no42-org / blittermib

Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 5 paquetes directos y 14 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.

Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 19 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 0 tienen avisos conocidos, de los cuales 0 son directas.

Ningún aviso conocido afecta a las dependencias evaluadas.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [
        "mib",
        "network-monitoring",
        "snmp",
        "self-hosting",
        "mcp"
      ],
      "is_fork": false,
      "size_kb": 6666,
      "has_wiki": false,
      "homepage": "https://blittermib.eu",
      "languages": {
        "Go": 1276591,
        "CSS": 227958,
        "HTML": 31777,
        "Shell": 37028,
        "templ": 91680,
        "Makefile": 13940,
        "Dockerfile": 4928,
        "JavaScript": 153615
      },
      "pushed_at": "2026-07-24T21:28:36Z",
      "created_at": "2026-04-30T10:02:23Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-24T21:28:39Z",
      "description": "Pixelperfect MIB browser - no strings attached",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go",
        "CSS"
      ]
    },
    "owner": {
      "blog": "https://blog.no42.org",
      "name": "no42",
      "type": "Organization",
      "login": "no42-org",
      "company": null,
      "location": "Milky Way, Earth, Europe, Germany",
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/35508634?v=4",
      "created_at": "2018-01-16T22:27:04Z",
      "is_verified": null,
      "public_repos": 28,
      "account_age_days": 3113
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.17.7",
          "kind": "patch",
          "published_at": "2026-07-20T19:31:16Z"
        },
        {
          "tag": "v0.17.6",
          "kind": "patch",
          "published_at": "2026-07-19T22:52:16Z"
        },
        {
          "tag": "v0.17.5",
          "kind": "patch",
          "published_at": "2026-07-15T20:56:34Z"
        },
        {
          "tag": "v0.17.4",
          "kind": "patch",
          "published_at": "2026-07-09T11:26:41Z"
        },
        {
          "tag": "v0.17.3",
          "kind": "patch",
          "published_at": "2026-07-05T10:24:30Z"
        },
        {
          "tag": "v0.17.2",
          "kind": "patch",
          "published_at": "2026-07-02T17:54:57Z"
        },
        {
          "tag": "v0.17.1",
          "kind": "patch",
          "published_at": "2026-07-02T09:42:52Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2026-07-01T16:15:25Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2026-06-29T17:43:45Z"
        },
        {
          "tag": "v0.15.2",
          "kind": "patch",
          "published_at": "2026-06-27T20:16:05Z"
        },
        {
          "tag": "v0.15.1",
          "kind": "patch",
          "published_at": "2026-06-25T20:04:25Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2026-06-22T13:07:25Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2026-06-22T10:00:21Z"
        },
        {
          "tag": "v0.13.1",
          "kind": "patch",
          "published_at": "2026-06-17T16:45:40Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2026-06-16T23:45:19Z"
        },
        {
          "tag": "v0.12.2",
          "kind": "patch",
          "published_at": "2026-06-12T12:44:33Z"
        },
        {
          "tag": "v0.12.1",
          "kind": "patch",
          "published_at": "2026-06-12T10:08:48Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2026-06-11T20:10:54Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2026-06-10T22:32:02Z"
        },
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2026-06-08T00:32:50Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2026-06-06T22:53:20Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-06-06T18:21:27Z"
        },
        {
          "tag": "v0.8.1",
          "kind": "patch",
          "published_at": "2026-06-06T01:18:36Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-06-06T00:55:16Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2026-06-06T00:02:12Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-06-05T23:41:06Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-06-04T16:22:00Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-06-04T00:17:39Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-06-03T15:09:21Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-06-01T09:53:33Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-05-18T20:16:30Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-05-09T20:11:42Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-05-08T23:30:02Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2026-05-08T12:02:05Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-05-07T21:52:03Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-05-07T16:14:53Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "f9a002b9f7cd90e169aee92428bdc1c2f481f0c7",
          "body": "Add the maintainer's Ko-fi page (ko-fi.com/indigo423) alongside GitHub\nSponsors, so donors without a GitHub account can contribute too:\n\n- .github/FUNDING.yml → ko_fi: indigo423\n- README \"Support\" section → Ko-fi link\n\nDonation-only, no rewards. The software stays fully free under MIT.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat: add Ko-fi as a second donation option (#118)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-24T21:28:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62738121746d57307300cd9d333c59405150def3",
          "body": "… (#117)\n\nWire the repo to the maintainer's GitHub Sponsors profile (indigo423):\n\n- .github/FUNDING.yml → Sponsor button (github: indigo423)\n- README \"Support\" section linking Sponsors and SPONSORS.md\n- SPONSORS.md acknowledgment list (donation-only, no tiers/perks)\n\nThe software stays fully free under MIT. Closes #116.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat: add donation-only funding (Sponsor button, README, SPONSORS.md)…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-24T16:35:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe5f3f9a67c4f8bf4fb47bc23a9ffac12f84c04c",
          "body": "Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.53.0 to 1.54.0.\n- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)\n- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.53.0...v1.54.0)\n\n---\nupdated-dependencies:\n- dependency-name: modernc.org/sqlite\n  depende\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build: bump modernc.org/sqlite from 1.53.0 to 1.54.0 (#115)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-23T16:10:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bf00172e4d415b1ee49efa76031fc4e739110573",
          "body": "CFLite coverage mode publishes 0% for our native Go fuzzer: it builds an\nllvm-cov report (-fcoverage-mapping, a clang flag), but the fuzzer's Go\ncode is compiled by the Go toolchain, which llvm can't instrument — so\nevery Go file reads 0% regardless of corpus (an empty run and a\n334-input run produc\n[…]\nGo's own tooling (go test -cover);\nleft out deliberately rather than shipping a broken llvm-cov site.\n\nRefs #108\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "ci: drop the ClusterFuzzLite coverage site (#114)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-21T23:11:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1df14cf7dd80fd5cc326574c16099279484053c6",
          "body": "The report is served as coverage/latest/report/linux/index.html; link\nthe directory, not the non-existent report.html.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "docs(cflite): correct the coverage report URL (#113)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-21T22:46:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2eaaff7b06871b4d5a8b51edc0a7e856358fb8f2",
          "body": "Moves ClusterFuzzLite from artifact storage to same-repo git storage so\nthe coverage report is web-viewable, not just a downloadable artifact.\n\n- Corpus now lives on the orphan `clusterfuzzlite` branch; coverage HTML\n  on `gh-pages`. Both pushed with GITHUB_TOKEN — no PAT, no separate\n  repo (the tr\n[…]\npires. Verified via dispatch\nafter merge (Pages enablement + a coverage run that pushes to gh-pages).\n\nRefs #108\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "ci: publish ClusterFuzzLite coverage to a gh-pages site (#112)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-21T22:31:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "19a064c92ea163611cab7a7357805b09e0d27867",
          "body": "Completes the ClusterFuzzLite set. Weekly coverage mode replays the\npersisted corpus (cifuzz-corpus-fuzz_parse) through a\ncoverage-instrumented build and reports which lines of internal/walk the\naccumulated inputs reach — the feedback that tells you whether the corpus\nis actually exercising the pars\n[…]\nsumes. Report generation runs on\nthe default branch only, so it's verified by a dispatch after merge.\n\nRefs #108\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "ci: add ClusterFuzzLite coverage reports (#111)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-21T22:01:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0d7f827d85928d5a6398bb41caa67b81657d4bb2",
          "body": "PR-mode (#109) fuzzes changed code from a cold corpus. This adds the\npersistence layer that makes ClusterFuzzLite worth more than native\ngo-fuzz:\n\n- cflite_batch.yml — daily batch fuzzing of HEAD that accumulates a\n  corpus and PERSISTS it as a GitHub Actions artifact\n  (cifuzz-corpus-<target>). The\n[…]\noad/download can only be\nexercised on the default branch, so it's verified by a dispatch after\nmerge.\n\nRefs #108\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "ci: add ClusterFuzzLite batch fuzzing + corpus pruning (#110)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-21T21:36:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7942f2c6f4cb992e9fe5fbd3e02b9defebeb0d45",
          "body": "Native `go test -fuzz` (#107) starts from a cold corpus every run;\nClusterFuzzLite runs the same fuzzer as a libFuzzer binary via OSS-Fuzz's\nengine, self-hosted in our CI, so a PR touching internal/walk is fuzzed\nagainst a persistent corpus before it merges. No external acceptance\nneeded (unlike OSS\n[…]\n and\nrewrites the fuzz test in-container, so it runs against a copy — none of\nthat lands in the repo.\n\nRefs #108\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "ci: onboard ClusterFuzzLite (PR mode) for the walk parser (#109)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-21T21:24:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "423ed784969efe6123b4a46fcc8eb5fcda50cea3",
          "body": "Adds Go native fuzzing for the two pure functions that turn untrusted\ninput into structured data:\n\n- internal/walk.Parse — the snmpwalk capture pasted verbatim into /walk,\n  reachable unauthenticated over HTTP. FuzzParse asserts the parser's\n  contract, not just no-panic: determinism, that no admitt\n[…]\ns is free: the seed corpora run\n  deterministically under `make test`, which the gates already run.\n\nCloses #106\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "test(fuzz): fuzz the untrusted-input parsers (#107)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-21T16:27:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "31d66da604b78e41194e300cc7d2aba55b593e93",
          "body": "The generated-file exclusion added in #104 didn't clear the 64\ngo/useless-assignment-to-local alerts: the config's `paths-ignore` is\nignored for compiled languages, so CodeQL analysed the generated\n*_templ.go files anyway (the alerts re-appeared at the merge commit).\n\nFix it a layer up. useless-assi\n[…]\nng a no-op for Go, it was dead config.\n\nThe 64 alerts transition to fixed on the next scan of main.\n\nCloses #103\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "ci: run CodeQL's security suite, not security-and-quality (#105)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-21T16:08:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f05e28b53917522161b87a36fad3d5cbcd0f3497",
          "body": "Three of the code-scanning findings from the CodeQL + Scorecard\nworkflows are tooling artefacts or genuine hardening, fixable in-tree\nrather than by dismissing alerts:\n\n- CodeQL analysed generated `*_templ.go`, producing 64\n  go/useless-assignment-to-local on the templ render scaffolding —\n  noise n\n[…]\n here. Informational Scorecard\nitems (repo age, solo-maintainer code review, fuzzing) are left as-is.\n\nRefs #103\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "ci: cut code-scanning noise at the source (#104)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-21T15:58:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "efe5b29235902c1ba0936e989d4778a50ba8361c",
          "body": "The version-unique `staging-X.Y.Z` tag left a dead tag in GHCR per\nrelease forever — there is no delete-one-tag operation, and deleting the\nversion would take the promoted tags with it. Switch to a single mutable\n`staging`, overwritten per release, matching preview.yml's `rc`.\n\nThat reintroduces the\n[…]\n latest / staging all resolve\n  to the same digest — which is what keeps the cosign signature valid\n\nCloses #101\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "ci: use one mutable staging tag, guarded by a version label (#102)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-20T23:59:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "27cdfaa537130ffbbadcd02aa7c00ffe3a753add",
          "body": "The `docker` job pushed `X.Y.Z`, `X.Y`, and `latest` as soon as the tag\nbuild succeeded. The GitHub Release was already draft-first, but the\nimage ignored that gate — so a tag push moved `latest` for every user\nbefore anyone had reviewed the release. Discarding the draft could not\nundo it.\n\nrelease.\n[…]\nR records for that version, and both tag-set\nbranches were dry-run. actionlint and zizmor are clean.\n\nCloses #99\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "ci: gate the release image tags on publishing the release (#100)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-20T23:22:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3a4a3ed73d22918500331231a7b927899a10df03",
          "body": "* docs: add contribution, security, and community baseline files\n\nThe repo had no root CONTRIBUTING.md, no SECURITY.md, no issue forms,\nand no default PR template. The DCO requirement in particular was\ndocumented nowhere despite a pre-commit hook enforcing `git commit -s`.\n\n- CONTRIBUTING.md — issue\n[…]\nly in CI because the local run used --no-online-audits.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "chore: bring the repository up to maintainer standards (#98)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-20T22:55:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fdca5b1a34a42301446c68cda1428e2fa0dea194",
          "body": "…module (#96)\n\n* fix(store,compile): make module replace independent of FK state and duplicate descriptors\n\nv0.17.6 fixed the per-connection PRAGMA that silently disabled FK\ncascades, but it left the delete-then-insert in ReplaceModule DEPENDING\non that connection state, and pkg.onms.eu still hit th\n[…]\n make verify, make gosec (0 issues), make lint all pass.\n\nAssisted-by: ClaudeCode:claude-fable-5\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(store,compile): keep malformed MIBs from discarding their entire …",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-20T19:21:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e910c97b9fa346918add62abcec757a85af2dd28",
          "body": "…nnection loss (#95)\n\n* fix(store): carry SQLite PRAGMAs in the DSN so FK cascades survive\n\nRe-importing an existing module with \"replace\" could fail with\n`UNIQUE constraint failed: symbol.module_name, symbol.name`, e.g.\n\n    store: insert symbol CISCO-LWAPP-AP-MIB::ciscoLwappApMIB:\n    constraint f\n[…]\nass; the\nconnection-loss test survives -count=20 -race.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(store): carry SQLite PRAGMAs in the DSN so FK cascades survive co…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-19T22:44:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "17e72ce12093ff4548b97e9489718db8909d6069",
          "body": "Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.1 to 3.0.2.\n- [Release notes](https://github.com/softprops/action-gh-release/releases)\n- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/so\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump softprops/action-gh-release from 3.0.1 to 3.0.2 (#92)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-16T12:24:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fbe79ebe0fc9d141c1e92e62898c83c990bf5f7c",
          "body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.5.0 to 7.0.0.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/924ae3a1cded613372ab5595356fb5720e22ba16...b7ad1dad31e06c5925ef5d2fc7ad053ef454303e)\n\n---\nupdated\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/setup-go from 6.5.0 to 7.0.0 (#93)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-16T12:24:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "52c8fdc5b679f0751969ec9291cd09121a600a26",
          "body": "… trap dropdowns (#91)\n\nAn object whose SYNTAX is an imported TEXTUAL-CONVENTION (e.g.\nInetAddressType, TruthValue) previously showed only the bare type name:\nno enumerated values, no link to the TC's definition, and a free-text\nbox in the trap simulator. smidump's per-module XML never inlines a\nfor\n[…]\ndropdown and snmptrap `i` would mistype them).\n\nGeneralizes to every imported enum TC, not just InetAddressType.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(web): resolve imported TC syntax to show enum values, links, and…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-15T20:20:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "44c6e89b52d369fa64cdbfbc0a82a20490917b18",
          "body": "Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.1.0 to 4.2.0.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd8\n[…]\nsemver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": true,
          "headline": "ci: bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#89)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-09T11:10:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bb12844c382d0c085d2e63886cd2aea5241c401d",
          "body": "Bumps [docker/login-action](https://github.com/docker/login-action) from 4.2.0 to 4.4.0.\n- [Release notes](https://github.com/docker/login-action/releases)\n- [Commits](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...af1e73f918a031802d376d3c8bbc3fe56130a9b0)\n\n[…]\nsemver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": true,
          "headline": "ci: bump docker/login-action from 4.2.0 to 4.4.0 (#88)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-09T11:08:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a6143e3942d34c85d060a25fdfcb0ded40fd7a08",
          "body": "…(#90)\n\n* fix(deps): bump Go toolchain to 1.26.5 for GO-2026-5856 (crypto/tls)\n\ngovulncheck flags GO-2026-5856 (Encrypted Client Hello privacy leak in\ncrypto/tls), fixed in go1.26.5. The go directive drives setup-go via\ngo-version-file, so bumping it upgrades every CI job's toolchain.\n\nAssisted-by: \n[…]\n-alpine is published on Docker Hub (manifest verified).\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(deps): bump Go toolchain to 1.26.5 for GO-2026-5856 (crypto/tls) …",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-09T11:03:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "63ab1961aa14360716bac69d954f4bc921aeed13",
          "body": "* fix(search): prevent as-you-type search from stalling the site\n\nA burst of typeahead requests could stall every request for ~60s. The\nchain: sanitizeFTS turns each token into a prefix match, so a one-rune\ntoken becomes `p*`, which bm25-scores a large slice of a multi-million-\nsymbol corpus (6-17s \n[…]\n-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>\nCo-authored-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(search): prevent as-you-type search from stalling the site (#87)",
          "author_name": "MIke Huot",
          "author_login": "mhuot",
          "committed_at": "2026-07-05T10:14:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a1afa118ccbcc0ce2c6c12f70c75f9d98c417e90",
          "body": "… ETag (follow-up to #83) (#86)\n\n* fix(web): stamp oid_tree_generation at open; never mint the shared g0 ETag\n\nA database built before the oid_tree_generation token existed (#83)\ncarries oid_tree_version=3 but no generation key, so both tree endpoints\nserved the SHARED zero-generation ETag (\"oidtree\n[…]\nine setup is the file's house\nstyle). make verify green.\n\nAssisted-by: ClaudeCode:claude-fable-5\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(web): stamp oid_tree_generation at open; never mint the shared g0…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-02T17:15:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d9880dc532bc6237b7cd31d1daf4bea8ee9bf5c",
          "body": "… (#83)\n\n* feat(web): one-shot OID-tree spine preload + cacheable tree responses\n\nDeep-linking into the workspace OID tree settled slowly: the client\nrebuilt the apex→focus spine by calling /api/v1/tree once per level,\nstrictly sequentially (expandSpineTo → loadAnchored), so a ~12-segment\nfocus cost\n[…]\n (shared validator is now by design). make verify green.\n\nAssisted-by: ClaudeCode:claude-fable-5\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(web): one-shot OID-tree spine preload + cacheable tree responses…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-02T09:22:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0f7fed1754d320fb60e6e65fe71f2291e2c7a648",
          "body": "Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.1.0 to 4.2.0.\n- [Release notes](https://github.com/docker/setup-qemu-action/releases)\n- [Commits](https://github.com/docker/setup-qemu-action/compare/06116385d9baf250c9f4dcb4858b16962ea869c3...96fe6ef7f33517b61c61be\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump docker/setup-qemu-action from 4.1.0 to 4.2.0 (#84)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-02T09:22:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9be715674ce73f391f04e5f7ab51d84307ddcf64",
          "body": "Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.2.0 to 7.3.0.\n- [Release notes](https://github.com/docker/build-push-action/releases)\n- [Commits](https://github.com/docker/build-push-action/compare/f9f3042f7e2789586610d6e8b85c8f03e5195baf...53b7df96c91f9c12dcc8a0\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump docker/build-push-action from 7.2.0 to 7.3.0 (#85)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-02T09:22:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "952d15ef629165023f01b757d92e4c641d43408d",
          "body": "…ount badge (#82)\n\nThe workspace OID-tree rail truncated long node labels with an ellipsis and\ncould never scroll horizontally: the pane set `overflow:auto` but the name\ncolumn clamped every row to the pane width, so nothing overflowed.\n\nLet rows size to their content and scroll horizontally to reve\n[…]\nadges pin at the right edge while labels scroll beneath. Golden snapshots\nregenerated for the head-title change.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(web): workspace OID tree — horizontal scroll with pinned child-c…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-01T15:33:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f75c996fdfb3ba849f45effd7bcd90f3e7434293",
          "body": "Auto-refresh by .github/workflows/refresh-pen.yml.\n\nAssisted-by: ClaudeCode:claude-opus-4-7\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(iana): refresh PEN registry snapshot (#81)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-01T15:03:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9a1ba1476010b4566f5ba9fe68c404f0763996a",
          "body": "…ace navigation (#77)\n\n* feat(tree): materialise oid_node trie for full-tree navigation\n\nThe standalone OID browser (/tree) walked symbol.parent_oid, which only\nconnects nodes that have a symbol row — so orphaned vendor subtrees were\nunreachable, the JSON path ran an N+1 HasChildren probe per child,\n[…]\n\nso this was latent since the folded-tree query landed.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat: global OID tree — materialised oid_node trie + full-tree worksp…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-07-01T12:19:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2b3553b3f3bd47f406cf1134b8bf9c87e40ef019",
          "body": "…follow-up to #78) (#80)\n\n* fix(import): honor BLITTERMIB_COMPILE_TIMEOUT in the mib-ingest CLI\n\nPR #78 made the compile hang-backstop floor configurable via\nBLITTERMIB_COMPILE_TIMEOUT, but only in the internal/mibimport engine.\nThe mib-ingest CLI carried its own twin scaledCompileTimeout that still\n[…]\n caught.\n\nSurfaced by the max-effort review of this PR.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(import): honor BLITTERMIB_COMPILE_TIMEOUT in the mib-ingest CLI (…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-29T16:07:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fe630c3d758fdbe5a8c621738b02caa6817c3739",
          "body": "…PILE_TIMEOUT) (#78)\n\nscaledCompileTimeout's hang-backstop floor is hard-coded at 5m, so very\nlarge single-file MIBs that legitimately exceed it can never be imported —\ne.g. METASWITCH-MIB (~92k OBJECT-TYPEs, ~1.2M lines, 46MB) compiles cleanly\nin smidump in ~10min but is killed at 5m and quarantine\n[…]\ne 1s/file scaling (compileFloor pinned for hermeticity).\n\n\nClaude-Session: https://claude.ai/code/session_01NiuZzdfAkV7meYb2DTJwYJ\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(import): make compile-timeout floor configurable (BLITTERMIB_COM…",
          "author_name": "MIke Huot",
          "author_login": "mhuot",
          "committed_at": "2026-06-29T15:28:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "21909a2bbdbce3ad16e6121ac5cf6c598cb6195d",
          "body": "…#79)\n\nMake the import move idempotent so a MIB filed by one pass is not\nquarantined as a spurious failure by another.\n\nThe move-skip keys on source absence (the file this pass owns being\ngone) rather than destination presence, and moveFile's post-write\nsource cleanup is best-effort so a completed c\n[…]\nlse \"failed\"). Adds a\nrace regression test exercised via a test seam.\n\nCo-authored-by: Mike Huot <mhuot@mhuot.net>\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(import): don't quarantine a MIB a concurrent pass already filed (…",
          "author_name": "MIke Huot",
          "author_login": "mhuot",
          "committed_at": "2026-06-29T14:50:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0196821b8ce75c6a59a38e29f1fc040f8e9e5beb",
          "body": "Remove the unused .sr-only utility; guard the deferred focus-trap\ninstall in picker.js/trap-simulator.js against close-before-tick;\nbail re-entrant open() in walk-modal.js; and add a CI gate that runs\nmake generate + make prepare-assets + git diff --exit-code so stale\ngenerated files or an out-of-sync assets/styles.css fail CI.",
          "is_bot": false,
          "headline": "chore(a11y): fold in deferred code-review follow-ups (#76)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-27T20:03:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6ef46ea32bbf04fad4e5bca361c4cab6e2ceb8d",
          "body": "Focus trap + return for the walk modal, module picker and trap\nsimulator (shared a11y.js helper); aria-activedescendant/combobox state\nfor the command palette and hero search; full ARIA tree semantics with\nroving keyboard nav; keyboard-operable glossary terms.\n\nIncludes code-review fixes: CSS source\n[…]\ne leaf state on empty expand, combobox role/state on the\nfocused palette input, and visibility-filtered initial focus in the\ntrap simulator.\n\nCo-authored-by: MIke Huot <mhuot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(web): WCAG 2.1 AA interactive accessibility batch (#75)",
          "author_name": "MIke Huot",
          "author_login": "mhuot",
          "committed_at": "2026-06-27T19:53:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9f693aca69faed939054053b110fc9a6db94361f",
          "body": "Skip-to-main link, --fg-3 contrast repoint, prefers-reduced-motion,\ntable scope=\"col\", fieldset/legend for the SNMP version radios, and\nrole/aria-live status messages. Includes code-review fixes: CSS sourced\nfrom prototype/styles.css so it survives prepare-assets, <main\ntabindex=\"-1\">, role=\"status\" on typing-driven validators, list\nsemantics preserved on the upload results live region, and the\nlanding-empty golden regenerated.\n\nCo-authored-by: MIke Huot <mhuot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(web): WCAG 2.1 AA quick-win accessibility batch (#74)",
          "author_name": "MIke Huot",
          "author_login": "mhuot",
          "committed_at": "2026-06-27T19:47:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f03b1e2971d1dda928f9b16f16bada111adea89",
          "body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 6.5.0.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...924ae3a1cded613372ab5595356fb5720e22ba16)\n\n---\nupdated\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/setup-go from 6.4.0 to 6.5.0 (#71)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T19:42:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b9df6e82e9ad0bec944ec089d428350664a0f6a",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b43\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/checkout from 6.0.3 to 7.0.0 (#70)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T19:36:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "88377560e8819e88f16bbceb1f269b4f8f419665",
          "body": "Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.0 to 3.0.1.\n- [Release notes](https://github.com/softprops/action-gh-release/releases)\n- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/so\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump softprops/action-gh-release from 3.0.0 to 3.0.1 (#72)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T19:36:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b0651e09b0795a9501460515d34a9a8c168b925f",
          "body": "Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.52.0 to 1.53.0.\n- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)\n- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.52.0...v1.53.0)\n\n---\nupdated-dependencies:\n- dependency-name: modernc.org/sqlite\n  depende\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build: bump modernc.org/sqlite from 1.52.0 to 1.53.0 (#73)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T19:36:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cb6da6334f49e318c7528ec882750ac2a11cf989",
          "body": "Add a Network transport (HTTP) section to the MCP quickstart: enabling it,\na curl smoke test, client setup (Claude Code/Inspector/generic), Docker, the\nTLS caveat, and 401/404/405/503 troubleshooting. Renumber shared sections.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "docs(mcp): document the network (HTTP) transport in the quickstart (#69)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-22T13:00:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9386b4f2cb3ce0456b6788f50bf1433980b206ea",
          "body": "Accuracy: MCP env vars in Configuration, corrected/complete URL surfaces,\ntwo missing cmd binaries + feature packages in the architecture map, a\nNotification-intelligence feature bullet, stdio+HTTP in the MCP intro.\nBest practices: badges, table of contents, Contributing section.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "docs(readme): refresh for current state, add nav and badges (#68)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-22T13:00:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aebef82014e482c942a1f9f1e2f25c5edf18d151",
          "body": "Replace the stale \"not part of the Docker image or release archives\" line\n(untrue since v0.14.0) with the actual shipping channels.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "docs(mcp): correct how blittermib-mcp ships (#67)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-22T12:30:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ee14f759dcd3dd83587bae71276511284ec2e6e",
          "body": "…ansport (#66)\n\nOpt-in Streamable HTTP transport at /mcp on the web server, exposing the same\nfive read-only tools as the stdio binary. Handlers/views move into a shared\ninternal/mcptools package so both transports stay in lockstep. Off by default\nand fail-closed; bearer-authenticated (constant-time, before readiness),\nstateless JSON mode, body guard, per-request deadline, search_mibs limit\nceiling of 100.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(mcp): serve the read-only tools over an authenticated network tr…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-22T12:19:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c22685194c38e0ffd024eb0b589256a09e116077",
          "body": "blittermib-mcp now carries a linker-stamped version like the web binary: a\n'-version' flag prints it, and the MCP server advertises it as its\nImplementation.Version (was a hardcoded \"v1\"). Local builds report 'dev';\ndist.sh and the Dockerfile pass -X main.version=${VERSION} for both binaries,\nso rel\n[…]\ne identifiable. An integration assertion guards the\nadvertised version against regressing to a hardcoded string.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(mcp): add --version flag and stamp the build version (#65)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-22T07:59:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "794683ee0173a7a780e003e09dc6339193152fb2",
          "body": "blittermib-mcp is a stdio binary launched locally by desktop clients (Claude\nDesktop/Code), so prebuilt binaries are most useful on macOS/Windows — which\nthe linux-only matrix didn't cover. Add standalone MCP-only archives for\ndarwin/amd64, darwin/arm64, and windows/amd64 (a .zip with blittermib-mcp\n[…]\nmd) list the new archives and tell macOS/\nWindows users they can download a prebuilt binary instead of building.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "build(dist): cross-build blittermib-mcp for macOS and Windows (#64)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-21T23:20:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6eb5e456ff2bd534812fa56259d2ae51705063db",
          "body": "Cross-build the read-only MCP server alongside the web binary in dist.sh so\neach linux release archive carries both. Matches the Dockerfile build flags\n(CGO off, -trimpath, -s -w, no -X main.version — the MCP binary has no version\nvar). The binary rides inside the per-platform .tar.gz, so it's alrea\n[…]\narchives are Linux-only, so macOS /\nWindows clients (where Claude Desktop usually runs) still build from source.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "build(dist): ship blittermib-mcp in release tarballs (#63)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-21T22:48:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e56093daa146a0319dc9bba28576fd9e43cda7b",
          "body": "Build the read-only MCP server in the build stage and copy it to\n/usr/local/bin/blittermib-mcp in the runtime image, so the docker exec stdio\nworkflow works against a running container with no extra setup. The binary\nneeds no templ/assets, so it's a plain go build; .dockerignore excludes the\nlocal /\n[…]\n-wal/*.db-shm files — running as the uid that owns the\ndata volume keeps those files writable by the web server.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "build(docker): ship blittermib-mcp in the image (#62)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-21T21:31:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f15ae4b34541c351e90f2102eb438fa2552e64a7",
          "body": "Quickstart covering build, getting a database, a verified stdio smoke test,\nClaude Code / Claude Desktop client config, the docker exec topology, the five\ntools, and troubleshooting. Linked from the README Documentation section.\n\nThe read-only framing is scoped precisely: the tools never ingest or mutate the\nMIB corpus, while opening the database applies migrations/backfill like the web\nserver does.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "docs(mcp): add stdio quickstart for blittermib-mcp (#61)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-21T19:34:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e239e62f11f05479905f028475434e65ad5cc1f2",
          "body": "Add integration tests for cmd/blittermib-mcp backed by an in-memory store:\nranked search, exact + nearest-prefix OID, known symbol, resolvable and\nunresolved walk lines (with enterprise-PEN hint), and the raise/clear\nnotification pairing. An in-memory client+server ListTools test asserts\nexactly the\n[…]\n/Code config, --data semantics, not shipped in Docker).\n\nCompletes OpenSpec change add-mcp-server, task group 5.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "test(mcp): fixture-backed tool tests + client setup docs (#60)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-19T23:32:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a7c6c93a16cec6ed2ec3a87a3c005c6c789ac9b5",
          "body": "Add cmd/blittermib-mcp, a Model Context Protocol server (stdio transport)\nexposing five read-only tools over the existing SQLite-backed MIB index:\nsearch_mibs, lookup_oid, lookup_symbol, decode_walk, classify_notification.\nEach tool is a thin wrapper over internal/store, internal/walk, and\ninternal/\n[…]\n 'make verify'; 'make build-mcp' is the local path.\n\nImplements OpenSpec change add-mcp-server, task groups 1-4.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(mcp): read-only stdio MCP server over the MIB archive (#59)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-19T23:16:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ccd12fbb8a609144ca6dcec56a6a589f15540666",
          "body": "…r (#58)\n\n* chore(license): normalize SPDX headers to MIT to match LICENSE\n\nThe cmd/mib-ingest Go files and the ingest smoke-test script carried Apache-2.0 SPDX identifiers while the repository LICENSE is MIT. Normalize them to MIT so per-file headers match the project license. These nine files were\n[…]\ng so the copyright metadata is consistent project-wide.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "chore(license): normalize SPDX headers to MIT and align LICENSE holde…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-19T22:54:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d13c3869dc62f814e83a4f3b0193416cbdad9605",
          "body": "…rs (Story 3.1) (#57)\n\nRe-scopes FR29 from speculative \"opt-in local ML\" to a deterministic recall\npass, after a whole-archive measurement showed the recall gap on real vendor\nMIBs (~29%) is lexical/structural, not semantic.\n\nThree signal improvements, all preserving determinism, explainability, the\n[…]\nn 21/21 (100%), recall 8/8 edges (100%). Over the full vendor\narchive, correct pairs rise 3,059 -> 5,925 (+94%).\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(correlate): deterministic recall pass for vendor raise/clear pai…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-17T16:43:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9af76ca54ebbab322b2b0b8be5bdead0637fc0e4",
          "body": "…ionships (#56)\n\nPer-MIB inference that classifies every NOTIFICATION-TYPE/TRAP-TYPE as\nraise / clear / orphan (OpenNMS alarm-type 1/2/3) from four deterministic,\nSTATUS-aware signals, with confidence bands and an evidence trail.\nSurfaced inline (icon badges + Alarm-semantics pane) and exported as\nH\n[…]\ndata with a pairwise auto-clear round-trip.\nAccuracy CI-gated against a labelled golden set (precision + recall).\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat: Notification Intelligence — infer raise/clear/orphan trap relat…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-16T23:43:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3f669613c85b3003772c146d92bc3c2b5c0ea641",
          "body": "* perf(web): contain list-row rendering, batch the row filter\n\nClicking around a large module was still slow after #54: the\nnetwork round-trip dropped to ~140ms but the browser paid seconds\nof layout per click. Two causes, two fixes:\n\n- The list pane was ONE css grid: thead/tbody/tr were\n  display:c\n[…]\ne-initializations, each pinning a dead\n  reactive scope.\n\nAssisted-by: ClaudeCode:claude-fable-5\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "perf(web): contain list-row rendering, batch the row filter (#55)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-12T12:32:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8aee696e6d9a721896745a93d6ac1c0610aa8d4e",
          "body": "…h (#54)\n\n* perf(web): halve workspace page weight, stop htmx history-cache thrash\n\nBrowsing large modules (FspR7-MIB renders ~20 MB of HTML) was\nextremely slow and flooded the console with htmx:historyCacheError:\nevery hx-push-url navigation made htmx clone and serialize the whole\nbody into localSt\n[…]\ntimer instead of being cut\n  short by the first timeout.\n\nAssisted-by: ClaudeCode:claude-fable-5\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "perf(web): halve workspace page weight, stop htmx history-cache thras…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-12T10:08:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba39c3b4b6259cec04bc2235f51473e757eb4fdb",
          "body": "- module picker renders the full filtered list into a scrollable card\n  instead of capping at 10 rows with a \"+N more\" footer\n- Decode button: prevent selectstart and drop painted selections on\n  label swap, closing the real-Safari selection-box artifact (#51)\n- decode toggle: explicit text-decoration:none on hover, style block\n  shared with the search/theme toggles\n\nAssisted-by: ClaudeCode:claude-fable-5\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(web): scrollable module picker and Decode-button polish (#53)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-11T16:31:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1c596756af7647771bf78cce2e8d5b24fca6271",
          "body": "After decoding a walk, hopping between its MIBs required the browser\nback button — the results page is a POST response with no GET URL, so\nonce the bfcache entry is gone the module list is unreachable without\nre-decoding. Module switching now lives in the workspace:\n\n- the walk payload persisted to \n[…]\nouched); new\nTestWalkDataJSONModules; goldens regenerated (reviewed — inert picker\nmarkup + the x-data fix only).\n\nAssisted-by: ClaudeCode:claude-fable-5\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(web): walk-module switcher via the walk-scoped module picker (#52)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-11T12:47:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "56ec1b6e99171e54a0f2641b45a4a19a0ec4dc86",
          "body": "The earlier ghosting fix added user-select:none, but Safari only\nhonors the unprefixed property since 18.2 — on older Safari the\nsecond click of a double-click word-selects the freshly-swapped\n\"Decoding…\" label, painting a dark ::selection box behind the text\n(the artifact stops before the ellipsis \n[…]\n and webkit: after a\ndblclick the label reads \"Decoding…\" with no selected text and zero\npainted selection rects.\n\nAssisted-by: ClaudeCode:claude-fable-5\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(web): stop double-click from selecting the Decode button label (#51)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-11T11:02:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5eb9252dd58c53d200c178a5d2aa3bdcade195d7",
          "body": "Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.51.0 to 1.52.0.\n- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)\n- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.51.0...v1.52.0)\n\n---\nupdated-dependencies:\n- dependency-name: modernc.org/sqlite\n  depende\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build: bump modernc.org/sqlite from 1.51.0 to 1.52.0 (#49)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-11T10:37:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "65d60a05ed622d438ecbe485b7a08b3672141ac9",
          "body": "…it (#50)\n\nThree findings from the post-merge code review of PRs #45-#48:\n\n- isInetAddressTypeSyntax: the baseSyntaxToken consolidation (PR-3)\n  silently widened the classifier — an enum-refined column such as\n  `InetAddressType { ipv4(1), ipv6(2) }` (legal per RFC 4001 §3)\n  started matching and go\n[…]\ny-only until validated, and the guard is load-bearing for\n  `..` (ValidModuleName's character class admits dots).\n\nAssisted-by: ClaudeCode:claude-fable-5\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(server): address review follow-ups from the dead-code-cleanup aud…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-11T08:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d6237ff5ab199bed1dd1d11395c9d69cb6d832d4",
          "body": "…(#48)\n\n- S-11: fold workspaceURL / workspaceSymbolURL / WorkspaceSymbolURL\n  into one exported WorkspaceSymbolURL — the breadcrumb call sites\n  gain the name-qualified no-OID fallback instead of the broken\n  \"/s/module::\" branch\n- S-17: pathUnderAny's speculative multi-root form becomes\n  (s *Serve\n[…]\nary; annotated G703 with the flag-input\njustification (paths come from -data/-mibs/-standard-mibs, not\nrequests).\n\nAssisted-by: ClaudeCode:claude-fable-5\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "refactor: polish extractions and web API-surface shrink (audit PR-6) …",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-11T01:16:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f2479c01be829719ea0774117fe9d5eb1a9fb4f8",
          "body": "…dit PR-5) (#47)\n\n- S-3: searchController factory inside palette.js unifies the modal\n  palette and landing hero typeahead (debounced fetch + stale-response\n  guard, hit rendering, active-row tracking, click navigation);\n  Enter/Escape semantics stay per-surface as injected handlers\n- S-14: hx-boost\n[…]\nype/navigate/Escape), walk persist +\nworkspace decoration + in-walk chip, and trap-simulator command\ncomposition.\n\nAssisted-by: ClaudeCode:claude-fable-5\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "refactor(assets): dedupe JS islands, drop stale hx-boost comments (au…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-11T01:02:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2096f21a7669c742f42bc27c1482eb4a96347704",
          "body": "… iana (audit PR-4) (#46)\n\n- S-2: tableHasColumn collapses the three boot migrations' identical\n  PRAGMA table_info column-presence scans\n- S-19: scanModule + moduleSelectColumns mirror the existing\n  scanSymbol pattern for GetModule/ListModules; sqlIn assembles the\n  two IN-clause queries (one #nos\n[…]\ncause fixture arcs were already covered. New\n  TestOIDPathIANAOnlyArc covers an arc only the IANA registry names.\n\nAssisted-by: ClaudeCode:claude-fable-5\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "refactor(store): dedupe store boilerplate, delegate canonical OIDs to…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-11T00:47:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c6ce540404b86bec3a9bc7ea7a377006e365fb77",
          "body": "Collapse six verified duplication findings from the 2026-06-11 dead-code\naudit, zero behavior change:\n\n- S-1: extract partitionClosure/copyMIBsToZip/writeZipString into\n  bundle.go, shared by the module-bundle and walk-bundle ZIP endpoints\n- S-4: treeRowsFor replaces three copies of the dedupe-by-OI\n[…]\nection branch and the\n  /s/ symbol page\n- S-9: isIntegerSyntax reimplemented via TrapTypeLetter + baseSyntaxToken\n\nAssisted-by: ClaudeCode:claude-fable-5\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "refactor(server): dedupe server boilerplate (audit PR-3) (#45)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-11T00:38:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1820f05cb95bfbd188475f7544b58d7397c4777d",
          "body": "Deletes 7 verified-dead Go symbols (+2 test-only formatters inlined)\nand 86 orphaned CSS classes (−512 lines), per the 2026-06-11 dead-code\naudit. deadcode now reports only the six deliberate keepers; goldens\nbyte-identical; pure deletion, zero behavior change.\n\nAssisted-by: ClaudeCode:claude-fable-5\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "chore: delete dead code (audit PR-2) (#44)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-11T00:17:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7724c4bab32553d1860a715ee592b17110fcc86c",
          "body": "…oad (#43)\n\nThe status-bar module picker rendered \"No modules match\" since it\nshipped: its payload was a @templ.Raw call inside a <script> block,\nwhich templ emits as literal source text; picker.js silently parsed\ngarbage. Ship the list as templ-escaped JSON in a data-modules\nattribute (the WalkData\n[…]\negenerated; verified\nin headless Chromium against the 322-module corpus. Found by a\nwhole-program dead-code audit.\n\nAssisted-by: ClaudeCode:claude-fable-5\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(web): module picker shipped templ source instead of its JSON payl…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-10T23:58:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a038a29ddca886a5fa6f4b441b8e829c481c01a9",
          "body": "Fixes the Kubernetes CrashLoop on large corpora: boot compiled for 20+\nminutes with nothing listening on :8080, every probe got\nconnection-refused, the kubelet killed the pod at the startup-probe\ndeadline, the half-built fingerprint cache was discarded, and the next\nboot recompiled from scratch (res\n[…]\nedWhileLoading; make verify -race green.\n\nCoordinated follow-up in no42-org/blittermib-chart: livenessProbe →\n/healthz, readinessProbe + startupProbe → /readyz.\n\nAssisted-by: ClaudeCode:claude-fable-5",
          "is_bot": false,
          "headline": "fix(server): serve liveness before the boot-time corpus load (#42)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-10T22:24:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "95734b2d25b1cb3dbdb2cc860c89944a102f01e3",
          "body": "Decode an snmpwalk/snmpbulkwalk capture (-On numeric or name-prefixed)\nagainst the loaded MIB corpus. Opt-in via BLITTERMIB_WALK_DECODER_ENABLED\n(off by default); walks are ephemeral — parsed in memory, never written\nto disk, logged, or stored.\n\n- Parser (multi-line Hex-STRING folding, truncation su\n[…]\nial review (13 patches) and\n  verified end-to-end in headless Chromium against a real 46k-line\n  Juniper SRX330 capture.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nAssisted-by: ClaudeCode:claude-fable-5",
          "is_bot": false,
          "headline": "feat(walk): SNMP walk decoder (#41)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-10T21:30:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b0b9728ae0a35ecfc5b5e0f15e29968558690305",
          "body": null,
          "is_bot": false,
          "headline": "chore(docs): cleanup (#40)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-10T06:29:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0142b1527940e8cf6fd1d832d0d3fcb31c172f3e",
          "body": "* fix(docker): repair volume ownership at boot via privilege-dropping entrypoint\n\nThe reference compose bind-mounts a host intake dir into the data\nvolume's corpus tree (./import -> <data>/mibs/import). On first boot\nthe volume is empty, so Docker creates the intermediate <data>/mibs\nmountpoint as r\n[…]\no-op). A non-writable intake now only\ndisables imports.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(docker): bootstrap MIB corpus on persistent volumes (#39)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-08T00:18:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eb4cc0dbb458aba06bf76e8de67f16b51bd3d1a3",
          "body": "The chart now releases independently from no42-org/blittermib-chart;\nremove the references in README that implied this repo still\nmaintains or co-releases it:\n\n- the Helm uploads-PVC upgrade bullet (chart-operator guidance —\n  belongs with the chart),\n- the \"image tag and chart version are the same \n[…]\nep a pointer to the chart\nrepo (a cross-reference, not chart maintenance). No CLAUDE.md is\ntracked in this repo.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "docs: drop residual Helm chart coupling after chart extraction (#38)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-07T22:00:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4cb042495c29773cf5f15ab420de2acc53c61492",
          "body": "… (#37)\n\nChart and application releases were coupled — one tag drove both,\none version number — so chart-only fixes forced app releases and\nvice versa. The chart now lives in its own repository\n(github.com/no42-org/blittermib-chart) with independent semver,\ntag-driven releases, its own keyless-signi\n[…]\n\nlocation, ghcr.io/no42-org/charts/blittermib). The chart-version-\nequals-app-version convention ends at 0.10.0.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "refactor(chart)!: extract the Helm chart to no42-org/blittermib-chart…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-06T23:19:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "69f36bf7afa0a4de87731f629662113249871f51",
          "body": "Placeholder alignment for the v0.10.0 release (stamping is\ntag-driven).\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "chore(chart): bump placeholder version/appVersion to 0.10.0 (#36)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-06T22:52:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0c39ec0a937021b44d7a4b3e8e5dc1a7dfa4df6",
          "body": "* feat(docker)!: standards-only image with boot-time corpus sync\n\nThe image carried the whole corpus at the runtime root, which under\nHelm's readOnlyRootFilesystem made the curated tree unwritable — the\nimport pipeline staged uploads fine and then failed every move with\n\"read-only file system\" (obse\n[…]\nopy walk — no\nuser-controlled path components reach it.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(docker)!: standards-only image with boot-time corpus sync (#35)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-06T22:46:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2707f8b744a45ff9def307a70b14b5a780abf17f",
          "body": "Keep the in-repo Chart.yaml placeholders aligned with the upcoming\nrelease. Release packaging stamps both fields from the git tag.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "chore(chart): bump placeholder version/appVersion to 0.9.0 (#34)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-06T20:26:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d63a25b58f0683a72a42d8dd069ecf0a3c08ed99",
          "body": "* feat(import)!: single import-folder pipeline replacing upload/\n\nCustom-MIB intake had five disconnected surfaces (baked corpus,\nupload/ bind-mount + recursive watcher, in-browser upload,\nblittermib-ingest runbook, Helm extraMibs) with divergent semantics.\nThis consolidates them into ONE always-on \n[…]\ns whose subject is a directory\n  under the corpus root.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(import)!: single import-folder pipeline replacing upload/ (#33)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-06T17:56:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f3852145cec384a037ce9e11a4a99062d337e200",
          "body": "Keep the in-repo Chart.yaml placeholders aligned with the latest\nrelease. Release packaging stamps both fields from the git tag\n(chart OCI tag = release version since #30); these values only\nserve local `helm package` without a resolvable version and casual\nreaders of the chart.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "chore(chart): bump placeholder version/appVersion to 0.8.1 (#32)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-06T12:53:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf50dfd2b70d77781a64fcf02f147dbece38bba5",
          "body": "… signing (#31)\n\nThe v0.8.0 tag was the signing pipeline's first live run. The\npublication-before-signing design held — every artifact shipped, the\nimage signature succeeded and verifies with the documented command\n(0.8.0 and latest alike) — but two signing steps failed:\n\n- cosign v4 deprecates --ou\n[…]\nmit, so re-running its failed jobs would re-use the broken\ndefinition); the next tag is the full acceptance run.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(release): cosign v4 bundle output + docker-config login for chart…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-06T01:17:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6eada793ba4174166925f2ca8b3d7234e8228cbf",
          "body": "…ease tag (#30)\n\nNothing the release pipeline shipped was verifiable: a consumer had\nno way to prove an image, chart, or tarball came from this repo's\nrelease workflow. All three artifact families are now signed with\ncosign keyless signing — the workflow's OIDC identity is the signing\nidentity (no p\n[…]\nost-release acceptance (running the three documented verify\ncommands) rides the next tag per the change's tasks.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(release): cosign-sign artifacts and align chart version with rel…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-06T00:53:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f55f1d17131d292aaaf94425c87514fbeeebcc70",
          "body": "* feat(chart): make startup probe window configurable\n\nThe HTTP server only starts listening after the boot-time MIB ingest,\nwhich is ~5s from the baked-in emptyDir but up to ~60s when the SQLite\ncache lives on slower persistent storage (e.g. an NFS-backed PVC). The\nprobe window was hardcoded at 30 \n[…]\neCode:claude-opus-4-8\n\n* chore(chart): bump appVersion to 0.7.0\n\nInstall the 0.7.0 blittermib image by default (image.tag falls back to\nappVersion when unset).\n\nAssisted-by: ClaudeCode:claude-opus-4-8",
          "is_bot": false,
          "headline": "feat(chart): configurable startup probe + bump appVersion to 0.7.0 (#29)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-05T23:56:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "139a96d72ae35ad7c81c960c46f187ca4309fd3e",
          "body": "The compile pass was bounded at a flat 5 minutes regardless of batch\nsize — a hang backstop sized for drop-folder batches that a bulk\nimport (thousands of files) inevitably blew, showering every\nnot-yet-compiled file as a spurious \"context deadline exceeded\"\nparse error.\n\n- Default bound is now max(\n[…]\nllow-up to #27 (deferred review finding); unblocks bulk archive\nimports through the in-container ingest runbook.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(ingest): scale the compile-pass bound with batch size (#28)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-05T23:36:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c00989921f51d804c64feceb1c842c91f0e99a2c",
          "body": "Operators of self-hosted deployments had no way to run the\nupload-to-corpus routing: the image shipped only the server binary,\nso MIBs dropped into the bind-mounted upload/ directory accumulated\nas a flat, unrouted pile. The runtime layer already carries libsmi\nfor the server's own compile pipeline,\n[…]\nr MIB dropped\ninto upload/ routes to vendors/22610-a10/ via docker exec and\nappears in the UI without a restart.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(docker): ship blittermib-ingest in the runtime image (#27)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-05T22:39:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "94c359ace5aba15211ce4e2e23993737378b4ad3",
          "body": "In-workspace clicks no longer reload the document. htmx requests get\nonly the panes a click changes (the A/B contract): a selection change\nreturns the detail section alone (~2 KB vs ~235 KB full page); a scope\nchange adds the list section as an hx-swap-oob fragment. The tree pane\nis never swapped — \n[…]\n full\ndocument unchanged.\n\nThis removes the remaining inter-pane navigation flash in Firefox\n(follow-up to #25).\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(web): partial pane navigation in the workspace (#26)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-04T16:17:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6c5ed24ff4933e6b7cd02f304cb53e104cd03097",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: Bump actions/checkout from 6.0.2 to 6.0.3 (#23)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-04T15:27:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d84bb9a4e0431792b3904aa2aa9b1c2deae17cf7",
          "body": "Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.50.1 to 1.51.0.\n- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)\n- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.50.1...v1.51.0)\n\n---\nupdated-dependencies:\n- dependency-name: modernc.org/sqlite\n  depende\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build: Bump modernc.org/sqlite from 1.50.1 to 1.51.0 (#24)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-04T15:27:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7bd9bccad88ec2bf06148675bebf2a43f0932c53",
          "body": "…x navigation flash (#25)\n\nIn Firefox every click flashed the whole app; Safari was unaffected.\nTwo causes, both tied to full-page navigation:\n\n1. White canvas frame: the default theme is dark, but the stylesheet\n   declared no color-scheme and only backgrounded <body>, so Firefox\n   painted its def\n[…]\n\n(no reliable paint-holding); eliminating it needs partial navigation\n(hx-boost), tracked as a follow-up change.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(web): themed root canvas + immutable static assets to stop Firefo…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-04T12:59:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7f02fca091a58018c2959c17466917b8542b95b7",
          "body": "Add charts/blittermib — a single-instance Deployment + ClusterIP\nService exposing the web UI on :8080, published as an OCI artifact to\nghcr.io/no42-org/charts.\n\nblittermib's SQLite database is a cache rebuilt from the baked-in MIB\ncorpus on each boot, so the chart is stateless by default (emptyDir,\n\n[…]\naches Ready; the release pipeline\npackages the chart with appVersion stamped from the tag and pushes it to\nGHCR.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(charts): Helm chart for Kubernetes deployment (#22)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-03T23:59:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c6a6a5e6e3ba0a55e496c9651716c71383dd513c",
          "body": "docs/self-host.md was removed in the cleanup bundled with #20; README\nand RELEASING still linked to it, leaving broken links. Remove those\ntwo references.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "docs: drop dangling docs/self-host.md references (#21)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-03T20:11:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5f7e916d31d715caf393fae01e0ff7c9db3dddc",
          "body": "… (#20)\n\n* fix(eventconf): collapse descr/logmsg whitespace to avoid &#xA; noise\n\nThe eventconf export emitted &#xA; (and potentially &#x9;/&#xD;) inside\n<descr> and <logmsg> because Go's encoding/xml escapes every newline,\ntab, and CR in element chardata. The output was valid XML but hard to\nread a\n[…]\n-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n* chore: Cleanup\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(eventconf): collapse descr/logmsg whitespace to avoid &#xA; noise…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-03T19:31:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "773f4567c857996c3c8d417ab58dc9e0fda652e5",
          "body": "* build(go): bump toolchain to 1.26.4 to clear stdlib vulnerabilities (#18)\n\ngovulncheck flags two Go standard-library vulnerabilities reachable\nfrom our code, both fixed in go1.26.4:\n\n- GO-2026-5039 (net/textproto) — via server.Start → ListenAndServe →\n  textproto.Reader.ReadMIMEHeader\n- GO-2026-50\n[…]\nle-info bar shown only when a module has notifications.\n\nAssisted-by: ClaudeCode:claude-opus-4-8\nSigned-off-by: Ronny Trommer <ronny@no42.org>\n\n---------\n\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "feat(server): export notifications as OpenNMS eventconf XML (#19)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-03T15:04:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0a22f64d9fdc66cf3c97beb31ac3312b375909c6",
          "body": "… (#17)\n\n* docs(self-host): correct hot-reload troubleshooting for recursive watcher\n\nThe \"Hot reload doesn't fire\" section told operators the watcher only\nwatches the top level of `-mibs` and to flatten the corpus. The watcher\nrecurses into every subdirectory (internal/watch/watcher.go uses\nfilepat\n[…]\nhe repo root.\nOnly `/blittermib` was ignored; add the remaining three commands so a\nstray mib-index / mib-ingest / mib-migrate can't be accidentally\ncommitted.\n\nAssisted-by: ClaudeCode:claude-opus-4-8",
          "is_bot": false,
          "headline": "docs(self-host): fix hot-reload troubleshooting for recursive watcher…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-03T07:09:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b16a17f9d8b9303e375a31272111e77be320d71b",
          "body": "…#18)\n\ngovulncheck flags two Go standard-library vulnerabilities reachable\nfrom our code, both fixed in go1.26.4:\n\n- GO-2026-5039 (net/textproto) — via server.Start → ListenAndServe →\n  textproto.Reader.ReadMIMEHeader\n- GO-2026-5037 (crypto/x509)   — via mibcorpus.HasMIBOpener and\n  compile.xmlNeeds\n[…]\n from go-version-file)\nand the Dockerfile GO_VERSION ARG to match. Verified locally:\n`make govulncheck` reports no vulnerabilities and `go build ./...`\npasses.\n\nAssisted-by: ClaudeCode:claude-opus-4-8",
          "is_bot": false,
          "headline": "build(go): bump toolchain to 1.26.4 to clear stdlib vulnerabilities (…",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-03T07:05:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f9f6296757494129fa977431179f39e873154cf8",
          "body": "Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.0.0 to 4.1.0.\n- [Release notes](https://github.com/docker/setup-qemu-action/releases)\n- [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...06116385d9baf250c9f4dc\n[…]\n:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": true,
          "headline": "ci: Bump docker/setup-qemu-action from 4.0.0 to 4.1.0 (#16)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T09:44:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "21f18fb7ccdc827f25298a028dafa76524cd5322",
          "body": "Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.0.0 to 4.1.0.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45c\n[…]\n:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": true,
          "headline": "ci: Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#15)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T09:44:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cb766ac66642321bba2b0af3356fa0e75588db1c",
          "body": "Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.2.0.\n- [Release notes](https://github.com/docker/login-action/releases)\n- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee)\n\n[…]\n:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": true,
          "headline": "ci: Bump docker/login-action from 4.1.0 to 4.2.0 (#14)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T09:44:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "40819e1c403971e1c2aa0805ba436627d610b1f1",
          "body": "Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.1.0 to 7.2.0.\n- [Release notes](https://github.com/docker/build-push-action/releases)\n- [Commits](https://github.com/docker/build-push-action/compare/bcafcacb16a39f128d818304e6c9c0c18556b85f...f9f3042f7e2789586610d6\n[…]\n:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": true,
          "headline": "ci: Bump docker/build-push-action from 7.1.0 to 7.2.0 (#13)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T09:44:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "485401c3b72eddb41a80f76b18001e860e22fba3",
          "body": "Matches the go.mod toolchain bump in 9ef7bbb. Without this the build\nstage fails: `go: go.mod requires go >= 1.26.3 (running go 1.26.2)`.\n\nAssisted-by: ClaudeCode:claude-opus-4-7\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "build(docker): bump GO_VERSION default to 1.26.3",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-01T09:44:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "340bdd1b98f93403bd45a1f3194e566bec21d813",
          "body": "CI's `make gosec` flagged 29 findings. Addressed each:\n\n- G301 (6×) — tighten new directories from 0o755 to 0o750\n  (blittermib/main, mib-index/index, mib-ingest/ingest,\n  mib-migrate/apply, server/upload).\n- G306 (1×) — tighten INDEX.yaml write from 0o644 to 0o600.\n- G703 (3×, handlers.go) — handle\n[…]\ntModuleSourceRoute updated to place the seeded source under\nthe configured mibs root so the new guard accepts it.\n\nAssisted-by: ClaudeCode:claude-opus-4-7\nSigned-off-by: Ronny Trommer <ronny@no42.org>",
          "is_bot": false,
          "headline": "fix(security): resolve gosec findings (real fixes + #nosec)",
          "author_name": "Ronny Trommer",
          "author_login": "indigo423",
          "committed_at": "2026-06-01T09:44:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 36,
      "commits_last_year": 273,
      "latest_release_at": "2026-07-20T19:31:16Z",
      "latest_release_tag": "v0.17.7",
      "releases_from_tags": false,
      "days_since_last_push": 2,
      "active_weeks_last_year": 13,
      "days_since_latest_release": 6,
      "mean_days_between_releases": 2.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 87,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/no42-org/blittermib",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/no42-org/blittermib",
          "is_deprecated": false,
          "latest_version": "v0.17.7",
          "repository_url": "https://github.com/no42-org/blittermib",
          "versions_count": 36,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-20T19:21:18Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 6
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-06-26",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 146361,
      "source_files_sampled": 175,
      "oversized_source_files": 3,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 2247
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 19,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/a-h/templ",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.1020"
        },
        {
          "name": "github.com/fsnotify/fsnotify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.1"
        },
        {
          "name": "github.com/modelcontextprotocol/go-sdk",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.1"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "modernc.org/sqlite",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.54.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/a-h/templ",
            "direct": true,
            "version": "v0.3.1020",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": true,
            "version": "v1.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modelcontextprotocol/go-sdk",
            "direct": true,
            "version": "v1.6.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/sqlite",
            "direct": true,
            "version": "v1.54.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/jsonschema-go",
            "direct": false,
            "version": "v0.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ncruces/go-strftime",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/remyoudompheng/bigfft",
            "direct": false,
            "version": "v0.0.0-20230129092748-24d4a6f8daec",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/asm",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/encoding",
            "direct": false,
            "version": "v0.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yosida95/uritemplate/v3",
            "direct": false,
            "version": "v3.0.2",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/libc",
            "direct": false,
            "version": "v1.74.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/mathutil",
            "direct": false,
            "version": "v1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/memory",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 19,
        "direct_count": 5,
        "indirect_count": 14
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 110,
        "open_issues": 1,
        "closed_ratio": 0.875,
        "closed_issues": 7,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "indigo423",
          "commits": 239,
          "avatar_url": "https://avatars.githubusercontent.com/u/1095181?v=4"
        },
        {
          "type": "User",
          "login": "mhuot",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/1780860?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.98
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "cflite_batch.yml",
        "cflite_pr.yml",
        "cflite_prune.yml",
        "ci.yml",
        "fuzz.yml",
        "gates.yml",
        "preview.yml",
        "promote.yml",
        "refresh-pen.yml",
        "release.yml",
        "security.yml",
        "validate-mibs.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": true
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 4,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 1/22 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 9,
            "reason": "dependency not pinned by hash detected -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 8,
            "reason": "SAST tool detected but not run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "f9a002b9f7cd90e169aee92428bdc1c2f481f0c7",
        "ran_at": "2026-07-27T06:12:23Z",
        "aggregate_score": 7.5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-26T06:25:53Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-24T21:28:35Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 108,
          "created_at": "2026-07-21T21:08:50Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/no42-org/blittermib",
    "host": "github.com",
    "name": "blittermib",
    "owner": "no42-org"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 70,
      "inputs": {
        "security": 80,
        "vitality": 77,
        "community": 43,
        "governance": 58,
        "engineering": 92
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 77,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 63,
            "inputs": {
              "commits_last_year": 273,
              "human_commit_share": 0.81,
              "days_since_last_push": 2,
              "active_weeks_last_year": 13
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "13/52 weeks with commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 13
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "273 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 273
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 36,
              "latest_release_tag": "v0.17.7",
              "releases_from_tags": false,
              "days_since_latest_release": 6,
              "mean_days_between_releases": 2.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "36 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 36
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 6 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 43,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 1,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 58,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 18,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.98
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 98% of commits",
                "points": 0.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 98
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 79,
            "inputs": {
              "merged_prs": 110,
              "open_issues": 1,
              "closed_issues": 7,
              "issue_closed_ratio": 0.875,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "88% of issues closed",
                "points": 40.9,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 88
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "110/110 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 110,
                      "decided": 110
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 1/22 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "no42-org",
              "public_repos": 28,
              "account_age_days": 3113
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of no42-org",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "no42-org"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "28 public repos, account ~8 yr old",
                "points": 22.6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 28
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 8
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/no42-org/blittermib"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 6
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 6 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "36 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 36
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 92,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 94,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": true
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "12 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 9.6,
                "status": "met",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [
                "mib",
                "network-monitoring",
                "snmp",
                "self-hosting",
                "mcp"
              ],
              "has_wiki": false,
              "homepage": "https://blittermib.eu",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://blittermib.eu",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 80,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 7.5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 1/22 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected but not run on all commits",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 19 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 19
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 19,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 19,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 81,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 2247
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "81 of 81 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 81,
                      "sampled": 81
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 93,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.02,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.18
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "2 of the last 100 commits agent-authored or agent-credited",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "18 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 18,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 9,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 146361,
              "source_files_sampled": 175,
              "oversized_source_files": 3
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "3/175 source files over 60KB",
                "points": 54.1,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 175,
                      "oversized": 3
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "critical",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [],
  "report_type": "repository",
  "generated_at": "2026-07-27T06:12:40.500872Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/n/no42-org/blittermib.svg",
  "full_name": "no42-org/blittermib",
  "license_state": "standard",
  "license_spdx": "MIT"
}