Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-28 07:44 UTC
GrayCodeAI / hawk-core-contracts
Zero-dependency shared type definitions for the hawk ecosystem: findings, severity, events, policy verdicts, session state.
GrayCodeAI/hawk-core-contracts holds a health index of 55 out of 100, placing it in the Moderate band. It scores highest on Vitality (74/100) and lowest on Community & Adoption (31/100). It was last updated today. A single contributor accounts for most of its recent work.
55
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
55
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
GrayCodeOrganization
8 followers23 public repossince Feb 2026
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/GrayCodeAI/hawk-core-contracts | v0.1.9 | - | 9 | 2 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
74
Development activity
56Moderate
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 4.2/36 | Commit cadence — 6/52 weeks with commits |
| 15.3/18 | Commit volume — 50 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 50 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 6 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 5 releases published |
| 36/36 | Release recency — latest release 2 days ago |
| 27/27 | Release cadence — a release every ~3.6 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 5 |
| latest_release_tag | v0.1.9 |
| releases_from_tags | no |
| days_since_latest_release | 2 |
| mean_days_between_releases | 3.6 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
31
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
65Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 13.5/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | yes |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
55
Maintainer resilience (bus factor)
16Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 6/10 | OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 38.2/38.3 | PR acceptance — 21/21 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 21 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
Ownership & stewardship
48At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 6.9/25 | Owner reach — 8 followers of GrayCodeAI |
| 11/25 | Track record — 23 public repos, account ~0 yr old |
Inputs used
| followers | 8 |
| owner_type | Organization |
| is_verified | — |
| owner_login | GrayCodeAI |
| public_repos | 23 |
| account_age_days | 166 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 2 days ago |
| 20/20 | Version history — 9 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/GrayCodeAI/hawk-core-contracts |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 2 |
Engineering Quality
Are baseline engineering and documentation practices in place?
60
Engineering practices
60Moderate
How it's scored
| 24/24 | CI workflows — 2 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
60Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 10/10 | Topics — 11 topics |
| 10/10 | Wiki |
Inputs used
| topics | contracts, events, findings, go, policy, protobuf, shared-library, types, zero-dependency, ai, graycode |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
47
Security posture
47At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 1.5/2.5 | Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — no data |
| 5/5 | Pinned-Dependencies — all dependencies are pinned |
| 0/5 | SAST — no SAST tool detected |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 14 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 4 |
| scorecard_aggregate | 4.7 |
Excluded from scoring (no data or not applicable): branch_protection, ci_tests, packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
71
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — AGENTS.md, CLAUDE.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 46 of 50 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.92 |
| agent_instruction_files | AGENTS.md, CLAUDE.md |
| agent_instruction_max_bytes | 5,524 |
Verify loop (build / test / typecheck)
61Moderate
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 50 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 10/10 | OpenSSF Scorecard: Pinned-Dependencies — all dependencies are pinned |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/29 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 14,923 |
| source_files_sampled | 29 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — proto/hawk/contracts/v1/agent.proto, proto/hawk/contracts/v1/events.proto, proto/hawk/contracts/v1/finding.proto, proto/hawk/contracts/v1/graph.proto, proto/hawk/contracts/v1/llm.proto, proto/hawk/contracts/v1/policy.proto, proto/hawk/contracts/v1/review.proto, proto/hawk/contracts/v1/sessions.proto, proto/hawk/contracts/v1/severity.proto, proto/hawk/contracts/v1/tool.proto, proto/hawk/contracts/v1/verify.proto |
| 0/20 | MCP server |
| 0/40 | Runnable examples |
Inputs used
| example_dirs | — |
| has_mcp_signal | no |
| api_schema_files | proto/hawk/contracts/v1/agent.proto, proto/hawk/contracts/v1/events.proto, proto/hawk/contracts/v1/finding.proto, proto/hawk/contracts/v1/graph.proto, proto/hawk/contracts/v1/llm.proto, proto/hawk/contracts/v1/policy.proto, proto/hawk/contracts/v1/review.proto, proto/hawk/contracts/v1/sessions.proto, proto/hawk/contracts/v1/severity.proto, proto/hawk/contracts/v1/tool.proto, proto/hawk/contracts/v1/verify.proto |
Key facts
0GitHub stars
1contributors
50commits, last 12 months
0days since last push
5releases
1bus factor
0open issues
Gopackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 4.7 / 10
4.7aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 6 | Contributors | project has 2 contributing companies or organizations -- score normalized to 6 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/a | Packaging | packaging workflow not detected |
| 10 | Pinned-Dependencies | all dependencies are pinned |
| 0 | SAST | no SAST tool detected |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"contracts",
"events",
"findings",
"go",
"policy",
"protobuf",
"shared-library",
"types",
"zero-dependency",
"ai",
"graycode"
],
"is_fork": false,
"size_kb": 118,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 100812,
"Shell": 2208,
"Makefile": 6103
},
"pushed_at": "2026-07-28T06:13:35Z",
"created_at": "2026-06-21T04:31:45Z",
"owner_type": "Organization",
"updated_at": "2026-07-28T06:09:32Z",
"description": "Zero-dependency shared type definitions for the hawk ecosystem: findings, severity, events, policy verdicts, session state.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "GrayCode",
"type": "Organization",
"login": "GrayCodeAI",
"company": null,
"location": "India",
"followers": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/260990539?v=4",
"created_at": "2026-02-11T17:56:21Z",
"is_verified": null,
"public_repos": 23,
"account_age_days": 166
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2026-07-25T15:39:06Z"
},
{
"tag": "v0.1.8",
"kind": "patch",
"published_at": "2026-07-22T17:31:22Z"
},
{
"tag": "v0.1.7",
"kind": "patch",
"published_at": "2026-07-22T06:15:02Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2026-07-16T17:04:15Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2026-07-11T05:16:02Z"
}
],
"recent_commits": [
{
"oid": "79dc0bd1751e7353a3fc04a48615487b810b0863",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of https://github.com/GrayCodeAI/hawk-core-contracts",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-26T09:18:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7514ea969f38317ff5d9d3b5a2df55423786d7e",
"body": "Automated merge of feature branch into main",
"is_bot": false,
"headline": "Merge feature branch into main",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-26T08:57:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a2e082132d0eb4e4ab2448e23ccb6bb7bb95c01",
"body": null,
"is_bot": false,
"headline": "Merge main",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-26T08:19:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "273c510f557b102f5143ee27a42b9f62fd99fa18",
"body": null,
"is_bot": false,
"headline": "feat: add NodeTypeSystem alias for backward compatibility",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-26T06:02:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a38dc3d53702109718199cd672a329bb4f424e06",
"body": null,
"is_bot": false,
"headline": "feat: add NodeTypeOperations constant to graph contracts",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-26T03:59:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9516c8990e2b9f3c93a71c330718f7fa72188673",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of https://github.com/GrayCodeAI/hawk-core-contracts",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-25T15:17:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e468e0b9caa9180367745ac6cf859ea9f8927e8",
"body": "Adds new NodeType constants for quality analysis and execution journal\nnodes used by the ecosystem architecture enhancements across inspect,\nsight, tok, and trace.",
"is_bot": false,
"headline": "feat(graph): add NodeTypeQuality and NodeTypeExecution constants (#20)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-25T15:15:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1326373871408468b9300edd2023d34aa646b627",
"body": "Adds new NodeType constants for quality analysis and execution journal\nnodes used by the ecosystem architecture enhancements across inspect,\nsight, tok, and trace.",
"is_bot": false,
"headline": "feat(graph): add NodeTypeQuality and NodeTypeExecution constants",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-25T14:44:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5937a10319fca0221f379ec2009f6820b3ff218d",
"body": null,
"is_bot": false,
"headline": "fix: graph syntax error and type conversion (#19)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-25T10:53:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65be6c089f124aca990a092b9d0959ad97d92d70",
"body": "feat: ecosystem architecture enhancements (Graph, Loop, Context, Harness)",
"is_bot": false,
"headline": "Merge pull request #18 from GrayCodeAI/feat/contract-test-coverage",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-25T10:14:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "267e0cae2ef095c9c9cb350b3259f9474652dde7",
"body": "- Add robust Prompt Template engine with Go template support\n- Isolate prompt engineering logic into a core portable contract package",
"is_bot": false,
"headline": "feat: add prompt engineering template engine",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-25T07:45:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ddfc92ac4610d6e82a5f9e32fa6d0eb10f01cd1d",
"body": "- Add NodeType enum (agent, tool, function, start, end, router)\n- Add NodeSpec, EdgeSpec, EdgeCondition, GraphSpec types\n- Update proto definitions to match\n- Add validation methods for new types",
"is_bot": false,
"headline": "feat: enhance graph contracts with LangGraph patterns",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-25T07:35:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5b66713bed4073ff6ef008d29923b4a81d1b2cf",
"body": "- Add graph/ package with graph implementation\n- Add proto/hawk/contracts/v1/graph.proto\n- Update README",
"is_bot": false,
"headline": "feat: add graph package and proto",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-25T07:01:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb6d8c670b9d1449dad5bb520ca3542301d0b1bd",
"body": "- types/severity_test.go: add TestSeverityString (all severity levels +\n out-of-range → \"unknown\") and TestSeverityAtLeast (ordering comparisons).\n- types/finding_test.go: add TestFindingSliceSortOrder (severity-desc then\n confidence-desc), TestFindingSliceFilterBySource,\n TestFindingSliceFilterB\n[…]\ndence),\n TestFindingSliceSummaryEmpty (zero-value guard), TestFindingFromSight,\n TestFindingFromInspect.\n\nAll package tests pass (agent, events, llm, policy, review, sessions,\ntools, types, verify).",
"is_bot": false,
"headline": "feat(contracts): add tests for untested pure functions in types package",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-24T07:15:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "73de5a949518a1d8b37001f8662c0ba9a846dc02",
"body": "…hods\n\nBoth Severity.String() and FinalizeErrorCode.String() checked only the upper\nbound (int(x) < len(names)) without a lower-bound check, so a negative enum\nvalue would pass the guard and panic on array indexing. Add int(x) >= 0 check.",
"is_bot": false,
"headline": "fix(types,tools): guard against negative-index panics in String() met…",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-23T14:44:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05e19925c09ec1a40c56eda0c531c88b91f5e753",
"body": "chore(release): hawk-core-contracts 0.1.8",
"is_bot": false,
"headline": "Merge pull request #17 from GrayCodeAI/release/v0.1.8",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-22T17:31:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfb7088e79ba69c49b8c74ddd982456682e7d479",
"body": "Tag the host-port alignment (EventStreamer, ToolCall aliases, llm.proto)\nas a proper module version so consumers can pin without pseudo-version\nunshallow issues in CI.",
"is_bot": false,
"headline": "chore(release): hawk-core-contracts 0.1.8",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-22T17:28:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb8043eeb2265ccb0fb57195da2ef354d0ee951c",
"body": "fix(llm): align host port, unify ToolCall, bump VERSION to 0.1.7",
"is_bot": false,
"headline": "Merge pull request #16 from GrayCodeAI/feat/llm-contract-alignment",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-22T17:24:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6856529b230dcd71d20dfb06a6138b79c6875b2",
"body": "Use helper parameters for type identity checks so staticcheck does not\nflag redundant typed var declarations.",
"is_bot": false,
"headline": "fix(llm): avoid ST1023 in ToolCall alias tests",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-22T17:22:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6e6a41798bdfdb35393ee35f1cc2d25b5fd1971",
"body": "Omit redundant typed var declarations so golangci-lint/staticcheck passes.",
"is_bot": false,
"headline": "fix(llm): satisfy staticcheck ST1023 in alias tests",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-22T17:17:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c65ecd3bf3a025fd787b7efc6c33d22a98bd3008",
"body": "Correct VERSION (was stuck at 0.1.6 after the llm package release), alias\nToolCall/ToolResult to tools/, align CatalogHealth/DeploymentSummary/\nPreflight/ProviderStateSecurity with the eyrie facade, introduce pull-based\nEventStreamer on Generator.Stream, add llm.proto + unit tests, and document\nthe hawk↔eyrie port.",
"is_bot": false,
"headline": "fix(llm): align host port, unify ToolCall, bump VERSION to 0.1.7",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-22T16:53:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee9a873ca9dd5fc3e88f284d53335a57810c937c",
"body": null,
"is_bot": false,
"headline": "chore: add v0.1.7 changelog entry for llm/ package (#15)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-22T06:14:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a2bc991b9fc037dc444cf616cde2c69f7f1e737",
"body": null,
"is_bot": false,
"headline": "chore(release): add tag-release.sh helper script (#14)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-22T00:58:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "847e236343174e5dbfb1ac6cf60bc862eb0f171b",
"body": null,
"is_bot": false,
"headline": "docs: add submodule workflow note (#13)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-20T23:49:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ec6be65e7d580433011259deb372ceaaba92c85",
"body": "… (#12)\n\n* feat(llm): add canonical provider port contract\n\nSingle source of truth for the conversation DTOs and Provider interface\nthat hawk (product face) and eyrie (provider engine) speak across their\nboundary. Both sides alias to these types, eliminating the duplicated\nDTO definitions and the pe\n[…]\nch the engine's boundary form.\n\n\n* feat: add provider port interface and update types\n\n- Add ProviderPort interface for LLM provider abstraction\n- Update types for alias pattern consistency\n\n---------",
"is_bot": false,
"headline": "Merge feat/llm-port-contract: grow contract to subsume engine surface…",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-20T23:29:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "52b9e9ab31f7a5a46345eb5f35ad5d936082a77b",
"body": "* Graphify integration: AGENTS.md + CLAUDE.md\n\n* fix: demote GitNexus heading to H2 (markdownlint MD025)",
"is_bot": false,
"headline": "Graphify integration: AGENTS.md + CLAUDE.md (#11)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-18T17:27:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bc9bc1a019ca04c33e0b05063cd6086eab84c6d",
"body": "Ported from grok tools.proto finalization lifecycle and tool_meta identity\nenvelope. Hand-written Go stays source of truth; gen/ opt-in.\n\n- tool.proto: closed ToolNamespace enum (incl. ACP reserved), ToolMeta envelope,\n FinalizeErrorCode, VersionWarning, FinalizeConfigViolation, and the\n FinalizeT\n[…]\nhaviorPreset (Current/Legacy) back-compat, FinalizeResult,\n ToolMeta, closed ToolNamespace with forward-safety parse (unknown ns errors).\n- additive-only version bump rule documented in proto header.",
"is_bot": false,
"headline": "feat(contracts): tool contract versioning + finalization (W1B)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-16T13:31:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c8ec0fdcfa004cdeae74af94a58746bb738f8f55",
"body": "Add stdlib-only agent package with SpawnRequest/SpawnResult, capability\nand isolation parse helpers, Normalize/Validate, and canonical hook event\nnames with vendor aliases. Bump to v0.1.6 and mirror types in\nproto/hawk/contracts/v1/agent.proto.",
"is_bot": false,
"headline": "feat(agent): add typed subagent spawn contracts (Year 0 PACK-01)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-16T08:37:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9d81300264b7ac936f5f67791e586caa150df5b",
"body": "Only 3 consumers of this package exist today, all Go, already importing it\ndirectly — but the same class of drift this is meant to prevent has already\nhappened once: hawk-sdk-go independently hand-rolled its own ToolResult\nwith a field named tool_call_id, diverging from this repo's tool_use_id,\nbeca\n[…]\n.1.1 — and fixes\na real inaccuracy found while doing it: the v0.1.0 entry claimed sessions/\nexisted at initial release, but git history (git log --diff-filter=A) shows\nit was actually added in v0.1.2.",
"is_bot": false,
"headline": "Push local changes to main",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-16T00:55:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3cb72904b1987a2f78125a760473135170a8b9d4",
"body": null,
"is_bot": false,
"headline": "docs: add development workflow instructions to AGENTS.md",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-14T12:02:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31da33efbe3c99f47215df5f607797a0327ff6f0",
"body": "chore(release): hawk-core-contracts 0.1.5",
"is_bot": false,
"headline": "chore(release): hawk-core-contracts 0.1.5",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-14T11:10:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c204482e28d98f1ce53ea8e18e677c00d1aff5ee",
"body": null,
"is_bot": false,
"headline": "chore(release): hawk-core-contracts 0.1.5",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-14T03:48:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc5c86869d636cc3e23d1c37d6fd11769968148b",
"body": "The shared workflow template pinned trufflesecurity/trufflehog to a\ncommit SHA labeled \"main 2026-05-18\" — a floating branch reference\ndisguised as a pin, not an actual release. Repins to v3.95.9, the\ncurrent real trufflehog release. Companion fix to GrayCodeAI/hawk#96,\nwhich fixes the same issue at the template source.",
"is_bot": false,
"headline": "fix(ci): repin trufflehog to a real release tag (#7)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-13T23:39:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4670e951e1ee8eb9129ac81d841ae45849b19f8",
"body": null,
"is_bot": false,
"headline": "ci: set coverage threshold to 60% (matches current suite)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-11T05:44:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e054dc6894928918f5bf18941e0a47dd7d88bc7f",
"body": null,
"is_bot": false,
"headline": "chore: bump VERSION to 0.1.4",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-11T05:15:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0e4373df738853fce50c9cd1a695ae7a49f9c80",
"body": "refactor(docs): trim AGENTS.md to repo-specific conventions only",
"is_bot": false,
"headline": "chore: bump Go to 1.26.5, add 90% coverage threshold in CI",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-10T22:08:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2479529bd3ad38c5ebe098dac9ba73eae5c8728",
"body": "… single source of truth (#6)",
"is_bot": false,
"headline": "feat: add VERSION file and root version.go with //go:embed VERSION as…",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-08T17:40:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5b837157fd7ea48fbeb567f371f8c4cf05b53a6",
"body": "* chore: commit wip changes on feature/wip-20260705\n\n* chore: add missing documentation and standardize across ecosystem\n\n- Create AGENTS.md with 7 contract packages, scope rules, package guidelines\n- Create CODE_OF_CONDUCT.md (Contributor Covenant 2.1)\n- Create SECURITY.md with comprehensive securi\n[…]\nll instructions, package reference, migration history\n\n\n* feat: add VERSION file and root version.go with //go:embed VERSION as single source of truth\n\n* Policy and session contract updates\n\n---------",
"is_bot": false,
"headline": "Policy and session contract updates (#5)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-08T17:40:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "04f1f54cd26fe05885926a4604c7dfee4bf5c0b7",
"body": "chore: add MIT LICENSE",
"is_bot": false,
"headline": "Merge pull request #4 from GrayCodeAI/chore/add-license",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-04T23:30:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0199c748b83193cf41d9ef9ba9d80d7bf9f2ee0",
"body": "Contracts module is consumed by hawk, inspect, and sight but shipped\nwithout a license; adds MIT matching the rest of the ecosystem.",
"is_bot": false,
"headline": "chore: add MIT LICENSE",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-07-04T17:41:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15dfbf357b125909580ce674c154cee91dcfe97c",
"body": null,
"is_bot": false,
"headline": "ci: add github actions test workflow",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-06-29T17:58:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "562e4ccd2e8dbb132065580428d0e7c03302035c",
"body": null,
"is_bot": false,
"headline": "feat(contracts): add sessions directory",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-06-28T16:21:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1369e558fa103dcf57c4059e45c168c56de652aa",
"body": null,
"is_bot": false,
"headline": "chore: merge quality-hardening into main",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-06-26T13:16:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e52db7b3fbef7a8e24408ccb3e77c6e0d3ee7335",
"body": "* ci: add CODEOWNERS and dependabot.yml\n\n* chore: remove dependabot.yml",
"is_bot": false,
"headline": "chore: add CODEOWNERS and dependabot.yml (#3)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-06-26T01:13:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75853a76d8faf639bc0413eebc4ada1c5abac060",
"body": null,
"is_bot": false,
"headline": "chore: remove dependabot.yml",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-06-26T01:05:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8eacd28ee49bf1854165d504bd8eb7454a2053b",
"body": null,
"is_bot": false,
"headline": "ci: add CODEOWNERS and dependabot.yml",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-06-26T00:53:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d586806b139e72334dfac517120c37523ea3043d",
"body": "Bumped go directive from 1.26 to 1.26.4 for ecosystem consistency",
"is_bot": false,
"headline": "chore: align Go version to 1.26.4 (#2)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-06-25T09:13:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d0a559206dc13e9bc57f4107c39cb37c94a2ee9",
"body": "Adds SASTFusionResult type and SASTFusion field to Result so sight's\nSAST-LLM fusion outcome is preserved when crossing the contract boundary\ninstead of being silently dropped.",
"is_bot": false,
"headline": "feat(review): add SASTFusionResult to review contract (#1)",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-06-23T15:17:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9989e563ef3931754ff4d197d49ee154fcc7391",
"body": "Replace migration-era README framing with the current contract model and\nwhen engines should depend on this module.",
"is_bot": false,
"headline": "docs: describe hawk-core-contracts as the live cross-repo API",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-06-21T10:06:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56b861964337df60aa786f83dae82a30abc6f927",
"body": "Standalone leaf module holding the shared contracts for the Hawk ecosystem:\ntypes, review, verify, events, policy, and tools. Depends on nothing; consumed\nby hawk and the support engines by version.",
"is_bot": false,
"headline": "chore: initial commit of hawk-core-contracts module",
"author_name": "Lakshman Patel",
"author_login": "Patel230",
"committed_at": "2026-06-21T04:13:49Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 5,
"commits_last_year": 50,
"latest_release_at": "2026-07-25T15:39:06Z",
"latest_release_tag": "v0.1.9",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 6,
"days_since_latest_release": 2,
"mean_days_between_releases": 3.6
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/GrayCodeAI/hawk-core-contracts",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/GrayCodeAI/hawk-core-contracts",
"is_deprecated": false,
"latest_version": "v0.1.9",
"repository_url": "https://github.com/GrayCodeAI/hawk-core-contracts",
"versions_count": 9,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-25T15:15:18Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [
"proto/hawk/contracts/v1/agent.proto",
"proto/hawk/contracts/v1/events.proto",
"proto/hawk/contracts/v1/finding.proto",
"proto/hawk/contracts/v1/graph.proto",
"proto/hawk/contracts/v1/llm.proto",
"proto/hawk/contracts/v1/policy.proto",
"proto/hawk/contracts/v1/review.proto",
"proto/hawk/contracts/v1/sessions.proto",
"proto/hawk/contracts/v1/severity.proto",
"proto/hawk/contracts/v1/tool.proto",
"proto/hawk/contracts/v1/verify.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 14923,
"source_files_sampled": 29,
"oversized_source_files": 0,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 5524
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 21,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "Patel230",
"commits": 50,
"avatar_url": "https://avatars.githubusercontent.com/u/17196758?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"release.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "79dc0bd1751e7353a3fc04a48615487b810b0863",
"ran_at": "2026-07-28T07:44:13Z",
"aggregate_score": 4.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-28T06:11:10Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-26T08:57:12Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/GrayCodeAI/hawk-core-contracts",
"host": "github.com",
"name": "hawk-core-contracts",
"owner": "GrayCodeAI"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"security": 47,
"vitality": 74,
"community": 31,
"governance": 55,
"engineering": 60
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 74,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"commits_last_year": 50,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "50 commits in the last year",
"points": 15.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 50
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 5,
"latest_release_tag": "v0.1.9",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 3.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "5 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 5
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 31,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 55,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 16,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 21,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "21/21 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 21,
"decided": 21
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"followers": 8,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "GrayCodeAI",
"public_repos": 23,
"account_age_days": 166
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "8 followers of GrayCodeAI",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 8,
"login": "GrayCodeAI"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "23 public repos, account ~0 yr old",
"points": 11,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 23
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/GrayCodeAI/hawk-core-contracts"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 2
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 2 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 2
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "9 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 9
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 60,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"topics": [
"contracts",
"events",
"findings",
"go",
"policy",
"protobuf",
"shared-library",
"types",
"zero-dependency",
"ai",
"graycode"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "11 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 11
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 47,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 47,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 14,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 4,
"scorecard_aggregate": 4.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 71,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.92,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 5524
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "46 of 50 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 46,
"sampled": 50
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 50",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 50
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 14923,
"source_files_sampled": 29,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/29 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 29,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [],
"has_mcp_signal": false,
"api_schema_files": [
"proto/hawk/contracts/v1/agent.proto",
"proto/hawk/contracts/v1/events.proto",
"proto/hawk/contracts/v1/finding.proto",
"proto/hawk/contracts/v1/graph.proto",
"proto/hawk/contracts/v1/llm.proto",
"proto/hawk/contracts/v1/policy.proto",
"proto/hawk/contracts/v1/review.proto",
"proto/hawk/contracts/v1/sessions.proto",
"proto/hawk/contracts/v1/severity.proto",
"proto/hawk/contracts/v1/tool.proto",
"proto/hawk/contracts/v1/verify.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "proto/hawk/contracts/v1/agent.proto, proto/hawk/contracts/v1/events.proto, proto/hawk/contracts/v1/finding.proto, proto/hawk/contracts/v1/graph.proto, proto/hawk/contracts/v1/llm.proto, proto/hawk/contracts/v1/policy.proto, proto/hawk/contracts/v1/review.proto, proto/hawk/contracts/v1/sessions.proto, proto/hawk/contracts/v1/severity.proto, proto/hawk/contracts/v1/tool.proto, proto/hawk/contracts/v1/verify.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "proto/hawk/contracts/v1/agent.proto, proto/hawk/contracts/v1/events.proto, proto/hawk/contracts/v1/finding.proto, proto/hawk/contracts/v1/graph.proto, proto/hawk/contracts/v1/llm.proto, proto/hawk/contracts/v1/policy.proto, proto/hawk/contracts/v1/review.proto, proto/hawk/contracts/v1/sessions.proto, proto/hawk/contracts/v1/severity.proto, proto/hawk/contracts/v1/tool.proto, proto/hawk/contracts/v1/verify.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-28T07:44:19.313994Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/GrayCodeAI/hawk-core-contracts.svg",
"full_name": "GrayCodeAI/hawk-core-contracts",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.