          "kind": "other",
          "published_at": "2026-06-14T20:14:27Z"
        },
        {
          "tag": "v2.0.0-beta.54",
          "kind": "prerelease",
          "published_at": "2026-06-14T00:35:03Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.54",
          "kind": "other",
          "published_at": "2026-06-14T00:10:49Z"
        },
        {
          "tag": "v2.0.0-beta.53",
          "kind": "prerelease",
          "published_at": "2026-06-09T07:28:22Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.53",
          "kind": "other",
          "published_at": "2026-06-09T07:15:56Z"
        },
        {
          "tag": "v2.0.0-beta.50",
          "kind": "prerelease",
          "published_at": "2026-06-07T02:45:02Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.50",
          "kind": "other",
          "published_at": "2026-06-07T02:28:23Z"
        },
        {
          "tag": "v2.0.0-beta.48",
          "kind": "prerelease",
          "published_at": "2026-06-06T21:43:25Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.48",
          "kind": "other",
          "published_at": "2026-06-06T21:27:01Z"
        },
        {
          "tag": "v2.0.0-beta.46",
          "kind": "prerelease",
          "published_at": "2026-06-06T14:12:24Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.46",
          "kind": "other",
          "published_at": "2026-06-06T13:53:58Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.44",
          "kind": "other",
          "published_at": "2026-06-06T13:41:42Z"
        },
        {
          "tag": "v2.0.0-beta.43",
          "kind": "prerelease",
          "published_at": "2026-06-05T22:34:58Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.43",
          "kind": "other",
          "published_at": "2026-06-05T22:15:43Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.42",
          "kind": "other",
          "published_at": "2026-06-05T22:11:21Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.41",
          "kind": "other",
          "published_at": "2026-06-05T22:04:17Z"
        },
        {
          "tag": "v2.0.0-beta.39",
          "kind": "prerelease",
          "published_at": "2026-06-05T21:44:27Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.39",
          "kind": "other",
          "published_at": "2026-06-05T21:25:31Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.32",
          "kind": "other",
          "published_at": "2026-06-04T18:27:45Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.32",
          "kind": "other",
          "published_at": "2026-06-04T18:11:58Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.32",
          "kind": "other",
          "published_at": "2026-06-04T18:12:06Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.30",
          "kind": "other",
          "published_at": "2026-06-04T17:58:27Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.30",
          "kind": "other",
          "published_at": "2026-06-04T17:34:50Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.30",
          "kind": "other",
          "published_at": "2026-06-04T17:34:44Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.27",
          "kind": "other",
          "published_at": "2026-06-04T15:25:43Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.27",
          "kind": "other",
          "published_at": "2026-06-04T15:11:13Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.27",
          "kind": "other",
          "published_at": "2026-06-04T15:11:05Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.26",
          "kind": "other",
          "published_at": "2026-06-04T14:55:51Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.26",
          "kind": "other",
          "published_at": "2026-06-04T14:39:00Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.26",
          "kind": "other",
          "published_at": "2026-06-04T14:39:00Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.25",
          "kind": "other",
          "published_at": "2026-06-04T14:25:16Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.25",
          "kind": "other",
          "published_at": "2026-06-04T14:11:27Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.25",
          "kind": "other",
          "published_at": "2026-06-04T14:10:48Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.24",
          "kind": "other",
          "published_at": "2026-06-04T13:56:17Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.24",
          "kind": "other",
          "published_at": "2026-06-04T13:39:43Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.24",
          "kind": "other",
          "published_at": "2026-06-04T13:39:42Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.23",
          "kind": "other",
          "published_at": "2026-06-04T10:13:16Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.23",
          "kind": "other",
          "published_at": "2026-06-04T09:52:40Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.23",
          "kind": "other",
          "published_at": "2026-06-04T09:52:33Z"
        },
        {
          "tag": "v1.71.0",
          "kind": "minor",
          "published_at": "2026-06-03T00:15:57Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.20",
          "kind": "other",
          "published_at": "2026-06-02T23:27:50Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.20",
          "kind": "other",
          "published_at": "2026-06-02T23:04:47Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.20",
          "kind": "other",
          "published_at": "2026-06-02T23:04:46Z"
        },
        {
          "tag": "v1.70.0",
          "kind": "minor",
          "published_at": "2026-06-02T20:10:39Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.19",
          "kind": "other",
          "published_at": "2026-06-01T12:48:47Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.19",
          "kind": "other",
          "published_at": "2026-06-01T12:25:30Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.19",
          "kind": "other",
          "published_at": "2026-06-01T12:25:23Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.17",
          "kind": "other",
          "published_at": "2026-05-31T17:08:22Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.17",
          "kind": "other",
          "published_at": "2026-05-31T16:53:15Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.17",
          "kind": "other",
          "published_at": "2026-05-31T16:53:11Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.16",
          "kind": "other",
          "published_at": "2026-05-30T22:59:49Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.16",
          "kind": "other",
          "published_at": "2026-05-30T22:46:19Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.16",
          "kind": "other",
          "published_at": "2026-05-30T22:46:19Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.15",
          "kind": "other",
          "published_at": "2026-05-27T21:01:31Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.15",
          "kind": "other",
          "published_at": "2026-05-27T20:44:31Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.15",
          "kind": "other",
          "published_at": "2026-05-27T20:44:23Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.14",
          "kind": "other",
          "published_at": "2026-05-26T07:48:52Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.14",
          "kind": "other",
          "published_at": "2026-05-26T07:31:06Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.14",
          "kind": "other",
          "published_at": "2026-05-26T07:31:04Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.13",
          "kind": "other",
          "published_at": "2026-05-23T19:25:43Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.13",
          "kind": "other",
          "published_at": "2026-05-23T19:08:33Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.13",
          "kind": "other",
          "published_at": "2026-05-23T19:08:27Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.12",
          "kind": "other",
          "published_at": "2026-05-23T08:06:41Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.12",
          "kind": "other",
          "published_at": "2026-05-23T07:47:42Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.12",
          "kind": "other",
          "published_at": "2026-05-23T07:47:40Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.11",
          "kind": "other",
          "published_at": "2026-05-22T16:16:58Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.11",
          "kind": "other",
          "published_at": "2026-05-22T16:16:48Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.10",
          "kind": "other",
          "published_at": "2026-05-21T14:28:45Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.10",
          "kind": "other",
          "published_at": "2026-05-21T14:06:40Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.10",
          "kind": "other",
          "published_at": "2026-05-21T14:06:35Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.9",
          "kind": "other",
          "published_at": "2026-05-20T11:14:03Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.9",
          "kind": "other",
          "published_at": "2026-05-20T10:57:27Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.9",
          "kind": "other",
          "published_at": "2026-05-20T10:57:24Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.8",
          "kind": "other",
          "published_at": "2026-05-20T10:17:05Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.8",
          "kind": "other",
          "published_at": "2026-05-20T10:04:54Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.8",
          "kind": "other",
          "published_at": "2026-05-20T10:04:39Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.7",
          "kind": "other",
          "published_at": "2026-05-19T06:58:26Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.7",
          "kind": "other",
          "published_at": "2026-05-19T06:44:16Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.7",
          "kind": "other",
          "published_at": "2026-05-19T06:44:11Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.6",
          "kind": "other",
          "published_at": "2026-05-18T23:53:20Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.6",
          "kind": "other",
          "published_at": "2026-05-18T23:38:04Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.6",
          "kind": "other",
          "published_at": "2026-05-18T23:38:03Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.5",
          "kind": "other",
          "published_at": "2026-05-18T23:23:42Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.5",
          "kind": "other",
          "published_at": "2026-05-18T23:06:47Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.5",
          "kind": "other",
          "published_at": "2026-05-18T23:06:29Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.4",
          "kind": "other",
          "published_at": "2026-05-18T22:32:16Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "41af6045b118591e9f529b44d75efe0d75d04a7f",
          "body": "* fix(server): order images before applying --limit\n\n`service::image::get_images` truncated to `params.limit` before\nsorting, so the cap sliced the backend's arbitrary ordering rather\nthan the newest images: `manta get images --most-recent` returned an\narbitrary image. The sort was also ascending, c\n[…]\n-first, so\nreword to describe newest-N selection with oldest-first display.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "manta get images can filter by image creation date (#106)",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-07-17T12:03:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "278ce9e68f2c2a20969ebfe99cdabed65d3cc874",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-07T18:16:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9bb5254943f6f4c150d16e19bc498745bb9b4cd0",
          "body": "Reintroduce the CLI-local `read_only` flag in `cli.toml` and the two\n`config set/unset read-only` subcommands that toggle it. The CLI's\nread-only gate now consults `AppContext::read_only` (populated from\n`cli.toml`) instead of the `manta-read-only` JWT realm role.\n\n- `SessionContext.is_read_only` an\n[…]\n_read_only`\nfrom `manta config show -o json` — switch back to top-level\n`.read_only`. Operators who removed the `read_only` line from\n`cli.toml` per the interim §2.8 need not act (default is `false`).",
          "is_bot": false,
          "headline": "feat(cli)!: source read-only from cli.toml, not JWT",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1ae2df4f06e65be9b63f8984e8d7371f7ebed8b6",
          "body": "Restructure the text output of `manta config show` so each field sits\nunder the source it came from — local config file, JWT token, or\nserver API — instead of a flat list with `(from token)` /\n`(from token+server)` annotations on individual lines.\n\nWhen `--site X` overrides a different cli.toml `sit\n[…]\nnstant regardless of auth state.\n\nBREAKING CHANGE for shell scripts that grep the text output. JSON\nis additive only — `configured_site` joins the existing keys; no\nexisting key is renamed or removed.",
          "is_bot": false,
          "headline": "feat(cli)!: group `manta config show` text output by value provenance",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "193c2bc94c82570552f77131bd0fa21baef57f75",
          "body": "…s / Reference)\n\nGUIDE.md grew organically to 14 top-level sections; this commit adds\nexplicit tier structure on top of the existing numbering so operators\ncan find the right section faster.\n\n- Part I (Getting started): §1 only — the read-only \"is everything\n  wired up\" smoke test.\n- Part II (Workfl\n[…]\nCLI.md, README.md,\nSECURITY.md, crates/manta-cache/README.md) keeps resolving. Each\nnew Part heading carries a 2-3 sentence intro describing what the\ntier covers and when an operator would land on it.",
          "is_bot": false,
          "headline": "docs(guide): organise sections into 3 tiers (Getting started / How-to…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d4018ddbfe4774ad82f34cd72be3181b443c0a2",
          "body": "GUIDE.md §12 (--dry-run) didn't mention that --dry-run bypasses the\nread-only gate; GUIDE.md §13.3 (Checking your read-only status)\ndidn't point at --dry-run as the preview escape hatch for operators\nwith the role. Two small reciprocal cross-links so the relationship\nis discoverable from either direction.",
          "is_bot": false,
          "headline": "docs(guide): cross-link --dry-run and read-only sections",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a20d65bf744e07a24870ddf8ee2c6986cc49e14e",
          "body": "Add a short Conventions paragraph immediately before \"What changed\nat a high level\" so first-time readers know:\n- (BREAKING)-tagged sections require operator action before upgrade\n- §-numbering is audience-then-topic, not chronological\n- Between-release deltas live in CHANGELOG.md",
          "is_bot": false,
          "headline": "docs(migrating): explain (BREAKING) tag convention and numbering scheme",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e86a858b78e00e6e7a08cf0b08159d9b6402db28",
          "body": "Doc audit surfaced that CLI.md only mentioned `--dry-run` in scattered\nper-subcommand entries; a top-level statement was missing. Add a\ncompact universal-flag note in the TL;DR preamble, cross-linking to\nGUIDE.md §12 for the full semantics (no prose duplication). Also\ncalls out the one short-alias quirk (`manta add group` uses `-D`\nfor `--description` because `-d` is reserved for `--dry-run`).",
          "is_bot": false,
          "headline": "docs(cli): add universal --dry-run note to CLI.md preamble",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a968ce12315c98344c0f2cee7ba3e0524d19f919",
          "body": "User-doc review surfaced 7 issues across files Task 5's sweep missed\n(README.md, ARCHITECTURE.md) plus precision/discoverability nits in\nthe files it touched. Fixes:\n\n- README.md + ARCHITECTURE.md: the \"independent of the cli.toml flag\"\n  claim about the JWT-role server gate is now factually wrong (\n[…]\no operators discover the inspection path.\n- MIGRATING.md §2.7: plain-text \"see §2.8\" → markdown hyperlink;\n  add a CLI-side troubleshooting step (currently only documents\n  server-side curl/log path).",
          "is_bot": false,
          "headline": "docs: tighten read-only doc gaps from JWT SessionContext review",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "77795b5deea21a6c7d9bf496680648a6a4d59299",
          "body": "GUIDE.md §13 collapses the old \"CLI-side flag\" and \"JWT role\"\nsubsections into a single section that describes the single\ncanonical mechanism (the role). MIGRATING.md gains §2.8\ncovering the removed cli.toml flag and the deleted subcommands.\nSECURITY.md drops the row about the cli.toml toggle and updates\nthe cross-references. CLI.md drops the documentation for the\nremoved `config set/unset read-only` subcommands.",
          "is_bot": false,
          "headline": "docs: reframe CLI read-only as JWT-derived",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3106f6c92f84332e34655dc2acb2b1d1bde511dc",
          "body": "BREAKING: `manta config set read-only` and `manta config unset\nread-only` are no longer accepted. The CLI's read-only mode is\ncontrolled by the bearer token's `manta-read-only` realm role;\nthe local cli.toml flag was already removed in the previous\ncommit.",
          "is_bot": false,
          "headline": "feat(cli)!: remove `config set/unset read-only` subcommands",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55f9e4934dee62da20d1b558123281533f9666b5",
          "body": "BREAKING: `read_only` is no longer read from cli.toml. The CLI's\nread-only gate now consults the bearer token's `manta-read-only`\nrealm role, mirrored on a new SessionContext attached to\nAppContext.\n\n- AppContext.session: Option<SessionContext> populated once per\n  authenticated invocation in proces\n[…]\n\n  labelling (\"from token\", \"from token+server\"). The top-level\n  `read_only` and `groups_available` JSON keys are gone.\n- Operator's cli.toml `read_only = true` lines are silently\n  ignored by serde.",
          "is_bot": false,
          "headline": "feat(cli)!: replace cli.toml read_only with JWT-derived SessionContext",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7c75e9054597755c42e0d4d095a7cda8fc7a23ab",
          "body": "Holds the JWT-derived per-invocation facts (username, name,\nis_admin, is_read_only, accessible_groups). Built via\n`SessionContext::build(client, token)` — one HTTP call plus a\nlocal JWT decode.\n\nModule is not yet wired into AppContext; the next commit does that.",
          "is_bot": false,
          "headline": "feat(cli): add SessionContext module",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "750309fea4b186c06ce5165318ac03f5d8887c2e",
          "body": "Move the JWT decode module (and its PA_ADMIN constant) into\nmanta-shared so manta-cli can decode tokens without pulling\nmanta-server as a dependency. The original server-side module\nbecomes a thin re-export; service::authorization::PA_ADMIN\nbecomes a re-export of the same.\n\nFoundation for the JWT-derived SessionContext work.",
          "is_bot": false,
          "headline": "refactor(shared): relocate jwt_ops from manta-server to manta-shared",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e3402859c0f6b05e44744d7720ec7c1f8db5299",
          "body": "…skip ci]",
          "is_bot": true,
          "headline": "chore(cli): regenerate OpenAPI spec + man pages + shell completions […",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-01T20:37:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b34dc7410736e4944a5611ba63c4b600e5214d2",
          "body": "* ci: gate checked-in openapi.json against the live server spec\n\nThe CLI's openapi.json is generated from the server's #[utoipa::path]\nannotations but checked into git and only consumed (never re-derived)\nat build time, so handler / wire-type changes that skip the regen drift\nsilently — the spec rec\n[…]\nen.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01VoTrdfXtKUbgEqr9rqNNCP\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: gate checked-in openapi.json against the live server spec (#105)",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-07-01T20:20:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "551456b4757cd21993e4f5bfe71cc4c23ddb67a8",
          "body": "* fix(server): return 404 for unknown site on /auth/*\n\nThe public /auth/{token,validate} handlers collapsed every failure —\nincluding \"site not configured\" — into a generic 401, so targeting a\nnon-existent site prompted for credentials (up to 3x) before failing.\nEvery authenticated endpoint already \n[…]\nen. Document this so the short-circuit isn't misread as always zero-prompt.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(server): return 404 for unknown site on /auth/*  (#102) (#104)",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-30T10:27:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8167b200d1626b539d907dac4ee32c799748b87b",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-29T00:13:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24f3b220b879dff4d942c30f5db10caea634f901",
          "body": "…hardware\n\nRound 2 introduced group::resolve_target_and_available_groups to fold\n\"fetch available groups → validate label set\" into one backend round-\ntrip with in-memory validation. service/configuration.rs already used\nit, but service/session.rs and service/hardware.rs were still doing\nthe manual \n[…]\n's downstream backend.get_group()\ncall is untouched — only the label-fetch+validate prelude is folded.\n\nFlagged by /simplify R3 finding #10 (S1×2 — same-crate parallel\npattern detected on both files).",
          "is_bot": false,
          "headline": "refactor(server): use resolve_target_and_available_groups in session+…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "91783f0ec7dcb40c2a8ff4a3bf771de0edd773cd",
          "body": "Two complexity fixes in node-detail aggregation and boot-parameter\nfiltering. No behaviour change.\n\n#8 (service/node_details.rs::build_node_details): the per-node\nxnames.iter().map() closure resolved boot params with a linear\nfind() over boot_params_vec for each xname — O(N²) for N nodes.\nThe same f\n[…]\nthe scan so each boot\nparam's hosts are membership-checked. O(B×G×H) → O(B×H). With\nG in the thousands at cluster scale this is the steepest win.\n\nFlagged by /simplify R3 findings #8 (S3) and #9 (S3).",
          "is_bot": false,
          "headline": "perf(server): hash-index two hot-path loops in service/",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba5da703ea0f0d10d825b87f7c537ec01e59b59c",
          "body": "Two findings in the migrate path that Round 3 surfaced.\n\n#5 (handler): server/handlers/migrate.rs iterated over\ntarget_hsm_names + parent_hsm_names and called\nservice::authorization::validate_user_group_access per name. Each\nhit the backend with a get_group_name_available round-trip. With N\ntarget +\n[…]\ne-fetch via futures::future::join_all\nbefore entering the mutation loop; the mutation loop uses the cached\nbool slice for its decision branching.\n\nFlagged by /simplify R3 findings #5 (S2) and #6 (S3).",
          "is_bot": false,
          "headline": "perf(server): fan out sequential backend calls in migrate path",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ce6566ae0df7fa4ad9029ca902b497b23b3f230f",
          "body": "…CH loops\n\nRound 2 parallelised the BSS `update_bootparameters` PUT loops in\nservice/boot_parameters.rs and service/kernel_parameters.rs via\ntry_join_all, but missed the structurally identical image-patch loops\nthat follow them. Each calls infra.backend.update_image one image at\na time; clusters wit\n[…]\nall propagates the first error to the\ncaller, matching the pre-Round-2 behaviour of both loops.\n\nFlagged by /simplify R3 findings S1.F4 + S3.F2 + S3.F3 (three-way\ncross-flag — reuse + efficiency × 2).",
          "is_bot": false,
          "headline": "perf(server): extract apply_image_patches helper, parallelise IMS PAT…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "898777c67398f93025db5b490f80e0a927fc9c70",
          "body": "Two related findings folded into one commit.\n\n#2 (behaviour bug): GetGroupParams carries settings_group_name but\nhad no effective_group() method, so dispatch/get/groups.rs silently\ndropped the configured default. Add the method (matching the pattern\non the five other params structs) and use it in th\n[…]\nt/group_nodes.rs to do the fallback inline.\nBehaviour was already correct — this is a consistency cleanup so all\nsix params structs share the same one-liner.\n\nFlagged by /simplify R3 C1 (reuse, both).",
          "is_bot": false,
          "headline": "fix(cli): use effective_group() in `get groups` + `get group-nodes`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a0ffc92fe44d7d0f186a4bcf7e478595f1a1ca25",
          "body": "Two Round-3 findings folded into one commit (they coordinate).\n\n#1 (altitude regression): four service-layer call sites were calling\njwt_ops::is_user_admin directly instead of the canonical short-circuit\nin service/authorization.rs. Two of those (sat_file.rs::138,171) were\nintroduced by Round 2's sa\n[…]\nls flagged by\nRound 3 S4 are gone; sat_file.rs becomes ~6 lines shorter; the\nauthorization module is the sole owner of admin-detection policy.\n\nFlagged by /simplify R3 findings #1 (S4) and #3 (S1+S2).",
          "is_bot": false,
          "headline": "refactor(server): promote admin_bypass to authorization::is_admin",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "29c016f8a696f85c7116a4fd94b6e94f4d00f7c6",
          "body": null,
          "is_bot": true,
          "headline": "chore(cli): regenerate man pages + shell completions [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T23:49:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "39b3f59b48a3d44cc9e8b34e4b78ebc99b66fa21",
          "body": "CI's `cargo doc --workspace --no-deps` step runs with\n`RUSTDOCFLAGS=\"-D rustdoc::broken_intra_doc_links\"`. The Round 2 batches\nadded doc comments that referenced items without bringing them into\nscope, causing the build to fail at the rustdoc step (CI run\n28339441018). Three errors + one warning fix\n[…]\n\n\nLesson: every /simplify apply batch should run the strict rustdoc\nbuild, not just cargo check + test + clippy. The batch verifications\nmissed this gate because clippy doesn't catch broken doc links.",
          "is_bot": false,
          "headline": "fix(server): unbreak rustdoc intra-doc links from /simplify Round 2",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:33:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b43431af9717d903db2b04765b69d026ef0ae45c",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T23:27:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "147874c88915fa8cece777788134d1ccc651b6b4",
          "body": "Three CLI dispatch findings folded into one commit. One behaviour\nchange (cancel-on-confirm goes from non-zero exit to zero, fixing\nthe scripting friction).\n\n- common/clap_ext.rs: add resolve_node_target helper to capture\n  \"if hsm_group is set, drop the xnames expression\" rule. Used by\n  add/kernel\n[…]\nreturn Ok(())) instead of bail!. The\n  exit code on cancel changes from non-zero to zero. Cancel is\n  no longer treated as a process error.\n\nFlagged by /simplify findings #46, #47, #48 (all C1 reuse).",
          "is_bot": false,
          "headline": "refactor(cli/dispatch): node-target helper + confirm consistency fixes",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f7061e12ea5eff104f55d1fb6801f6e8e4c7d123",
          "body": "Eight small findings folded into one commit; mostly mechanical\ncollapses, dedup, and one-shot client reuse. No behaviour change\nbeyond the shared-clock fix in #44.\n\n- sat_file/render::dot_notation_to_yaml: replace 50-line interior-\n  mutation loop (with two structurally-impossible error branches)\n  \n[…]\nore pre-formatted summary\n  lines as Vec<String> instead of re-packaging into Vec<Vec<String>>\n  of components accessed by index.\n\nFlagged by /simplify findings #35, #36, #38, #39, #40, #43, #44, #45.",
          "is_bot": false,
          "headline": "perf(cli): efficiency + simplification polish batch from /simplify",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d1dd8d7101a75026852ca200de398723a074534c",
          "body": "Two intertwined findings folded into one commit.\n\n- Move validate_token, get_token, and map_auth_error from\n  common/authentication.rs to MantaClient as methods\n  [validate_token, exchange_credentials, plus map_auth_error\n  scoped to the impl]. Eliminates progenitor types from the\n  common/ module. \n[…]\ness log message now reports the\ncorrect attempt number (off-by-one fix). No other observable\nbehaviour change.\n\nFlagged by /simplify findings #7 (C4 altitude) and #8 (C2+C4\nsimplification + altitude).",
          "is_bot": false,
          "headline": "refactor(cli/auth): consolidate transport + cascade in MantaClient",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "291a7ec052bacc92cea08f1785abdb9e64af63c9",
          "body": "Three efficiency findings folded into one commit. No behaviour change\n(error semantics preserved where applicable).\n\n- hw_cluster/apply.rs::apply_hw_configuration + delete_hw_component:\n  fetch target + parent group inventories concurrently via\n  tokio::try_join! (two sequential awaits → one). Halve\n[…]\nombined target+parent pool dedup) deferred: the\nsignature change ripples to pin_unpin.rs and tests.rs which are\noutside the four-file scope of this batch.\n\nFlagged by /simplify findings #26, #27, #31.",
          "is_bot": false,
          "headline": "perf(server): hw_cluster + BSS update parallelism from /simplify",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "59cba0d8a0a53bca62ddf9fe9c9ab0bf4e549dab",
          "body": "Six small findings folded into one commit; mostly dead-code deletions\nand one-shape extractions. No behaviour change.\n\n- server/handlers/mod.rs: extract require_url(url, field), called by\n  require_vault and require_k8s_url (the two existing one-line shims\n  delegate). Removes the duplicated NOT_IMP\n[…]\nt_file/image_pipeline.rs: drop unnecessary\n  session_value.clone() passed to serde_json::from_value (the value\n  is unused after the call).\n\nFlagged by /simplify findings #13, #19, #29, #33, #37, #42.",
          "is_bot": false,
          "headline": "refactor: small mechanical cleanups from /simplify deferred batch",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45f21e86ca9a43d4cdf73ee8be5e680ce0e52168",
          "body": "CLAUDE.md rule: handlers under server/handlers/ must only call\nfunctions in service/, never backend methods directly. Five handler\nfiles violated this in 13+ sites.\n\nAdded thin service-layer wrappers and routed every handler-side\nbackend call through them. Also promoted the existing private\n`admin_b\n[…]\nb async fn get_available_groups\n- service/migrate.rs: pub async fn backup, pub async fn restore\n\nFlagged by /simplify S4 (altitude × 4 — boundary + duplicate-fetch\n+ admin tier + InfraContext bypass).",
          "is_bot": false,
          "headline": "refactor(server): enforce handler→service→backend boundary",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9ef288a8cab668504a74a1670b3c36022cb3c894",
          "body": "Two efficiency findings folded into one commit; both apply to\ndispatch/apply/sat_file/dispatch.rs.\n\n- Configurations have no inter-dependencies (topo-sort in plan.rs\n  covers only Images). Drain all leading SatElement::Configuration\n  entries and dispatch with futures::future::try_join_all instead\n \n[…]\nved: configurations execute (concurrently)\nbefore images; images stay strictly in topo-order; session_templates\nexecute (concurrently) after all images complete.\n\nFlagged by /simplify C3 (efficiency).",
          "is_bot": false,
          "headline": "perf(cli): parallelize independent SAT-file POSTs",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8262a5d51f67e19cf5fcc13f0705ba0925bb4315",
          "body": "Four reuse findings folded into one commit; all small mechanical\nextractions of repeated patterns. No behaviour change.\n\n- output: extract render_node_details, called by both\n  dispatch/get/nodes::exec and dispatch/get/group_nodes::exec\n  (same ~40-line output block in both, differing only in\n  xnam\n[…]\nng the convention in output/session, /template,\n  /boot_parameters, /redfish_endpoints). Removes the unnecessary\n  serde_json::to_value intermediate at the JSON path.\n\nFlagged by /simplify C1 (reuse).",
          "is_bot": false,
          "headline": "refactor(cli): reuse + DRY batch from /simplify",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b7bc19434307a956e1f42190fd33d5a46c33617",
          "body": "Six findings folded into one commit because they are all small\nmechanical extractions of repeated patterns. No behaviour change.\n\n- service/session.rs: extract fetch_session_by_name from\n  validate_session_access and validate_console_session (same 10-line\n  prelude in both).\n- common/config/mod.rs: \n[…]\nd_cfs_configuration_name:\n  replace serial for-loop with HashSet dedup + join_all fan-out,\n  matching the pattern already in collect_boot_images.\n\nFlagged by /simplify S1 (reuse), S2 (simplification).",
          "is_bot": false,
          "headline": "refactor(server,shared): reuse + simplification batch from /simplify",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7d369f9f60db7df007e21e2ca5319e3497b8a82f",
          "body": "…n.rs\n\nThe five authorization functions each opened with an identical\n`if jwt_ops::is_user_admin(token) { return Ok(()); }` short-circuit.\nExtract a private helper so a future change — e.g. adding audit logging\nto admin bypasses, or requiring JWKS signature verification before the\nshort-circuit fire\n[…]\nplication +\nsecurity advisory). The JWKS verification follow-up tracked in\njwt_ops.rs's module-level TODO is NOT addressed here; that's a\nseparate concern requiring per-site JWKS fetching and a cache.",
          "is_bot": false,
          "headline": "refactor(server): extract admin_bypass helper in service/authorizatio…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1bd8bd1ad73860a984bd6f6a12b16abcbd0f646",
          "body": "`backup vcluster` issues `POST /api/v1/migrate/backup`, which creates\nfiles on the server-side filesystem. It was in READ_ONLY_VERBS, so the\nCLI's read_only gate never blocked it — operators who set\n`read_only = true` to prevent accidental cluster mutations could still\nrun `manta backup vcluster`. Move it to MUTATING_VERBS (where `restore`\nalready correctly lives).\n\nFlagged by /simplify C4 (altitude).",
          "is_bot": false,
          "headline": "fix(cli): reclassify `backup` as a mutating verb in read_only gate",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9aa206f5998eaadee5d6638eda95b5b9949bcc90",
          "body": "Three small correctness fixes surfaced by the whole-codebase /simplify\nreview:\n\n1. service/image.rs::validate_image_deletion + get_restricted_image_ids:\n   replace `.collect::<Option<Vec<String>>>().ok_or_else(MissingField)`\n   with `.filter_map(...).collect()`. The previous shape aborted the\n   ent\n[…]\n HSM group-membership round-trip\n   per GET /boot-parameters request.\n\nFlagged by /simplify agents S1 (reuse), S2 (simplification), S3\n(efficiency) — triple-flagged on #3, single-flagged on #1 and #2.",
          "is_bot": false,
          "headline": "fix(server): Tier-1 correctness from /simplify sweep",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dbd945d262665abef334d8436d42aa68ed99c30f",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T19:43:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6ca0f5aea28544a2611fbcc5ff18eded124e5a6",
          "body": "Three corrections caught by the final whole-branch review against\nthe actual source code:\n\n1. Env var name: was MANTA_TOKEN, actual is MANTA_CSM_TOKEN\n   (crates/manta-cli/src/common/authentication.rs:64). Fixed in\n   the GUIDE.md §12 flowchart node and closing paragraph.\n\n2. Token-cache cascade mis\n[…]\net updates are\n   idempotent and operators retry — there is no executable rollback.\n   Removed the Rollback node from the flowchart and rewrote the\n   intro prose.\n\nNo other diagrams or prose touched.",
          "is_bot": false,
          "headline": "docs(mermaid): fix factual errors in batch-2 diagrams",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "17454ba7c0017a34c742381a57bce554d70e2506",
          "body": "GUIDE.md §12 \"Non-interactive and scripted use\" gains a new\nsub-section \"Authentication for scripts\" with a flowchart TD\nshowing the env → 0600 cache → interactive prompt resolution\norder. Documents what was previously only described in\ncommon/authentication.rs's rustdoc — useful for operators writing\nCI / cron scripts who need to know which branch they will hit.\n\nSub-section sits between the existing dry-run preview content\nand the add-group -D note.\n\nStyle matches batch-1 conventions.",
          "is_bot": false,
          "headline": "docs(guide): add mermaid flowchart for CLI token-cache resolution",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc623a4ac089f06eaa2f6e57e2a65d6031370b6a",
          "body": "GUIDE.md §8 \"Console access\" gains a sequenceDiagram near the top\nshowing the HTTP-to-WebSocket upgrade and the resulting\nbidirectional bridge with three parallel message kinds: binary\nframes for stdin/stdout, plus a text-frame resize event from the\nCLI.\n\nIncludes a short intro paragraph naming the protocol and a footnote\non the inactivity timeout knob ([server].console_inactivity_timeout_secs).\n\nStyle matches batch-1 conventions.",
          "is_bot": false,
          "headline": "docs(guide): add mermaid sequence diagram for WS console upgrade",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f6c49129343466e94925657184ad058c4fc9800",
          "body": "ARCHITECTURE.md §\"Layer responsibilities\" gains a new sub-section\n\"Hardware-cluster pin/unpin algorithm\" with a flowchart TD showing\nthe parse → fetch → validate → score → move → rollback phase shape.\nAnnotates the non-transactional rollback behaviour and links to the\nimplementation file (service/hw_cluster/pin_unpin.rs).\n\nStyle matches batch-1 conventions: bare mermaid fence, italic caption,\n4-space indent, no theme/emoji.",
          "is_bot": false,
          "headline": "docs(architecture): add mermaid flowchart for hw-cluster pin/unpin",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b0aa33ee3ebd436faeb7548de0718f0d15a84a7",
          "body": "Folds in two minor findings from the final whole-branch review:\n\n- Add `Note over MS: chokepoint — every CSM/OCHAMI call proxies\n  through here` to restore the at-a-glance \"chokepoint\" labelling\n  that the deleted ASCII art carried directly under the manta-server\n  box. The bullet list still describ\n[…]\nalso gets a correction header (in-tree, gitignored, not committed)\nacknowledging the May 25 mermaid precedent that the original spec\nmis-stated.\n\nRender-check: `npx mermaid-cli -i SECURITY.md` exit 0.",
          "is_bot": false,
          "headline": "docs(security): polish mermaid auth-flow diagram",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "50111be3e4600f244409ef4b38e22a49dce0ad59",
          "body": "ARCHITECTURE.md §\"Security model\" gains a new sub-section\n\"Middleware layer stack\" between the mitigations table and the\nDeferred paragraph. The flowchart shows the nest split between\n/api/v1/*, /api/v1/auth/*, and the /docs Swagger path, plus the\nlast-added-outermost layer ordering on each branch.\n\nCloses the cross-link forward-references from the GUIDE.md and\nSECURITY.md diagrams added earlier on this branch (anchor:\n#middleware-layer-stack).",
          "is_bot": false,
          "headline": "docs(architecture): add mermaid flowchart for the middleware stack",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "492f63bcdeca9c3497c9f98ad5104adf7479808e",
          "body": "SECURITY.md §\"Security model — at a glance\" loses the ASCII\n3-box-and-arrows diagram and gains a sequenceDiagram showing both\nthe auth bootstrap (POST /auth/token -> Keycloak -> token) and a\nsubsequent authenticated request (proxied to CSM/OCHAMI, signature\nverified upstream). Optional Kafka actor s\n[…]\nverbatim.\n\nCross-links added to GUIDE.md §13 (user-facing read-only) and\nARCHITECTURE.md#middleware-layer-stack (contributor view of the\nmiddleware pipeline; target anchor created in the next commit).",
          "is_bot": false,
          "headline": "docs(security): replace ASCII tier diagram with mermaid sequence",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8ae23b23109aa57bed56e731f015d1f51065afeb",
          "body": "GUIDE.md §13.2 gains a sequenceDiagram showing the request flow\nthrough read_only_guard: method check short-circuit, bearer-prefix\nstrip, role lookup via jwt_ops::has_role, 403 emission, and the\nhappy path. Both branches in one diagram via nested alt blocks.\n\nStyle note: GUIDE.md §3 already carries \n[…]\nick whichever suits the diagram's content.\n\nForward-link to ARCHITECTURE.md#middleware-layer-stack added in\nthis commit; the target anchor is created by the next ARCHITECTURE.md\ncommit on this branch.",
          "is_bot": false,
          "headline": "docs(guide): add mermaid sequence diagram for the read-only gate",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "498be2cda2a9eafc11cca0176c01141b1abc025b",
          "body": "New top-level SECURITY.md (created on explicit user instruction)\ncovering:\n\n- Private-disclosure channels: GitHub Security Advisories at\n  eth-cscs/manta/security/advisories/new (preferred), email fallback\n  to the workspace authors listed in Cargo.toml.\n- Supported-versions matrix: 2.0.0-beta.x act\n[…]\nged.\n- Out-of-scope list pointing upstream-crate / IdP vulnerabilities at\n  their respective repos.\n\nREADME.md gains a docs-index row pointing at SECURITY.md so it's\ndiscoverable from the entry point.",
          "is_bot": false,
          "headline": "docs(security): add SECURITY.md vulnerability-reporting + model summary",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f5412f8b6a9d4819acdaee963905e572e9bad9c3",
          "body": "Adds an explicit Response 403 line to each of the 34 mutating endpoint\nsections in API.md (POST/PUT/PATCH/DELETE under /api/v1/*). Each line\npoints back to the global Error responses table for the explanation,\nkeeping per-endpoint duplication minimal.\n\n/api/v1/auth/* (login flow, separate sub-router\n[…]\ns an earlier judgment call that the global table alone was\nsufficient — per-endpoint coverage means readers scanning a single\nendpoint's section see the 403 without scrolling back to the global\ntable.",
          "is_bot": false,
          "headline": "docs(api): per-endpoint Response 403 for every /api/v1/* mutating route",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dcc881dce16afc7a4add077ee59c38a4b094fb2d",
          "body": "MIGRATING.md §2.7 gains a Troubleshooting block (4 numbered steps):\ndecode the token to check realm_access.roles, curl-against-mutating to\nconfirm 403, curl-against-read to confirm 200, journalctl grep for the\nwarn-level refusal log.\n\nARCHITECTURE.md §\"Security model\" gains a paragraph after the\nmit\n[…]\nrification boundary (jwt_ops decodes without\nverifying), it is defence in depth against permission scope creep on\ntokens that DO verify, and it inherits future local-JWKS verification\nwhen that lands.",
          "is_bot": false,
          "headline": "docs: expand JWT-role read-only coverage in MIGRATING + ARCHITECTURE",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4bb2ffc00bca768bd103a6c12c68494d750d9838",
          "body": "Both subcommands shipped several betas ago alongside the original CLI\nread-only feature but were never added to the CLI.md reference. Adding\nthem now alongside the JWT-role gate work, since the two policies are\ndiscussed together everywhere else in the user docs.\n\nCross-links to GUIDE.md §13's comparison table so readers see the\nCLI-vs-server distinction without context-switching.\n\nNo code change — `config set read-only` / `config unset read-only`\nhave been in the dispatcher since beta.56.",
          "is_bot": false,
          "headline": "docs(cli): document `config set read-only` and `config unset read-only`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfed2cd18dec838120abaa6bddcb09cc0680ab00",
          "body": "examples/cli.toml gains a commented-out `read_only` line covering the\nCLI-side toggle (previously undocumented in the example, even though\n`manta config set read-only` has shipped for several betas).\n\nexamples/server.toml gains a comment block noting that the new\n`manta-read-only` JWT-role gate is N\n[…]\ngo to MIGRATING.md §2.7 (kcadm.sh\nrecipe) and GUIDE.md §13 (operator description).\n\nCloses the example-file gap. Pre-existing operators copy-pasting\neither example file now see both policies surfaced.",
          "is_bot": false,
          "headline": "docs(examples): document read-only access in cli.toml + server.toml",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "230c20f574ab346e82a09cd5f4ba2107eb1678c7",
          "body": "Was buried as a sub-section under §12 (Non-interactive and scripted\nuse). Read-only access is a distinctive operator topic with two\nindependent policies — promoting it to a dedicated section with\nsub-sections and a comparison table makes it discoverable from the\nToC and reads better.\n\nRenumbers old §13 (Installation maintenance) -> §14 and its three\nsub-sections from §13.x to §14.x. ToC updated.\n\nAdds a discoverability bullet to API.md's TL;DR linking to the new\nGUIDE.md §13.",
          "is_bot": false,
          "headline": "docs(guide): promote Read-only access to top-level §13",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09831435cac64c8bacbbb35ca4924d94f70d2cea",
          "body": "Adds a Keycloak provisioning recipe (kcadm.sh examples) to the\n\"Site operators\" section. Renumbers the old §2.7 Verify → §2.8 to\nkeep the section sequence tight.\n\nCloses the operator-side rollout gap for the JWT-role gate added in\nthis branch.",
          "is_bot": false,
          "headline": "docs(migrating): add §2.7 operator-rollout for the manta-read-only role",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "405af9df661833a8342a21a64b0310ca44b0c445",
          "body": "User-facing docs for the server-side read-only enforcement added in\nthis branch:\n\n- README.md: bullet in the server-only-settings list under \"Beyond\n  the flags above\"; describes the role and its scoping vs CLI flag.\n- ARCHITECTURE.md: new row in the §\"Security model\" mitigations\n  table pointing at\n[…]\n the CLI-side\n  read_only = true flag.\n\nCHANGELOG.md is regenerated by git-cliff from commit messages on\nrelease; skipped. No migration steps; MIGRATING.md untouched. No\nCLI changes; CLI.md untouched.",
          "is_bot": false,
          "headline": "docs: document the manta-read-only JWT-role gate",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "67958083e8e675a8e0f9ea549395f8daa24aea87",
          "body": "Adds an Axum middleware (read_only_guard) layered on /api/v1/* that\ninspects the caller's bearer token and refuses POST/PUT/PATCH/DELETE\nwith 403 Forbidden when the realm_access.roles claim contains\n\"manta-read-only\".\n\nThe gate is independent of (and orthogonal to) the existing CLI-side\n`read_only =\n[…]\n* (login) and /docs are unaffected.\n\nIntegration tests pin: POST/PUT/PATCH/DELETE refused with the role,\nGET passes through, plain tokens unaffected, missing-auth still 401,\nauth sub-router not gated.",
          "is_bot": false,
          "headline": "feat(server): reject mutating requests for JWT manta-read-only role",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5a7d85dbe9fca9d4b41956881339f7fb8039efbb",
          "body": "Generalises the role-search logic used by is_user_admin into a reusable\nhas_role(token, role) helper. is_user_admin is now a one-line wrapper.\nIntroduces READ_ONLY_ROLE = \"manta-read-only\" for the upcoming\nread-only middleware gate.\n\nPure addition + refactor; no behaviour change to is_user_admin (covered\nby existing tests + new has_role tests).",
          "is_bot": false,
          "headline": "feat(server): add has_role helper + READ_ONLY_ROLE const",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d380e1740200511c74d4c892368fcfdea74a794",
          "body": "The public /auth/{token,validate} handlers collapsed every failure —\nincluding \"site not configured\" — into a generic 401, so targeting a\nnon-existent site prompted for credentials (up to 3x) before failing.\nEvery authenticated endpoint already 404s on an unknown X-Manta-Site\nvia RequestCtx; the aut\n[…]\nractive cascade so it stops instead of re-prompting for credentials\nthat can never authenticate against a site that doesn't exist.\n\nCloses #102\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(server): return 404 for unknown site on /auth/*",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-28T15:02:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "87a4230be42ebc3788a69caafa74f9cdad4141a5",
          "body": "…inuation\n\nThe previous wording had `+ [`SiteName`]` at the start of a `///` line,\nwhich clippy 1.92's doc parser reads as a list bullet — then complains\nthat the next 4 continuation lines aren't indented under it.\n\nRephrasing to a single comma-separated clause (`State<...>`, `BearerToken`,\nand `SiteName`) keeps the same meaning without introducing a phantom list.",
          "is_bot": false,
          "headline": "docs(server): rephrase RequestCtx intro to avoid clippy doc_lazy_cont…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T11:41:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61f751c2fc8a9003d8ad20981a669a0165832142",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T11:22:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0638d2736ac9110c5274a2da964fa441d70fc482",
          "body": "Adds substantive rustdoc to manta-shared, manta-server, and manta-cli\npublic surfaces: module headers, `# Errors` sections, `# Examples`,\ncross-links, and wire-shape JSON sketches.\n\nDoc highlights:\n- manta-shared/types: wire-shape JSON examples on every Request/Response,\n  cross-linked Request <-> R\n[…]\ne explicit Skip<Args> type annotation.\n\nVerified: cargo doc --workspace --no-deps --document-private-items\nclean, cargo test --workspace --doc 7/7 passing, cargo check\n--workspace --all-targets clean.",
          "is_bot": false,
          "headline": "docs: comprehensive doc sweep across workspace + small CLI cleanups",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T11:14:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "daec0defc735bd5f72be706781ca81f97e7a076c",
          "body": null,
          "is_bot": true,
          "headline": "chore(cli): regenerate man pages + shell completions [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T09:03:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c87200e9f6d19253382987964b3f628e6dba593",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T08:45:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13cce1854b7650f2cff295e4ba852f60bb348c5d",
          "body": null,
          "is_bot": false,
          "headline": "feat(manta-server): publish manta-server to crates.io",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T08:44:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00c0089a002795f4349b7e98b8374e4e0244bf81",
          "body": null,
          "is_bot": true,
          "headline": "chore(cli): regenerate man pages + shell completions [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T12:25:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8e8accf7c9fdda5c2dfd20f85f554bd395dbd7d",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-25T12:08:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c64dd4639d44f97f397867b2de5e5c4e1fd8114e",
          "body": null,
          "is_bot": true,
          "headline": "chore(cli): regenerate man pages + shell completions [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T12:03:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29bb759b158db8f470faddaff1be76f29228f4ad",
          "body": "cargo-machete flagged both as unused. Verified neither the crate\nsource nor the progenitor-generated openapi_client.rs references\nthem; regex remains in use only by manta-server.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01W72jzmGAaSKfqGXtddV7LS",
          "is_bot": false,
          "headline": "build: remove unused bytes and regex deps from manta-cli",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-25T11:41:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6ebd673509bfd79e1a01390c32e9ec7a28e30c07",
          "body": null,
          "is_bot": false,
          "headline": "Fix cargo clippy",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-25T10:18:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b751d422b5570fdaf846d7ec04c308c9f23c2c2a",
          "body": "* fix(manta-cli): make cli.toml site field optional (#101)\n\nThe `site` field in `cli.toml` was mandatory, even when `--site` was\nsupplied per-invocation. Make `CliConfiguration::site` an\n`Option<String>` and resolve the active site as `--site` → config\n`site` → clean error. A missing site is now a u\n[…]\n `parent_hsm_group`\ncli.toml key; the CLI default-group key is `hsm_group`.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "cli.toml: make site field optional and remove [sites] table (#103)",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-25T08:28:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dbd87d41e96a28c9722fceb98ae0612e85d39dcb",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:50:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "721ab68007ae2d3b4f4114c8c916f9fb7856d1cb",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:50:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb034d66838bd7ea1231b3217be13c4829a0c6ee",
          "body": "`cargo doc --workspace --no-deps` under\n`-D rustdoc::broken-intra-doc-links` (CI default) was failing on two\nunresolved references:\n\n- `service/configuration.rs` linked to bare\n  `[build_configuration_analysis]`, which isn't in scope. Qualified\n  to `crate::service::analysis::build_configuration_ana\n[…]\ns::sat_file`, but\n  that submodule is private — items are re-exported via\n  `pub use sat_file::*` in `handlers/mod.rs`. Dropped the private\n  module segment so the link resolves through the re-export.",
          "is_bot": false,
          "headline": "docs(server): fix broken intra-doc links failing `cargo doc`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:50:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e14c6ed77c4c494a5f862cea4603fcfe3f47a461",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-22T09:44:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62b045db1b5ab671ce0c0b588dc54c59fc9a3024",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:36:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63a864b7070549fd5f1cb585f58a0db1cf9d1422",
          "body": "GUIDE.md §12 explained the dry-run output channel by naming\n`action_result::print_with_data` — the helper that did the rendering\nbefore the recent CLI refactor extracted a thin `preview_request`\nwrapper around it. Calling the helper by name is an implementation\ndetail that adds no value for an opera\n[…]\n internals get renamed.\n\nRephrase the parenthetical to describe the user-visible behaviour\n(\"the shared output renderer; honors `-o table | json`\") so the\nreference stops mattering on the next rename.",
          "is_bot": false,
          "headline": "docs: drop Rust helper name from GUIDE §12 dry-run paragraph",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:35:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "93bd9b5298dd40da02a4a60faf72b7a8ac413731",
          "body": "Three `ExecParams::dry_run` field docs still pointed at\n`action_result::print_with_data` — the call sites were rewired to\n`action_result::preview_request` in the previous refactor commit.\nUpdates the prose in `add/node.rs`, `add/redfish_endpoint.rs`, and\n`apply/redfish_endpoint.rs` to match.\n\nAlso a\n[…]\n a dirty repo\n(`tracing::warn!` vs confirm prompt), and every repo is still\nopened/inspected on both paths. Document that explicitly so future\nreaders don't read `dry_run` as a skip-validation switch.",
          "is_bot": false,
          "headline": "docs(cli): refresh doc comments after the dry-run helper extraction",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:27:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d564704e6dda1f42c10e574e1eabb7f2bb92667a",
          "body": "CLI.md `add group` table was missing the `-o/--output` row even\nthough `add_group()` wires `output_flag()` in `build/add.rs`. Add the\nrow, and flesh out the dry-run description so operators know it\npreviews both the `create_group` payload and (when `--nodes` is\ngiven) the follow-up `add_nodes_to_gro\n[…]\nG.md §2.1 quoted a `manta-server --help` snippet that\npredated `--allow-http` and `--emit-openapi`; refresh it from the\ncurrent help text so site operators upgrading from v1 see the real\nflag surface.",
          "is_bot": false,
          "headline": "docs: refresh `add group --dry-run` row + `manta-server --help` snippet",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:19:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "196ed0619e789e45485d8aeb9a33ad01b62dca1b",
          "body": "Two unrelated server-side changes landed without updating the test\nfiles; this commit aligns them:\n\n- `ServerState` gained a `shutdown_grace_period: Duration` field. Add\n  it (= 30s) to the three test fixtures in `integration.rs` and\n  `server_routes.rs` so the tests compile.\n\n- `service::configurat\n[…]\nis` path that consults CFS v3\n  components). Update the `get_configurations_happy_path` test to\n  assert against the new shape, register a v3 components mock, and\n  refresh the call-chain doc comment.",
          "is_bot": false,
          "headline": "test(server): catch up to current ServerState + get_configurations shape",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:13:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fdb92e5d065331f76ae26caa80d34301b74c0f20",
          "body": "manta-server only ever needed clap for six flags (--port, --cert,\n--key, --listen-address, --allow-http, --emit-openapi) plus --help\nand --version. The dependency was disproportionate.\n\nReplace with a single function that walks std::env::args and matches\non flag names. Same surface (incl. `--flag=va\n[…]\nnc.\n\n`CliArgs` is now a small typed struct consumed by `run` / `run_server`\ninstead of `clap::ArgMatches`, which lets the call sites drop the\n`get_one::<T>(...).cloned()` and `get_flag(...)` patterns.",
          "is_bot": false,
          "headline": "refactor(server): drop clap dep, hand-roll minimal arg parser",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:13:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bd6b74c23d35805d2e953e1a57e41a5d67084945",
          "body": "Findings from a /simplify sweep over the dry-run + read-only foundation\nwork of the last 2 days. Net -178 lines across 20 files.\n\nHelpers extracted\n- build::dry_run_flag() — one source of truth for the `-d/--dry-run`\n  clap arg, replacing ~30 verbatim copies across add/apply/delete/\n  power/run/rest\n[…]\nvalid JSON; moved the confirm prompt to the\n  live path only.\n- delete boot-parameters: moved `MantaClient::from_app_ctx` below the\n  dry-run early return (matches the convention used by delete/node).",
          "is_bot": false,
          "headline": "refactor(cli): consolidate dry-run helpers + dispatcher cleanups",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T07:18:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "875836a1ceb9d7d0cffcb23d163805fa8b313af5",
          "body": "Move pin/unpin algorithm from manta-server to manta-cli, removing\ncomfy-table from the server. Adds PUT /api/v1/groups/{name}/members\nas the only new endpoint, drops the three /hardware-clusters routes.",
          "is_bot": false,
          "headline": "docs: design spec for hw_cluster server-to-CLI migration",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "740cbecf73ebdd4cb619b19efb559022a79ebe17",
          "body": "The read-only chokepoint used to filter the \"Re-run with --dry-run\"\nhint by an allowlist (`add`/`apply`/`delete`/`migrate`) because the\nother mutating verbs (`power`, `run`, `restore`) didn't accept the\nflag — pointing users at it would have surfaced a clap parse error.\n\nWith the 16-leaf sweep compl\n[…]\nto see.\n\nNet: -1 constant, +1 better test, error messages now consistent\nacross every mutating verb. No behavioural change on the gate's\nallow/deny decision — that was always driven by MUTATING_VERBS.",
          "is_bot": false,
          "headline": "chore(cli): remove VERBS_WITH_DRY_RUN partial-coverage allowlist",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e9536787e99665eda1fb17886a0b9fbe2f7b0da",
          "body": "Follow-up to the prior CLI.md/MIGRATING.md/GUIDE.md §12 doc pass.\nThree sections that describe mutating workflows in narrative form\nwere still showing real-run examples only; this commit adds short\n`--dry-run` snippets to the two GUIDE sections that benefit most\nfrom a preview pattern (run session a\n[…]\nsection):\n- New \"Previewing before mutating\" one-paragraph pointer with a\n  deep-link to GUIDE.md §12 for the full per-verb behaviour.\n\nNo code change. No CHANGELOG.md edit (git-cliff regenerates it).",
          "is_bot": false,
          "headline": "docs: add inline `--dry-run` examples to GUIDE §4/§7 + README pointer",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b07f5c49a6b3fca982ea1ffbf357df1530d959a2",
          "body": "… swap\n\nThe 16-leaf CLI dry-run sweep landed last night plus the follow-up\nshort-alias swap on `add group` (`-d` reassigned from `--description`\nto `--dry-run`, `--description` now takes `-D`). The user docs needed\nto catch up:\n\nCLI.md (per-command reference):\n- `add group`: `-D/--description` (was \n[…]\neractive and scripted use), with pipe-to-jq examples and a\n  pointer to MIGRATING.md §5.11 for the `add group` exception.\n\nNo CHANGELOG.md edit — git-cliff regenerates it from commits at\nrelease time.",
          "is_bot": false,
          "headline": "docs: document `--dry-run` across all mutating verbs + add-group `-D`…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11a4fcfaafd806365b02d9a5a0227cdb9bda38da",
          "body": "`add group` was the lone outlier in the 16-leaf dry-run sweep: it had\n`--dry-run` (long form only) and no `-d` short alias, because `-d`\nwas already taken by `--description`. The asymmetry made `add group`\nthe only mutating verb across the CLI where `-d` doesn't mean\n`--dry-run`.\n\nSwap the short ali\n[…]\ndid the same swap\nto free `-d` from `--disabled` for `--dry-run`.\n\nBREAKING CHANGE: `manta add group -d <text>` no longer sets the\ngroup description. Use `-D <text>` or `--description <text>` instead.",
          "is_bot": false,
          "headline": "feat(cli)!: add `-d` short alias to `manta add group --dry-run`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3934b90ccfc41609212af767461399b0ecd1fc61",
          "body": "Completes the 16-leaf CLI dry-run sweep. The server endpoint has no\n`dry_run` field on MigrateRestoreRequest, so the preview is purely\nclient-side. The CLI runs the existing required-arg checks, the\ndiagnostic print, and the check_hook_perms validations, then builds\nthe MigrateRestoreRequest, prints\n[…]\nange. No breaking change.\n\nSixteenth and final mutating leaf to gain `--dry-run`. The\nVERBS_WITH_DRY_RUN partial-coverage allowlist in common::read_only\ncan now be removed (separate follow-up commit).",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta restore vcluster`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "794fae8b15b34d876b4c8ca650c1c866137ed7d4",
          "body": "The server endpoint has no `dry_run` field on CreateSessionRequest,\nso the preview is purely client-side. The CLI still runs git2 against\nthe user's local repos (so the preview shows resolved commit IDs),\nskips both confirmation prompts (uncommitted-changes + layer-review),\nprints the CreateSessionR\n[…]\nparse-acceptance tests cover the long flag and the `-d` short\nalias. No server-side change. No breaking change.\n\nFifteenth of 16 mutating leaves that lack `--dry-run`. Only\n`restore vcluster` remains.",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta run session`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a968fb3603c433f59c8d9365aaae536d9baace2",
          "body": "Six leaves (`power {on,off,reset} {nodes,group}`) all converge on a\nsingle dispatch_and_wait() handler. The dry-run branch is added once\nthere: build the PowerRequest, print it via\naction_result::print_with_data, and return Ok(()) before constructing\nthe MantaClient and before the post_power call. N\n[…]\nng flag, short\nalias}. Shared `parse(argv)` helper deduplicates the `try_get_matches_from`\nboilerplate.\n\nBundles leaves 9-14 of the 16-leaf dry-run sweep. Remaining: `run\nsession`, `restore vcluster`.",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to all `manta power` mutating leaves",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f50929c23a1c4c781732e43e17b55948cfdb9e85",
          "body": "The dry-run preview reads `output_opt` to route through\n`action_result::print_with_data`, but the subcommand never declared\n`-o/--output` — so `manta apply ephemeral-environment --image-id X\n--dry-run -o json` would have been rejected by clap at parse time\n(spec verification step #3 explicitly requi\n[…]\ndry-run path still prints raw hostname for\nshell-pipe consumption — output_flag only affects the dry-run preview,\nmatching the design intent.\n\nFold-in for the dry-run leaf one commit prior (37f8fad3).",
          "is_bot": false,
          "headline": "feat(cli): honor `-o` on `apply ephemeral-environment` dry-run",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1e8e3426d10e874191979361106a958ee74eb531",
          "body": "The server endpoint has no `dry_run` support, and a successful POST\nmints a real IMS customize container — non-idempotent state until\ncleanup. The CLI now builds the CreateEphemeralEnvRequest as if real,\nprints it via action_result::print_with_data, and returns Ok(()) before\nthe OpenAPI call. Honors\n[…]\nhat touches every\ninline arm uniformly.\n\nTwo parse-acceptance tests in dispatch/apply/mod.rs's unit-test target\ncover the long flag and the `-d` short alias. No server-side change.\nNo breaking change.",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta apply ephemeral-environment`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d945753cfc285bf8f169e7bafb2efab4a4d9744f",
          "body": "The server endpoint has no `dry_run` support (path-only DELETE\n/redfish-endpoints/{id}; no JSON body), so the preview is purely\nclient-side: the CLI prints the targeted xname via\naction_result::print_with_data and returns Ok(()) before constructing\nthe MantaClient. Honors `-o table | json` uniformly\n[…]\nrse-acceptance tests in dispatch/delete/redfish_endpoint.rs's\nunit-test target cover the long flag and the `-d` short alias. No\nserver-side change. No breaking change (no short-alias swap was\nneeded).",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta delete redfish-endpoints`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9094328b1cd55a3cfa1bc6c1c13f462633abb5a8",
          "body": "The server endpoint has no `dry_run` support, so the preview is\npurely client-side: the CLI builds the DeleteBootParametersRequest\nas if real, prints it via action_result::print_with_data, and\nreturns Ok(()) before the OpenAPI call. Honors `-o table | json`\nuniformly.\n\nThree CLI touchpoints (same sh\n[…]\narse-acceptance tests in\ndispatch/delete/boot_parameters.rs's unit-test target cover the\nlong flag and the `-d` short alias. No server-side change. No\nbreaking change (no short-alias swap was needed).",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta delete boot-parameters`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cc30d0a447544ef336c230aa3463b231477452d1",
          "body": "The server endpoint has no `dry_run` support (path-only DELETE\n/nodes/{id}; no JSON body), so the preview is purely client-side:\nthe CLI prints the targeted xname via action_result::print_with_data\nand returns Ok(()) before the OpenAPI call. Honors `-o table | json`\nuniformly.\n\nThree CLI touchpoints\n[…]\nsed.\n\nTwo parse-acceptance tests in dispatch/delete/node.rs's unit-test\ntarget cover the long flag and the `-d` short alias. No server-side\nchange. No breaking change (no short-alias swap was needed).",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta delete node`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "692015ddd3a8ec453e7cccf5144c9733a4a2a9c4",
          "body": "…main` short alias swaps `-d` -> `-D`\n\nThe server endpoint has no `dry_run` support, so the preview is\npurely client-side: the CLI builds the UpdateRedfishEndpointParams\nas if real, prints it via action_result::print_with_data with a\n\"Would PUT /redfish-endpoints:\" label (distinct from the sibling\n`\n[…]\nin dispatch/apply/redfish_endpoint.rs's\nunit-test target cover the long flag, the `-d` short alias, and\nthe new `-D` alias for `--domain` (which is the breaking-change\nsurface). No server-side change.",
          "is_bot": false,
          "headline": "feat(cli)!: add `--dry-run` to `manta apply redfish-endpoints`; `--do…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2f7832ff82b5170c969e1d8d6c6894b77e36e1c1",
          "body": "…oints handler\n\nThe handler refactor in 8672b417 moved arg extraction up to the\ndispatcher and switched the handler's signature to take an ExecParams\nstruct. The ArgMatchesExt trait import in the handler file became\ndead at that point but was left behind; this drops it. No behaviour\nchange.",
          "is_bot": false,
          "headline": "refactor(cli): remove dead ArgMatchesExt import from add redfish-endp…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c09bba8937a6be86b05d35710d8afe582e80f546",
          "body": "…in` short alias swaps `-d` -> `-D`\n\nThe server endpoint has no `dry_run` support, so the preview is\npurely client-side: the CLI builds the UpdateRedfishEndpointParams\nas if real, prints it via action_result::print_with_data, and\nreturns Ok(()) before the OpenAPI call. Honors `-o table | json`\nunifo\n[…]\n\n\nRead-only mode interaction: with `read_only = true` in cli.toml,\nthe prior chokepoint's dry_run_set walker now finds this flag and\nbypasses the gate. Same command without --dry-run is still blocked.",
          "is_bot": false,
          "headline": "feat(cli)!: add `--dry-run` to `manta add redfish-endpoints`; `--doma…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cae5efaa7c82cdb47b1dea0627911cd11eda2255",
          "body": "The previous commit swapped `--disabled`'s short alias from `-d` to\n`-D` to free `-d` for the new `--dry-run` flag, but no test\nexercised the new `-D` form. The final whole-branch review flagged\nthis as a Minor coverage gap: the swap IS the breaking-change surface,\nand a regression that re-bound `-d` to `--disabled` (re-introducing\nthe collision with `--dry-run`) would slip through.\n\nOne additional parse test in dispatch/add/node.rs::tests locks it down.",
          "is_bot": false,
          "headline": "test(cli): assert `-D` short alias for `add node --disabled` parses",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8dd29ea03482a4b7ef1f5ef1582a50e5dac0ee04",
          "body": "…lias swaps `-d` -> `-D`\n\nThe server endpoint has no `dry_run` support, so the preview is\npurely client-side: the CLI builds the AddNodeRequest as if real,\nprints it via action_result::print_with_data, and returns Ok(())\nbefore the OpenAPI call. Honors `-o table | json` uniformly.\n\nBREAKING CHANGE: \n[…]\n\n\nRead-only mode interaction: with `read_only = true` in cli.toml, the\nprior chokepoint's dry_run_set walker now finds this flag and bypasses\nthe gate. Same command without --dry-run is still blocked.",
          "is_bot": false,
          "headline": "feat(cli)!: add `--dry-run` to `manta add node`; `--disabled` short a…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 964,
      "latest_release_at": "2026-07-12T19:59:26Z",
      "latest_release_tag": "v2.0.0-beta.62",
      "releases_from_tags": false,
      "days_since_last_push": 15,
      "active_weeks_last_year": 43,
      "days_since_latest_release": 22,
      "mean_days_between_releases": 2.3
    },
    "artifacts": {
      "collected": true,
      "structure": [
        "tree.cargo_lib",
        "tree.cargo_main",
        "tree.dockerfile",
        "tree.migrations"
      ],
      "declarations": [
        {
          "name": null,
          "path": "Cargo.toml",
          "tokens": [
            "cargo.workspace"
          ],
          "ecosystem": "crates"
        },
        {
          "name": "manta-cli",
          "path": "crates/manta-cli/Cargo.toml",
          "tokens": [
            "cargo.bin"
          ],
          "ecosystem": "crates"
        },
        {
          "name": "manta-server",
          "path": "crates/manta-server/Cargo.toml",
          "tokens": [
            "cargo.bin",
            "cargo.lib"
          ],
          "ecosystem": "crates"
        },
        {
          "name": "manta-shared",
          "path": "crates/manta-shared/Cargo.toml",
          "tokens": [
            "cargo.lib"
          ],
          "ecosystem": "crates"
        }
      ]
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "readme_badges": {
        "hosts": [],
        "total": 0,
        "header": 0,
        "collected": true,
        "has_inspect_badge": false
      },
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "manta-cli",
          "exists": true,
          "license": "non-standard",
          "keywords": [
            "cli",
            "productivity"
          ],
          "ecosystem": "crates",
          "categories": [],
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/manta-cli",
          "declared_type": null,
          "is_deprecated": false,
          "latest_version": "1.71.1",
          "repository_url": "https://github.com/eth-cscs/manta",
          "versions_count": 127,
          "total_downloads": 4132,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 417,
          "first_published_at": "2025-09-23T19:54:27.961273Z",
          "latest_published_at": "2026-07-12T19:37:32.828828Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 22
        },
        {
          "name": "manta-server",
          "exists": true,
          "license": "non-standard",
          "keywords": [],
          "ecosystem": "crates",
          "categories": [],
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/manta-server",
          "declared_type": null,
          "is_deprecated": false,
          "latest_version": "2.0.0-beta.62",
          "repository_url": "https://github.com/eth-cscs/manta",
          "versions_count": 2,
          "total_downloads": 33,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 11,
          "first_published_at": "2026-06-28T08:46:41.202808Z",
          "latest_published_at": "2026-07-12T19:37:34.479485Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 22
        },
        {
          "name": "manta-shared",
          "exists": true,
          "license": "non-standard",
          "keywords": [],
          "ecosystem": "crates",
          "categories": [],
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/manta-shared",
          "declared_type": null,
          "is_deprecated": false,
          "latest_version": "2.0.0-beta.62",
          "repository_url": "https://github.com/eth-cscs/manta",
          "versions_count": 57,
          "total_downloads": 1259,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 420,
          "first_published_at": "2026-05-18T18:55:33.709559Z",
          "latest_published_at": "2026-07-12T19:37:29.324293Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 22
        }
      ]
    },
    "popularity": {
      "forks": 4,
      "stars": 23,
      "watchers": 8,
      "fork_history": {
        "days": [
          {
            "date": "2023-07-06",
            "count": 1
          },
          {
            "date": "2023-07-19",
            "count": 1
          },
          {
            "date": "2023-09-27",
            "count": 1
          },
          {
            "date": "2024-10-18",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 4,
        "total_forks": 4
      },
      "star_history": null,
      "open_issues_and_prs": 9
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [
        "crates/manta-cli/openapi.json"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "Cargo.toml",
        "crates/manta-cli/Cargo.toml",
        "crates/manta-server/Cargo.toml",
        "crates/manta-shared/Cargo.toml"
      ],
      "largest_source_bytes": 40182,
      "source_files_sampled": 228,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 2147
    },
    "dependencies": {
      "manifests": [
        "Cargo.toml"
      ],
      "advisories": {
        "error": "No resolved dependencies carried a version and a supported ecosystem",
        "scope": "repository_graph",
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 47,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "crates"
      ],
      "dependencies": [
        {
          "name": "manta-shared",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "nodeset",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.5.0"
        },
        {
          "name": "chrono",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.4.41"
        },
        {
          "name": "anyhow",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.44"
        },
        {
          "name": "reqwest",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.13.4"
        },
        {
          "name": "serde",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.219"
        },
        {
          "name": "serde_json",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.140"
        },
        {
          "name": "serde_yaml",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.9.34"
        },
        {
          "name": "tracing",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1"
        },
        {
          "name": "tokio",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.45"
        },
        {
          "name": "tokio-util",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.7.4"
        },
        {
          "name": "minijinja",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "uuid",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.16.0"
        },
        {
          "name": "git2",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.21"
        },
        {
          "name": "dialoguer",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.12.0"
        },
        {
          "name": "futures",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.3.31"
        },
        {
          "name": "toml_edit",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.22.27"
        },
        {
          "name": "clap",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "4.5.60"
        },
        {
          "name": "clap_complete",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "4.5.66"
        },
        {
          "name": "clap_mangen",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.3.0"
        },
        {
          "name": "comfy-table",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "7.2.2"
        },
        {
          "name": "crossterm",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.29.0"
        },
        {
          "name": "execute",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.2.13"
        },
        {
          "name": "is_executable",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.1"
        },
        {
          "name": "config",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.15.19"
        },
        {
          "name": "tokio-tungstenite",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.29"
        },
        {
          "name": "self_update",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.44"
        },
        {
          "name": "xz2",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1"
        },
        {
          "name": "tar",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.4"
        },
        {
          "name": "semver",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0"
        },
        {
          "name": "progenitor-client",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.14"
        },
        {
          "name": "manta-shared",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "manta-backend-dispatcher",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "csm-rs",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "ochami-rs",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "axum",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.8"
        },
        {
          "name": "axum-server",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.8"
        },
        {
          "name": "tower-http",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.6"
        },
        {
          "name": "tokio",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tokio-util",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "futures",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "utoipa",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "utoipa-swagger-ui",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "9"
        },
        {
          "name": "rustls",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.23"
        },
        {
          "name": "base64",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "chrono",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "rdkafka",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "comfy-table",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "7.2.2"
        },
        {
          "name": "globset",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.4"
        },
        {
          "name": "hostlist-parser",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1.6"
        },
        {
          "name": "regex",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "reqwest",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_yaml",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tracing",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "manta-backend-dispatcher",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "base64",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_yaml",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "chrono",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "utoipa",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tracing",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tracing-subscriber",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "config",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "directories",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "toml_edit",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "reqwest",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "thiserror",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "anyhow",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "axum",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "axum-server",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "base64",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "chrono",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "clap",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "clap_complete",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "clap_mangen",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "comfy-table",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "config",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "crossterm",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "dialoguer",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "execute",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "futures",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "git2",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "hostlist-parser",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "is_executable",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "nodeset",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "progenitor-client",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "reqwest",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "rustls",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "self_update",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "semver",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "serde",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "serde_json",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "serde_yaml",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tar",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tokio",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tokio-tungstenite",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tokio-util",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "toml_edit",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tower-http",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tracing",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "utoipa-swagger-ui",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "uuid",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "xz2",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "assert_cmd",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "http-body-util",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "openapiv3",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "predicates",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "prettyplease",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "progenitor",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "syn",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tempfile",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "toml",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tower",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "wiremock",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 47,
        "direct_count": 36,
        "indirect_count": 11
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 20,
        "open_issues": 7,
        "closed_ratio": 0.92,
        "closed_issues": 81,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "Masber",
          "commits": 1391,
          "avatar_url": "https://avatars.githubusercontent.com/u/722064?v=4"
        },
        {
          "type": "User",
          "login": "ManuelSopenaBallesteros",
          "commits": 690,
          "avatar_url": "https://avatars.githubusercontent.com/u/196793114?v=4"
        },
        {
          "type": "User",
          "login": "miguelgila",
          "commits": 20,
          "avatar_url": "https://avatars.githubusercontent.com/u/7137318?v=4"
        },
        {
          "type": "User",
          "login": "rjanalik",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/2372198?v=4"
        },
        {
          "type": "User",
          "login": "aescoubas",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/69113198?v=4"
        },
        {
          "type": "User",
          "login": "matteo-chesi",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/17476259?v=4"
        }
      ],
      "contributors_sampled": 6,
      "top_contributor_share": 0.659
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "cleanup-ghcr.yml",
        "docker-publish.yml",
        "docs.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 1/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "41af6045b118591e9f529b44d75efe0d75d04a7f",
        "ran_at": "2026-08-04T00:56:13Z",
        "aggregate_score": 4.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "recent_prs": {
        "merged_7d": 0,
        "decided_7d": 0,
        "merged_30d": 1,
        "authors_30d": 1,
        "decided_30d": 1,
        "sample_size": 21,
        "window_days": 30,
        "sample_exhausted": false,
        "authors_probed_30d": 1,
        "newcomer_merged_30d": 0,
        "bot_prs_excluded_30d": 0,
        "newcomer_authors_30d": 0,
        "newcomer_decided_30d": 0
      },
      "ci_last_run_at": "2026-08-02T05:09:32Z",
      "oldest_open_prs": [
        {
          "number": 110,
          "created_at": "2026-07-17T22:27:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 111,
          "created_at": "2026-07-18T23:50:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-17T12:03:06Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 21,
          "created_at": "2024-02-10T00:40:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 23,
          "created_at": "2024-02-10T16:03:16Z",
          "last_comment_at": "2024-02-12T08:02:03Z",
          "last_comment_author": "miguelgila"
        },
        {
          "number": 64,
          "created_at": "2024-04-10T21:48:19Z",
          "last_comment_at": "2026-07-17T20:17:14Z",
          "last_comment_author": "rjanalik"
        },
        {
          "number": 94,
          "created_at": "2025-04-01T22:36:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 107,
          "created_at": "2026-07-17T22:22:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 108,
          "created_at": "2026-07-17T22:22:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 109,
          "created_at": "2026-07-17T22:22:48Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/eth-cscs/manta",
    "host": "github.com",
    "name": "manta",
    "owner": "eth-cscs"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": "The weighted overall 67 is calibrated to 78 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 67,
            "calibrated": 78,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 78,
      "inputs": {
        "security": 47,
        "vitality": 88,
        "community": 42,
        "governance": 66,
        "calibration": "2026-08-02",
        "engineering": 81,
        "ai_readiness": 79,
        "weighted_overall_raw": 67
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 88,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 87,
            "inputs": {
              "commits_last_year": 964,
              "human_commit_share": 0.89,
              "days_since_last_push": 15,
              "active_weeks_last_year": 43
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 15 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 15
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "43/52 weeks with commits",
                "points": 29.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 43
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "964 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 964
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v2.0.0-beta.62",
              "releases_from_tags": false,
              "days_since_latest_release": 22,
              "mean_days_between_releases": 2.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 22 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 22
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 17,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 17 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 17
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "weak",
        "name": "Community & Adoption",
        "value": 42,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 30,
            "inputs": {
              "forks": 4,
              "stars": 23,
              "watchers": 8,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "23 stars",
                "points": 21.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 23
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "4 forks",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "8 watchers",
                "points": 4.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": 0,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "readme_badge_services": [],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (BSD-3-Clause)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "BSD-3-Clause"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "weak",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 49,
            "inputs": {
              "packages": [
                "manta-cli",
                "manta-server",
                "manta-shared"
              ],
              "dependents": null,
              "ecosystems": "crates",
              "total_downloads": 5424,
              "monthly_downloads": 848
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "848 downloads/month across crates",
                "points": 39.1,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 848,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 66,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 31,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 6,
              "top_contributor_share": 0.659
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 66% of commits",
                "points": 7.7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 66
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "6 contributors",
                "points": 8.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 77,
            "inputs": {
              "merged_prs": 20,
              "open_issues": 7,
              "closed_issues": 81,
              "prs_merged_7d": 0,
              "prs_decided_7d": 0,
              "prs_merged_30d": 1,
              "prs_decided_30d": 1,
              "issue_closed_ratio": 0.92,
              "closed_unmerged_prs": 1,
              "first_time_authors_30d": 0,
              "first_time_prs_merged_30d": 0,
              "first_time_prs_decided_30d": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "92% of issues closed",
                "points": 38.6,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 92
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "20/21 decided PRs merged",
                "points": 28.6,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 20,
                      "decided": 21
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 1/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "followers": 181,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "eth-cscs",
              "public_repos": 142,
              "account_age_days": 4668
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "181 followers of eth-cscs",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 181,
                      "login": "eth-cscs"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "142 public repos, account ~12 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 142
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 12
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "manta-cli",
                "manta-server",
                "manta-shared"
              ],
              "ecosystems": "crates",
              "any_deprecated": false,
              "min_days_since_publish": 22
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "3 package(s) on crates",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 3,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 22 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 22
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "127 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 127
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 81,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "exceptional",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "alps",
                "cli",
                "csm",
                "productivity",
                "cscs"
              ],
              "has_wiki": true,
              "homepage": "https://eth-cscs.github.io/manta/",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://eth-cscs.github.io/manta/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "weak",
        "name": "Security",
        "value": 47,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "weak",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 47,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 4.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 1/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 6
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 79,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.989,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 2147
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "88 of 89 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 88,
                      "sampled": 89
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.06,
              "toolchain_manifests": [
                "Cargo.toml",
                "crates/manta-cli/Cargo.toml",
                "crates/manta-server/Cargo.toml",
                "crates/manta-shared/Cargo.toml"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Cargo.toml, crates/manta-cli/Cargo.toml, crates/manta-server/Cargo.toml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "Cargo.toml, crates/manta-cli/Cargo.toml, crates/manta-server/Cargo.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Rust (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "6 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 6,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "exceptional",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Rust",
              "largest_source_bytes": 40182,
              "source_files_sampled": 228,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Rust (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/228 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 228,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "excellent",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": [
                "crates/manta-cli/openapi.json"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "crates/manta-cli/openapi.json",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "crates/manta-cli/openapi.json"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "labels": [
        "library",
        "cli",
        "network-service",
        "tui"
      ],
      "scores": {
        "cli": 14,
        "tui": 4,
        "library": 15,
        "network-service": 7
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "declared",
          "label": "library",
          "source": "cargo.lib",
          "weight": 6
        },
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:crates",
          "weight": 6
        },
        {
          "tier": "dependencies",
          "label": "cli",
          "source": "dep:clap",
          "weight": 4
        },
        {
          "tier": "dependencies",
          "label": "network-service",
          "source": "dep:axum",
          "weight": 4
        },
        {
          "tier": "dependencies",
          "label": "tui",
          "source": "dep:crossterm",
          "weight": 4
        },
        {
          "tier": "declared",
          "label": "cli",
          "source": "cargo.bin",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "cli",
          "source": "tree.cargo_main",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "library",
          "source": "tree.cargo_lib",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "network-service",
          "source": "api_schema",
          "weight": 3
        },
        {
          "tier": "description",
          "label": "cli",
          "source": "description:cli",
          "weight": 2
        },
        {
          "tier": "tags",
          "label": "cli",
          "source": "tag:cli",
          "weight": 2
        }
      ],
      "artifacts": [
        {
          "path": "Cargo.toml",
          "labels": [],
          "ecosystem": "crates"
        },
        {
          "path": "crates/manta-cli/Cargo.toml",
          "labels": [
            "cli"
          ],
          "ecosystem": "crates"
        },
        {
          "path": "crates/manta-server/Cargo.toml",
          "labels": [
            "library",
            "cli"
          ],
          "ecosystem": "crates"
        },
        {
          "path": "crates/manta-shared/Cargo.toml",
          "labels": [
            "library"
          ],
          "ecosystem": "crates"
        }
      ],
      "confidence": "high",
      "host_extension": false,
      "runs_as_process": true,
      "consumed_by_code": true
    },
    "metrics_version": "2.3.1"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "No resolved dependencies carried a version and a supported ecosystem"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-04T00:56:22.587349Z",
  "schema_version": "0.30.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/e/eth-cscs/manta.svg",
  "full_name": "eth-cscs/manta",
  "license_state": "standard",
  "license_spdx": "BSD-3-Clause"
}

Registros relacionados

Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con eth-cscs/manta. Leer en paralelo →

98nrwl/nxThe Monorepo Platform that amplifies both developers and AI agents. Nx optimizes your builds, scales your CI, and fixes failed PRs automatically. Ship in half the time.Excepcional98getsentry/sentry-cliA command line utility to work with Sentry.Excepcional98microsoft/agent-governance-toolkitAI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.Excepcional96vercel/vercelDevelop. Preview. Ship.Excepcional96wasmerio/wasmer🚀 Fast, secure, lightweight containers based on WebAssemblyExcepcional95vectordotdev/vectorA high-performance observability data pipeline.Excepcional

Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.

Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v2.3.1, esquema v0.30.0 — metodología completa · wiki de métricas.

Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — crates.io.