Public recordModerate
Software health reportschema 0.26.0 · metrics 1.13.0 · 2026-07-22 07:34 UTC
ChorusOne / blazar
Automatic Cosmos SDK Network Upgrades
ChorusOne/blazar holds a health index of 55 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (66/100) and lowest on Security (37/100). It was last updated 22 days ago. 2 contributors account for most of its recent work.
55
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
55
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Chorus OneOrganization
102 followers300 public repossince Feb 2018
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
63
Development activity
44At risk
How it's scored
| 28.8/36 | Push recency — last push 22 days ago |
| 3.5/36 | Commit cadence — 5/52 weeks with commits |
| 10.6/18 | Commit volume — 14 commits in the last year |
| 1/10 | OpenSSF Scorecard: Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1 |
Inputs used
| commits_last_year | 14 |
| human_commit_share | 1 |
| days_since_last_push | 22 |
| active_weeks_last_year | 5 |
Release discipline
92Excellent
How it's scored
| 27/27 | Ships releases — 14 releases published |
| 36/36 | Release recency — latest release 28 days ago |
| 19.8/27 | Release cadence — a release every ~61.1 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 14 |
| latest_release_tag | v1.9.0 |
| releases_from_tags | no |
| days_since_latest_release | 28 |
| mean_days_between_releases | 61.1 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
38
Popularity & adoption
28Critical
How it's scored
| 22.7/60 | Stars — 26 stars |
| 2.5/25 | Forks — 3 forks |
| 2.7/15 | Watchers — 4 watchers |
Inputs used
| forks | 3 |
| stars | 26 |
| watchers | 4 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | below_threshold |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
64
Maintainer resilience (bus factor)
54Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 14.8/22.5 | Commit distribution — top contributor authored 34% of commits |
| 8.1/13.5 | Contributor breadth — 6 contributors |
| 6/10 | OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 6 |
| top_contributor_share | 0.342 |
How it's scored
| 21/46.8 | Issue resolution — 45% of issues closed |
| 35/38.3 | PR acceptance — 43/47 decided PRs merged |
| 15/15 | OpenSSF Scorecard: Code-Review — all changesets reviewed |
Inputs used
| merged_prs | 43 |
| open_issues | 11 |
| closed_issues | 9 |
| issue_closed_ratio | 0.45 |
| closed_unmerged_prs | 4 |
Ownership & stewardship
70Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 14.5/25 | Owner reach — 102 followers of ChorusOne |
| 25/25 | Track record — 300 public repos, account ~8 yr old |
Inputs used
| followers | 102 |
| owner_type | Organization |
| is_verified | — |
| owner_login | ChorusOne |
| public_repos | 300 |
| account_age_days | 3,072 |
Engineering Quality
Are baseline engineering and documentation practices in place?
66
Engineering practices
76Good
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yaml |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 12/20 | OpenSSF Scorecard: CI-Tests — 10 out of 15 merged PRs checked by a CI test -- score normalized to 6 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
50Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
37
Security posture
37At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 1.5/2.5 | CI-Tests — 10 out of 15 merged PRs checked by a CI test -- score normalized to 6 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 7.5/7.5 | Code-Review — all changesets reviewed |
| 1.5/2.5 | Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0.8/7.5 | Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 57 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 3.7 |
Excluded from scoring (no data or not applicable): branch_protection, packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
53
Agent context & guidance
10Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 9.5/40 | Legible commit history — 13 of 73 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.178 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yaml |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 73 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod, testdata/docker/echo-dockerfile/go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/80 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 32,474 |
| source_files_sampled | 80 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — proto/blazar.proto, proto/checks.proto, proto/google/api/annotations.proto, proto/google/api/http.proto, proto/upgrades_registry.proto, proto/version_resolver.proto |
| 0/20 | MCP server |
| 0/40 | Runnable examples |
Inputs used
| example_dirs | — |
| has_mcp_signal | no |
| api_schema_files | proto/blazar.proto, proto/checks.proto, proto/google/api/annotations.proto, proto/google/api/http.proto, proto/upgrades_registry.proto, proto/version_resolver.proto |
Key facts
26GitHub stars
6contributors
14commits, last 12 months
22days since last push
14releases
2bus factor
11open issues
Gopackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 26 ★ / 3 ⇿
26Stars
3Forks
10Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 6Patch 4
Each point covers 2 days.
OpenSSF Scorecard 3.7 / 10
3.7aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 6 | CI-Tests | 10 out of 15 merged PRs checked by a CI test -- score normalized to 6 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 10 | Code-Review | all changesets reviewed |
| 6 | Contributors | project has 2 contributing companies or organizations -- score normalized to 6 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 1 | Maintained | 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 57 existing vulnerabilities detected |
Direct dependencies 24
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/BurntSushi/toml | v1.3.2 | go.mod |
| Go | github.com/cometbft/cometbft | v0.37.5 | go.mod |
| Go | github.com/compose-spec/compose-go | v1.17.0 | go.mod |
| Go | github.com/cosmos/cosmos-sdk | v0.47.13 | go.mod |
| Go | github.com/docker/docker | v28.5.1+incompatible | go.mod |
| Go | github.com/docker/docker-credential-helpers | v0.8.1 | go.mod |
| Go | github.com/fsnotify/fsnotify | v1.9.0 | go.mod |
| Go | github.com/grpc-ecosystem/grpc-gateway/v2 | v2.19.1 | go.mod |
| Go | github.com/jedib0t/go-pretty/v6 | v6.5.8 | go.mod |
| Go | github.com/otiai10/copy | v1.12.0 | go.mod |
| Go | github.com/prometheus/client_golang | v1.18.0 | go.mod |
| Go | github.com/rs/zerolog | v1.32.0 | go.mod |
| Go | github.com/slack-go/slack | v0.14.0 | go.mod |
| Go | github.com/spf13/cobra | v1.8.0 | go.mod |
| Go | github.com/stretchr/testify | v1.11.0 | go.mod |
| Go | github.com/testcontainers/testcontainers-go | v0.40.0 | go.mod |
| Go | golang.org/x/sync | v0.17.0 | go.mod |
| Go | golang.org/x/sys | v0.37.0 | go.mod |
| Go | google.golang.org/genproto/googleapis/api | v0.0.0-20240814211410-ddb44dafa142 | go.mod |
| Go | google.golang.org/grpc | v1.67.1 | go.mod |
| Go | google.golang.org/protobuf | v1.34.2 | go.mod |
| Go | gorm.io/driver/postgres | v1.5.7 | go.mod |
| Go | gorm.io/driver/sqlite | v1.5.6 | go.mod |
| Go | gorm.io/gorm | v1.25.10 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 48462,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 351881,
"HTML": 25875,
"Makefile": 1814
},
"pushed_at": "2026-06-29T13:30:13Z",
"created_at": "2024-10-24T08:00:37Z",
"owner_type": "Organization",
"updated_at": "2026-06-23T08:19:28Z",
"description": "Automatic Cosmos SDK Network Upgrades",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://chorus.one",
"name": "Chorus One",
"type": "Organization",
"login": "ChorusOne",
"company": null,
"location": "Global",
"followers": 102,
"avatar_url": "https://avatars.githubusercontent.com/u/36706567?v=4",
"created_at": "2018-02-21T16:38:13Z",
"is_verified": null,
"public_repos": 300,
"account_age_days": 3072
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2026-06-23T08:23:02Z"
},
{
"tag": "v1.8.3",
"kind": "patch",
"published_at": "2026-06-22T15:48:53Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2025-11-17T16:35:59Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2025-11-17T16:02:02Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2025-11-04T11:07:51Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2025-07-15T18:21:53Z"
},
{
"tag": "v1.4.5",
"kind": "patch",
"published_at": "2025-03-04T18:26:08Z"
},
{
"tag": "v1.4.4",
"kind": "patch",
"published_at": "2025-02-28T15:56:55Z"
},
{
"tag": "v1.4.2",
"kind": "patch",
"published_at": "2025-02-17T12:38:37Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2024-12-20T06:01:46Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2024-12-08T06:39:17Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2024-11-14T09:54:13Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2024-11-09T13:12:25Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2024-11-09T13:05:34Z"
}
],
"recent_commits": [
{
"oid": "145f9ac242dbbad3299ed0583db3ede02361da12",
"body": "The `cometbftClient.Status()` tries to decode the response with some\nhardcoded tags, which don't include the one used by Polygon Heimdall\n(v2), and therefore making Blazar fail on the post upgrade check:\n\n```\nPost-upgrade check failed\n\nerror: post upgrade upgrade-block-signed check failed: Could not\n[…]\nttp response metadata:\n(Status: 200 OK, Protocol HTTP/1.1). error unmarshalling result:\nunknown type \"cometbft/PubKeySecp256k1eth\"\n```\n\nThis patch avoids matching the type, as we don't really need it.",
"is_bot": false,
"headline": "Decode the response as untyped JSON",
"author_name": "Sergey Mishin",
"author_login": "qezz",
"committed_at": "2026-06-23T08:19:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4b3fa1204d745406823a08f1b8aa63e4a1345476",
"body": "Previously, the function would unconditionally update the last seen\nblock height value and time, which is not correct if the height scrape\ninterval is lower than block time.\n\nE.g. if `watchers.height-interval` is set to 600ms, and the real block\ntime is 1.5s, then the block duration will be always shown as 600ms.\n\nUpdating the block timestamp only when the new block height is\ndifferent seems to be the correct approach.",
"is_bot": false,
"headline": "Fix block time calculation",
"author_name": "Sergey Mishin",
"author_login": "qezz",
"committed_at": "2026-06-22T15:40:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5e545c14f1d89f56543e7e56046bd1273077354",
"body": "The fsnotify v1.9.0 presumably fixes several bugs, which hopefully\nfixes the one that affects us.\n\nIssue recap:\n\nWe sometimes observe an issue when the upgrade-info.json file update\nevent is not observed by Blazar. That could be a bug on our side, but\nthe implementation seems to be trivial.\n\nIt needs a deeper research if the fsnotify version bump doesn't help.",
"is_bot": false,
"headline": "Update fsnotify to 1.9.0",
"author_name": "Sergey Mishin",
"author_login": "qezz",
"committed_at": "2026-01-12T16:22:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ca5b332f6e498838201e7ca4a21ae3ac41637cc",
"body": "To prevent incidental stretches of the UI.",
"is_bot": false,
"headline": "Show block time with only 3 decimals places (#64)",
"author_name": "Sergey",
"author_login": "qezz",
"committed_at": "2025-11-18T14:10:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "875c0747f89af6b3e068c4d4f1df5e27e931146b",
"body": "Updated the badges a bit. It's not the greatest in the world, but we\nstart small.\n\nAlso comes with minor patches:\n- \"Avg Block Speed\" -> \"Avg Block Time\", to be unambiguous\n- \"Force sync\" -> \"Sync now\", to reflect the reality\n- \"Time to next sync\" -> \"Next sync\", just shorter",
"is_bot": false,
"headline": "Make status badges in UI more readable (#61)",
"author_name": "Sergey",
"author_login": "qezz",
"committed_at": "2025-11-17T16:34:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f908712ab7138c245e955865da846aee89fdf270",
"body": "Old testcontainers are broken with Docker Engine v29. Bumping it to\nthe most recent v0.40.0",
"is_bot": false,
"headline": "Update to go 1.24, update testcontainers-go (#63)",
"author_name": "Sergey",
"author_login": "qezz",
"committed_at": "2025-11-17T15:56:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77910d7abbd28ec1ba4b197329c90c70b4ab698d",
"body": null,
"is_bot": false,
"headline": "use uint64 as timestamp, display the creation date in ui",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-11-04T11:05:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b52557d5ae01edab9c0be0c317f71100ef3fc8d",
"body": null,
"is_bot": false,
"headline": "use uint64 timestamps in protobuf",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-11-04T11:05:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3bd0ecbc2c71ed9d9a413d1adf82e96d1aefa85",
"body": null,
"is_bot": false,
"headline": "go mod tidy",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-11-04T11:05:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10bb8d00a57e05d73e6ddc14ac7321987115878f",
"body": null,
"is_bot": false,
"headline": "fix lint issues",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-11-04T11:05:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "841aa8a63cb3ecca4f4e549095736cc8274dfe01",
"body": null,
"is_bot": false,
"headline": "fix cancel upgrade",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-11-04T11:05:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c04616fd228f940a1fca2ae8c6f2af7acddcd9dc",
"body": null,
"is_bot": false,
"headline": "generate proto files",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-11-04T11:05:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bf29b6be4be5704f3d0ca41ea33202e8113bad0",
"body": null,
"is_bot": false,
"headline": "add timestamp to the schema",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-11-04T11:05:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aea10e213ac2f9484910df2f8befe666005435c6",
"body": null,
"is_bot": false,
"headline": "fix blazar night mode color",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2025-07-30T09:34:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c8df4d3d9929abc8f1844adef039ae78b9bf355",
"body": null,
"is_bot": false,
"headline": "fix typo",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-07-15T18:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80e5e99749b457e257f72d3930618970ff8166bd",
"body": null,
"is_bot": false,
"headline": "pass precheck config to pull image function",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-07-15T18:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa3bd8c3a77e9c00751c7c47452c650ab32168d0",
"body": null,
"is_bot": false,
"headline": "add configurable amount of retries in pre-check, update function calls",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-07-15T18:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d26d65c5f837731b7e915001252cfb6c097d6409",
"body": null,
"is_bot": false,
"headline": "add retry wrapper to pull image function",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-07-15T18:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b479a2f725cfa01314ca936e3019e0a0790dee7e",
"body": null,
"is_bot": false,
"headline": "add reading version at blazar startup",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-07-09T09:19:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a88b61976515e0f4a0eee0558be07a7a1efbd349",
"body": null,
"is_bot": false,
"headline": "Use proper values in test metric constructor",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-04-10T12:22:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f5a38d1c5246524a4b1aab8c3e8eab52e2d3b01",
"body": null,
"is_bot": false,
"headline": "add chain id to config and export it as label",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-04-10T12:22:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d29c5ff5c61173789cfd9a191571a6ca0ef5da0",
"body": null,
"is_bot": false,
"headline": "fix lints",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-04-03T12:02:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4baef415c302bbb846e370b0879d9b0fcfe28bb1",
"body": null,
"is_bot": false,
"headline": "add poll interval to proxy config",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-04-03T12:02:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "108d47c20009ab6d299d2605c05b38b35fa60238",
"body": null,
"is_bot": false,
"headline": "poll instances in background",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-04-03T12:02:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ee47e4e82364431e9bc65874100ce8d4152e092",
"body": null,
"is_bot": false,
"headline": "refactor check instances function out of index handler",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-04-03T12:02:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "227373c15a7ae03159d1d53e74b30257229c2ddf",
"body": null,
"is_bot": false,
"headline": "do not show warning icon if upgrade cancelled or expired",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-03-28T13:30:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b004da3a9c914c9dcbed57e0e268d748cdb8f054",
"body": null,
"is_bot": false,
"headline": "only show warning icon with failed updates, nothing otherwise",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-03-28T13:30:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad98de883185a97f51024fb2a3839f72116ee249",
"body": null,
"is_bot": false,
"headline": "Tolerate a missing top-level \"Result\" key on /status endpoint",
"author_name": "David Ventura",
"author_login": "DavidVentura",
"committed_at": "2025-03-18T12:57:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a0054c4388396422c72227393b2f716ec922ee9",
"body": null,
"is_bot": false,
"headline": "add more logs",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2025-03-04T18:21:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df750681feeff3ae808c6257e2033d3ba11b64e8",
"body": null,
"is_bot": false,
"headline": "add additional logs for fsnotify watcher",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2025-03-04T18:21:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "385411c29bcceb25697f2fdbcf3a6e1d923e98c2",
"body": "…height",
"is_bot": false,
"headline": "Drop element identifier, use onClick js function to handle uprade at …",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-03-04T17:16:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2978299b47d98681fdf0ae5455b35ac3aa915d10",
"body": null,
"is_bot": false,
"headline": "fix first_block_voted post upgrade check",
"author_name": "Ksawery Wróbel",
"author_login": "pyoxa",
"committed_at": "2025-02-28T15:51:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "290d1db5af427c47f395140edb3bc9d41d80e85a",
"body": "Support chains with no gRPC & with BLS keys",
"is_bot": false,
"headline": "Support chains with no gRPC & with BLS keys (#43)",
"author_name": "David Ventura",
"author_login": "DavidVentura",
"committed_at": "2025-02-28T14:18:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0e6420fd58752220b3faeeb3988796cefc3ed12",
"body": "* Change warning icon to a register at height button\n\n* Use data-height attribute; only show + when upgrade height hasn't yet passed\n\n* Change the div to a button",
"is_bot": false,
"headline": "Change warning icon to a register at height button (#42)",
"author_name": "Ksawery",
"author_login": "pyoxa",
"committed_at": "2025-02-26T13:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38068b72cf672015120f7ba5f5d1713a1098c533",
"body": null,
"is_bot": false,
"headline": "update log info message",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2025-02-24T09:42:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbc329e435484490f5034b72bb67a96abafcf6fa",
"body": null,
"is_bot": false,
"headline": "fix typo in the comment",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2025-02-24T09:42:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20564e84b098a8ff886d6547a7ed5d73bdad7883",
"body": null,
"is_bot": false,
"headline": "apply the same tests for both file watchers",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2025-02-24T09:42:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c4f854203e49e9f551543b09ebec8e81ffa4070",
"body": null,
"is_bot": false,
"headline": "ignore no-events for polling watcher",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2025-02-24T09:42:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eaa6045c10c7d9466b7d4ebfb3b8ff2467cc2fb1",
"body": null,
"is_bot": false,
"headline": "add additional log to distinguish which watcher was selected",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2025-02-24T09:42:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3221c9e9e099eb7f7394bf83014c189e883fe317",
"body": null,
"is_bot": false,
"headline": "fsnotify file watcher",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2025-02-24T09:42:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fa8a97858cb5d1b7be61d31ba9c9de36836e83b",
"body": null,
"is_bot": false,
"headline": "fix zero height check",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2025-02-23T16:11:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fa83eb49e59c4ed0f2456b9806e7461009c7a55",
"body": "* Metrics: add metric for proxy connection error\n\n* Change import order\n\n* Fix labels and metric description",
"is_bot": false,
"headline": "Metrics: add metric for proxy connection error (#39)",
"author_name": "Ksawery",
"author_login": "pyoxa",
"committed_at": "2025-02-20T16:05:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e811ad646db01c226a83aee82416554eddf47fc",
"body": null,
"is_bot": false,
"headline": "Metrics: add upgrade_tag to blazar_blocks_to_upgrade_height (#38)",
"author_name": "Ksawery",
"author_login": "pyoxa",
"committed_at": "2025-02-20T15:51:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8483b5597e7c19108e1773e9aa559f74cecb0075",
"body": null,
"is_bot": false,
"headline": "nits",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2025-02-17T12:36:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5beefe6d0db56704420eb362c93c9b3f8db865b",
"body": null,
"is_bot": false,
"headline": "Add a timeout to hw to re-create ws subscription",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2025-02-17T12:36:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f05768d40d208e941dd4e1e28079b10b2f492d79",
"body": null,
"is_bot": false,
"headline": "move file watcher even log outside of the busiest loop",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2025-02-17T11:54:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15deff9c3b062ec959e8674ffc0d487e9dfa8388",
"body": null,
"is_bot": false,
"headline": "Add debug logging to fw, cancel fw when uiw exits",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2025-02-17T11:54:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f5846e9842e3bf3025c79bde130867b126199ef",
"body": null,
"is_bot": false,
"headline": "Add debug logging to watchers",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2025-02-17T11:54:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f10ca89c154a5dbcdbf168a38fc7582bc62d2503",
"body": null,
"is_bot": false,
"headline": "Fix lint",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2025-02-14T10:07:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc7327b430ba56f6d852451d3307e2fda4dc0482",
"body": null,
"is_bot": false,
"headline": "Add wrapper methods to update state in daemon",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2025-02-14T10:07:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a759dec9a0176c464a3590c770177b4e9c8b92a7",
"body": null,
"is_bot": false,
"headline": "Export pre checks, post checks status in metrics",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2025-02-14T10:07:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7542b55fd99282acfe9667176d34ab143275b52c",
"body": null,
"is_bot": false,
"headline": "Remove enforced light mode from UI",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2024-12-19T17:29:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d99506728f09187b7ce9136b7101d7b44135740",
"body": null,
"is_bot": false,
"headline": "Use transparent background logo in UI",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2024-12-19T17:29:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd8502cfa20ffaefef4ad18269f1501a13a42218",
"body": null,
"is_bot": false,
"headline": "Add last_observed_height metric",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2024-12-19T16:55:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90fc26b6869c3858fd23aaee8431949a5277cbd1",
"body": null,
"is_bot": false,
"headline": "Add better notifications for upgrade process",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2024-12-19T16:52:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd8128b64534a22f333a606b260fa798c1d3041a",
"body": null,
"is_bot": false,
"headline": "Remove test for removed dcc.Down check",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2024-12-17T17:48:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de06dace2fb3de92c5655d99cd2e4614d3938cc0",
"body": "The check can be racy, let the caller do whatever checks it wants to do.\ndaemon.go already has a check when it decides if dcc.Down is needed or not\nNow we also add a check to RestartServiceWithHaltHeight before it calls Down,\nwith an appropriate error message.",
"is_bot": false,
"headline": "Don't require container to be down in dcc.Down",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2024-12-17T17:48:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c749754e97b7b6a2651d8cc395647315b1fcda2",
"body": "… labels to blazar_blocks_to_upgrade_height (#27)",
"is_bot": false,
"headline": "Remove blazar_upgrade_step metric and add validator_address, chain_id…",
"author_name": "Manas",
"author_login": "sin3point14",
"committed_at": "2024-12-17T11:42:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2c9d9bd3bfd88b4b8ee778cd63e4e161ec3dbb2",
"body": "If multiple passed upgrade proposals are in the \"passed\" state,\nthe cosmos upgrade handler only treats the one with the highest proposal ID\nas \"passed\" and all other passed proposals as \"cancelled\".\nhttps://github.com/cosmos/cosmos-sdk/blob/f007a4ea0711da2bac20afc6283885c1b2496ae5/x/upgrade/keeper/keeper.go#L189-L193",
"is_bot": false,
"headline": "Correctly handle multiple passed upgrade proposals acc to cosmos-sdk",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2024-11-29T08:10:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f815dc75b7fd03ea515c3df8d9e99781eff6512",
"body": null,
"is_bot": false,
"headline": "Rename proposal_status label to upgrade_status",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2024-11-19T15:57:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "655c98b24fe35c3d72595a64d4bad98d7b3dd581",
"body": null,
"is_bot": false,
"headline": "Change upgrade_state metric to upgrade_step",
"author_name": "sin3point14",
"author_login": "sin3point14",
"committed_at": "2024-11-19T15:45:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50c99b9dcd9b5562d223ad05abc70c73cc3b4465",
"body": null,
"is_bot": false,
"headline": "fix(client): properly cancel contexts in proposal pagination",
"author_name": "d0tsh",
"author_login": "d0tsh",
"committed_at": "2024-11-17T18:50:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d78ead0373c31ee72141cdc0e5459345d4aa5c2",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2024-11-12T08:16:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5f92ba12e4fea7b86916163da7e0fdd56eba74e",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2024-11-11T11:27:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af9915595a52055db198efa9b3f12d1d467e51ae",
"body": null,
"is_bot": false,
"headline": "display network name even if there is no upgrades for blazar instance",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2024-11-10T08:51:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ddaa8d77241c4212ec30bda94947cc1836ed8a0",
"body": null,
"is_bot": false,
"headline": "add integration test for governance upgrades",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2024-11-09T12:52:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40d87684c5f7ecd605394e215379ec8ce747cbe9",
"body": null,
"is_bot": false,
"headline": "support governance type upgrades from non chain providers",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2024-11-09T11:12:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7baae0b641825cb9419dca39846c80e87b785ebe",
"body": null,
"is_bot": false,
"headline": "update migrations readme",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2024-11-09T10:06:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "346a976ba9d51ea24c9aec14841bafe16b201306",
"body": null,
"is_bot": false,
"headline": "fix typo fror -> for",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2024-11-09T08:36:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "113d6ce23798d2f982af218085348b535223a3d1",
"body": null,
"is_bot": false,
"headline": "handle multiple upgrades for the same height in chain provider",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2024-11-09T08:36:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c9b51182b0bdcb45e9b13eb7bfd125b01f02988",
"body": null,
"is_bot": false,
"headline": "set priority key to not null",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2024-11-08T21:29:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4b065130d0bc0129a8754591aa0359766faab41",
"body": null,
"is_bot": false,
"headline": "update readme with license",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2024-11-05T22:12:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c17c41c0de00c228b4cf565efcac642271af7a42",
"body": null,
"is_bot": false,
"headline": "blazar v1.0.0",
"author_name": "Mateusz Kaczanowski",
"author_login": "mkaczanowski",
"committed_at": "2024-10-24T08:21:50Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 14,
"commits_last_year": 14,
"latest_release_at": "2026-06-23T08:23:02Z",
"latest_release_tag": "v1.9.0",
"releases_from_tags": false,
"days_since_last_push": 22,
"active_weeks_last_year": 5,
"days_since_latest_release": 28,
"mean_days_between_releases": 61.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 3,
"stars": 26,
"watchers": 4,
"fork_history": {
"days": [
{
"date": "2024-11-12",
"count": 1
},
{
"date": "2024-11-13",
"count": 1
},
{
"date": "2024-11-15",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": {
"days": [
{
"date": "2024-11-12",
"count": 9
},
{
"date": "2024-11-13",
"count": 2
},
{
"date": "2024-11-14",
"count": 4
},
{
"date": "2024-11-17",
"count": 1
},
{
"date": "2024-11-20",
"count": 1
},
{
"date": "2024-11-21",
"count": 1
},
{
"date": "2024-11-22",
"count": 2
},
{
"date": "2024-12-01",
"count": 1
},
{
"date": "2024-12-19",
"count": 1
},
{
"date": "2025-01-08",
"count": 1
},
{
"date": "2025-03-20",
"count": 1
},
{
"date": "2025-10-09",
"count": 1
},
{
"date": "2026-01-20",
"count": 1
}
],
"complete": true,
"collected": 26,
"total_stars": 26
},
"open_issues_and_prs": 12
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [
"proto/blazar.proto",
"proto/checks.proto",
"proto/google/api/annotations.proto",
"proto/google/api/http.proto",
"proto/upgrades_registry.proto",
"proto/version_resolver.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod",
"testdata/docker/echo-dockerfile/go.mod"
],
"largest_source_bytes": 32474,
"source_files_sampled": 80,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/BurntSushi/toml",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.2"
},
{
"name": "github.com/cometbft/cometbft",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.37.5"
},
{
"name": "github.com/compose-spec/compose-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.17.0"
},
{
"name": "github.com/cosmos/cosmos-sdk",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.47.13"
},
{
"name": "github.com/docker/docker",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v28.5.1+incompatible"
},
{
"name": "github.com/docker/docker-credential-helpers",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.1"
},
{
"name": "github.com/fsnotify/fsnotify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.0"
},
{
"name": "github.com/grpc-ecosystem/grpc-gateway/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.19.1"
},
{
"name": "github.com/jedib0t/go-pretty/v6",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v6.5.8"
},
{
"name": "github.com/otiai10/copy",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.12.0"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.18.0"
},
{
"name": "github.com/rs/zerolog",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.32.0"
},
{
"name": "github.com/slack-go/slack",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.14.0"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "github.com/testcontainers/testcontainers-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.40.0"
},
{
"name": "golang.org/x/sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.17.0"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.37.0"
},
{
"name": "google.golang.org/genproto/googleapis/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20240814211410-ddb44dafa142"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.67.1"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.34.2"
},
{
"name": "gorm.io/driver/postgres",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.7"
},
{
"name": "gorm.io/driver/sqlite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.6"
},
{
"name": "gorm.io/gorm",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.25.10"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 43,
"open_issues": 11,
"closed_ratio": 0.45,
"closed_issues": 9,
"closed_unmerged_prs": 4
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "pyoxa",
"commits": 25,
"avatar_url": "https://avatars.githubusercontent.com/u/44951270?v=4"
},
{
"type": "User",
"login": "mkaczanowski",
"commits": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/4912567?v=4"
},
{
"type": "User",
"login": "sin3point14",
"commits": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/43549821?v=4"
},
{
"type": "User",
"login": "qezz",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/5172876?v=4"
},
{
"type": "User",
"login": "DavidVentura",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/3650670?v=4"
},
{
"type": "User",
"login": "d0tsh",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/164099749?v=4"
}
],
"contributors_sampled": 6,
"top_contributor_share": 0.342
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"blazar.yml"
],
"has_docs_dir": false,
"linter_configs": [
".golangci.yaml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 6,
"reason": "10 out of 15 merged PRs checked by a CI test -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 1,
"reason": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "57 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "145f9ac242dbbad3299ed0583db3ede02361da12",
"ran_at": "2026-07-22T07:34:16Z",
"aggregate_score": 3.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-06-23T08:21:47Z",
"oldest_open_prs": [
{
"number": 68,
"created_at": "2026-06-29T13:38:52Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-06-23T08:19:14Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 1,
"created_at": "2024-10-24T08:38:40Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2,
"created_at": "2024-10-24T08:45:03Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 3,
"created_at": "2024-10-24T08:54:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 4,
"created_at": "2024-10-24T09:00:52Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 5,
"created_at": "2024-10-24T09:03:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 6,
"created_at": "2024-10-24T09:08:44Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 7,
"created_at": "2024-10-24T09:17:41Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 8,
"created_at": "2024-10-24T23:11:05Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 19,
"created_at": "2024-11-13T15:30:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 55,
"created_at": "2025-04-20T19:59:44Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 56,
"created_at": "2025-06-09T11:57:47Z",
"last_comment_at": "2025-08-04T11:14:55Z",
"last_comment_author": "mkaczanowski"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/ChorusOne/blazar",
"host": "github.com",
"name": "blazar",
"owner": "ChorusOne"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"security": 37,
"vitality": 63,
"community": 38,
"governance": 64,
"engineering": 66
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 63,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"commits_last_year": 14,
"human_commit_share": 1,
"days_since_last_push": 22,
"active_weeks_last_year": 5
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 22 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 22
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "5/52 weeks with commits",
"points": 3.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 5
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "14 commits in the last year",
"points": 10.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 14
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 14,
"latest_release_tag": "v1.9.0",
"releases_from_tags": false,
"days_since_latest_release": 28,
"mean_days_between_releases": 61.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "14 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 14
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 28 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 28
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~61.1 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 61.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 28,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 28 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 28
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 38,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 28,
"inputs": {
"forks": 3,
"stars": 26,
"watchers": 4,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "below_threshold"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "26 stars",
"points": 22.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 26
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "4 watchers",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 4
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 6,
"top_contributor_share": 0.342
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 34% of commits",
"points": 14.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 34
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "6 contributors",
"points": 8.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 6
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"merged_prs": 43,
"open_issues": 11,
"closed_issues": 9,
"issue_closed_ratio": 0.45,
"closed_unmerged_prs": 4
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "45% of issues closed",
"points": 21,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 45
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "43/47 decided PRs merged",
"points": 35,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 43,
"decided": 47
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"followers": 102,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "ChorusOne",
"public_repos": 300,
"account_age_days": 3072
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "102 followers of ChorusOne",
"points": 14.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 102,
"login": "ChorusOne"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "300 public repos, account ~8 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 300
}
},
{
"code": "account_age_years",
"params": {
"years": 8
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 66,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yaml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "10 out of 15 merged PRs checked by a CI test -- score normalized to 6",
"points": 12,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 37,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "10 out of 15 merged PRs checked by a CI test -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "57 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 53,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.178,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "13 of 73 human commits state their intent (structured subject or explanatory body)",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 13,
"sampled": 73
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod",
"testdata/docker/echo-dockerfile/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yaml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 73",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 73
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 32474,
"source_files_sampled": 80,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/80 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 80,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [],
"has_mcp_signal": false,
"api_schema_files": [
"proto/blazar.proto",
"proto/checks.proto",
"proto/google/api/annotations.proto",
"proto/google/api/http.proto",
"proto/upgrades_registry.proto",
"proto/version_resolver.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "proto/blazar.proto, proto/checks.proto, proto/google/api/annotations.proto, proto/google/api/http.proto, proto/upgrades_registry.proto, proto/version_resolver.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "proto/blazar.proto, proto/checks.proto, proto/google/api/annotations.proto, proto/google/api/http.proto, proto/upgrades_registry.proto, proto/version_resolver.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-22T07:34:38.122067Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/ChorusOne/blazar.svg",
"full_name": "ChorusOne/blazar",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.