LumeWeb / portal

Full resolved dependency set from the GitHub dependency graph: 83 direct and 259 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 342 packages, which also include development and test pins that never ship: 5 carry known advisories, of which 1 are direct.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 7726,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 1980734,
        "Shell": 2301
      },
      "pushed_at": "2026-07-24T13:01:07Z",
      "created_at": "2023-06-28T05:12:47Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-24T13:01:41Z",
      "description": "The Web3 Hosting Platform",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "develop",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://lumeweb.com",
      "name": "Lume Web",
      "type": "Organization",
      "login": "LumeWeb",
      "company": null,
      "location": "United States of America",
      "followers": 26,
      "avatar_url": "https://avatars.githubusercontent.com/u/98288234?v=4",
      "created_at": "2022-01-23T22:19:27Z",
      "is_verified": null,
      "public_repos": 317,
      "account_age_days": 1642
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-05-26T16:49:40Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2025-01-07T14:58:31Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2025-01-01T13:40:53Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2024-11-06T10:33:24Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2024-11-06T08:29:00Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2024-11-06T08:05:05Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2024-10-31T14:45:05Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2024-10-30T11:00:33Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2024-06-19T19:24:32Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2024-06-19T04:44:31Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "d74f4f158e630272b420d9fec2921a1399c49218",
          "body": "…24.1",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/prometheus/client_golang to v1.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-24T13:00:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86a0c12ae99519b2ded285a3c16af55fd078d2da",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/gabriel-vasile/mimetype to v1.4.15",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-23T19:16:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c41a9d5fa1b4da47df2f9d42c6104291f2d979af",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.lumeweb.com/httputil to v0.5.6",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T18:15:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e95763dd4179496b2188810fd52821b9a4536585",
          "body": "…32.31",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T18:08:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0dadc7cf595818e1c0e29c165384b25aaf89f0b9",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/pressly/goose/v3 to v3.27.3",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T16:46:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c144f8a515cb524f924ad51fcdad8e60be1028c",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/gabriel-vasile/mimetype to v1.4.14",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T16:10:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a32858a7aaedf15cf9e980f8801c7addc77432ed",
          "body": "…o v1.19.30",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/credentials t…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T09:38:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "504215509d051636d08da30c966549bf2d9e14bf",
          "body": "… v1.106.0",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-22T03:01:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c41c0241abaf9508d59754104cf2ee710a6ecf4",
          "body": "…24.0",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/prometheus/client_golang to v1.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-20T20:36:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f465740515cb2096874b7cae81a1fbe6ade6bde",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update golang.org/x/exp digest to 764159d",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-19T05:18:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2bfbfa016507bcb760ad4a05fba818060d2885a1",
          "body": "…0.0-20260717182408-cc444c2a6f2c",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-18T03:12:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "149039d2061018ba0048b066a2457f24295c25c4",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.lumeweb.com/portal-router to v0.7.6",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T17:40:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50d94ef81a8af73e9b05f16f5088e8014a130546",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.lumeweb.com/portal-router to v0.7.5",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T17:17:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "901049bcdd77c6e71e5cdc782ba686ae23d9d926",
          "body": "Error keys like UPLOAD_QUOTA_EXCEEDED now produce reason UploadQuotaExceeded\ninstead of the raw SCREAMING_SNAKE_CASE value. Account errors with Err\nprefix still work (ErrAccountCreationFailed -> AccountCreationFailed).",
          "is_bot": false,
          "headline": "fix: MarshalJSON converts SCREAMING_SNAKE_CASE to PascalCase",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-17T14:40:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8e9ba1ab202e80cd12732199a55651d19b813a8",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update go.sia.tech/siastorage digest to c13c067",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T14:15:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efeb01c2a05bad715ffb595d09811e54ba92d317",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.sia.tech/core to v0.21.7",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T14:14:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68f0147acf02a6d7fdb9beb717707a5a42847ed8",
          "body": "feat(core): add MarshalJSON to core.Error for canonical error shape",
          "is_bot": false,
          "headline": "Merge pull request #1681 from LumeWeb/feat/core-error-marshal-json",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-17T14:10:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b60f16e3aba77fe393ef41b12fc5427bea8c94c5",
          "body": "Add json.Marshaler implementation to core.Error producing the canonical\n{\"error\":{\"reason\":\"...\",\"details\":\"...\"}} shape. This is the same\nlogic duplicated across IPFSError, BillingError, and QuotaError plugins.\n\nWith this change, httputil v0.5.5's errors.As-based Marshaler detection\nwill serialize \n[…]\nh ErrKey/Err prefix stripping (matches plugin logic)\n- Add json.Marshaler interface assertion\n- Remove json struct tags (MarshalJSON is now authoritative)\n- Add tests for prefix stripping and nil case",
          "is_bot": false,
          "headline": "feat(core): add MarshalJSON to core.Error for canonical error shape",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-17T14:09:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3690e7bb2666ac157a1aec0296f5d4baab3877e",
          "body": "…ults\n\nfix: use CamelCase keys in MailConfig.Defaults to match configmanager field lookup",
          "is_bot": false,
          "headline": "Merge pull request #1680 from LumeWeb/fix/mail-config-snake-case-defa…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-17T09:59:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45fe4898b58d6f7f5b987489808da0d23f53a622",
          "body": "… field lookup\n\nconfigmanager's DefaultConfigSource.findMatchingField matches defaults\nmap keys against Go struct field names (case-sensitive), not config\ntags. Snake_case keys like \"auth_type\" never matched field \"AuthType\",\nso no mail defaults were applied — AuthType stayed empty, causing\nSMTP auth to be silently skipped and MXRoute to reject with 550.",
          "is_bot": false,
          "headline": "fix: use CamelCase keys in MailConfig.Defaults to match configmanager…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-17T09:33:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e43559faad0ab8f33081057241582d04cd65e30b",
          "body": "… v1.105.2",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T03:28:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f520b2d3f5851efce7abbd9bff0035875418ee0",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/smithy-go to v1.27.4",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-17T03:18:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4eacd9b8b04bc32f4239ed5594b92119bfed43be",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-go action to v7",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-16T06:03:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fa77c4a7d9e545e262be26080c0c67c6868438a",
          "body": "Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) from 1.105.0 to 1.105.1.\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.105.0...service/s3/v1.105.1)\n\n---\nupdated-dependencie\n[…]\n.com/aws/aws-sdk-go-v2/service/s3\n  dependency-version: 1.105.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-14T02:40:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "29b8c319ccd8e187022f1d7b83e134e4f0948e43",
          "body": "…32.30",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-14T02:21:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6eeb198b960f61aef407e050e4bdc2652708d05a",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/mattn/go-sqlite3 to v1.14.48",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-13T08:32:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9257904eabb42c1aa4c377fa1fc8127fd88b83e4",
          "body": "…ation\n\nfix(migrator): remove hash computation and drop unused hash column",
          "is_bot": false,
          "headline": "Merge pull request #1670 from LumeWeb/fix/migrator-remove-hash-comput…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:53:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2f1fe247fed6728433328fb4da9e7a2ebcdab19",
          "body": "- Removed protocol.Hash() call — objectKey from renterd is already the encoded hash\n- Eliminated double-download (hash consumed reader, then re-downloaded for upload)\n- Dropped unused hash column from renter_objects table (migration + model)\n- Removed Hash field assignments from pinAndStore and uploadStaged\n- Updated tests to remove Hash field references and mock expectations",
          "is_bot": false,
          "headline": "fix(migrator): remove hash computation and drop unused hash column",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:52:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26a4f0a721391f8fe88b3c2aaac7e489b77b4a51",
          "body": "fix(db): replace gorm-prometheus plugin with core registry integration",
          "is_bot": false,
          "headline": "Merge pull request #1669 from LumeWeb/fix/db-metrics-into-core-registry",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:36:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0a57b40e54b16588e515085b0e4213f82030998",
          "body": "The gorm-prometheus plugin ran its own HTTP server on :9091\n(StartServer: true), causing port bind conflicts when multiple\nprocesses (e.g. the migrate CLI) initialize the DB.\n\nReplace it with a native dbStatsCollector that registers DB stats\ngauges on the portal's core metrics registry, exposed through the\nexisting /metrics endpoint. Same metric names (gorm_dbstats_*),\nsame refresh interval, no separate HTTP server.\n\nRemoves gorm.io/plugin/prometheus dependency.",
          "is_bot": false,
          "headline": "fix(db): replace gorm-prometheus plugin with core registry integration",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:35:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4dbdf245555b67aa16b1eee08117e04a4ae1db2",
          "body": "…oute\n\nfix(migrator): correct renterd worker download route and add missing migration",
          "is_bot": false,
          "headline": "Merge pull request #1668 from LumeWeb/fix/migrator-renterd-download-r…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:28:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afb4fb3cd5f39d04b8843e6b473701a193fc603c",
          "body": "…ing migration\n\n- renterd v2 worker route is /object/*key (singular), not /objects/*key\n- add goose migration for object_sync_cursor table (was registered as\n  a GORM model but never had a migration)",
          "is_bot": false,
          "headline": "fix(migrator): use correct renterd worker download route and add miss…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:28:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3be852fb3363d956996db7b7838ab0086e108adf",
          "body": "feat: add core.WireService for CLI commands to wire individual services",
          "is_bot": false,
          "headline": "Merge pull request #1667 from LumeWeb/feat/wire-service-helper",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T04:03:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3025fe516d11aa1a69bb41a704fe164ed6ac6e9",
          "body": "Add WireService(ctx, service) to core/context.go — extracts the\ncomponent wiring logic from ContextWithStartupComponent's OnStartup\ncallback into a reusable function. CLI commands call this after Init()\nto wire config/DB/logger/tracer into a specific service without\nrunning all startup funcs.\n\nRente\n[…]\nver path unchanged.\n\nThe migrate command now uses WireService + ServiceInit instead of\nStartComponents(), avoiding resource conflicts (LevelDB locks,\nPrometheus port bindings) with the running server.",
          "is_bot": false,
          "headline": "feat: add core.WireService for CLI commands to wire individual services",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T03:58:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "976904345d4e2b51fa54afe6f976d351d1773158",
          "body": "…nents-and-servers\n\nrefactor: split Start() into StartComponents() and StartServers()",
          "is_bot": false,
          "headline": "Merge pull request #1666 from LumeWeb/refactor/split-start-into-compo…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T03:37:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a31519f2175d95d6083df9705761256b196dda29",
          "body": "Start() is now a thin wrapper that calls StartComponents() then\nStartServers():\n\n- StartComponents(): boot start event, startup funcs (wires config/DB\n  into services and runs their init), startup funcs completed event.\n- StartServers(): plugin workflows, protocol workflows, protocols,\n  cron, HTTP,\n[…]\n starting HTTP, cron, or mailer.\n\nAlso fixes the migrate command to use ActivePortal().Context() for\nservice lookup — StartComponents updates the portal's context, making\nthe original portalCtx stale.",
          "is_bot": false,
          "headline": "refactor: split Start() into StartComponents() and StartServers()",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T03:31:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3650ffde346b14ed5e1ce64e55d9d82b6e74deec",
          "body": "fix(migrator): strip leading slash from renterd object keys",
          "is_bot": false,
          "headline": "Merge pull request #1665 from LumeWeb/fix/migrator-leading-slash",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T02:41:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d5a73b3e0a9ff2b37b52d6b4612c504793de61c",
          "body": "Renterd returns object keys with a leading slash (e.g. /Qm...), but\nnormal uploads use EncodeFileName which produces keys without a leading\nslash. Without stripping, migrated objects would be stored under a\ndifferent key than normal uploads, causing duplicate uploads and failed\nlookups by UploadExists.",
          "is_bot": false,
          "headline": "fix(migrator): strip leading slash from renterd object keys",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T02:41:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a69418094805ca57a1a472d61ca391da36cc9e8",
          "body": "fix(migrator): use ActivePortal context for service lookup",
          "is_bot": false,
          "headline": "Merge pull request #1664 from LumeWeb/fix/migrator-stale-context",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T02:31:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13ae916f6c78102c704475d4742c7e5f8327b805",
          "body": "portal.Init() creates a new context with registered services and updates\nthe portal's internal context via SetContext. The original portalCtx\npassed to NewActivePortal is stale — it doesn't have any services.\nUse portal.ActivePortal().Context() to get the updated context.",
          "is_bot": false,
          "headline": "fix(migrator): use ActivePortal context for service lookup",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T02:30:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1666bf5d7a537c06fecf86113fbc4e35a9b894f8",
          "body": "fix(migrator): use portal.Stop instead of portal.Shutdown to avoid os.Exit",
          "is_bot": false,
          "headline": "Merge pull request #1663 from LumeWeb/fix/migrator-stop-not-shutdown",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-12T02:15:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23abf85658bfe1640116069056a52a61ba905d3b",
          "body": "….Exit\n\nportal.Shutdown calls os.Exit(), which kills the process before the\nCLI framework can print returned errors. This was swallowing all\nerrors from migrateRenterdAction — including Init failures, missing\nservices, and migration errors. Use portal.Stop() for cleanup instead,\nwhich does not call os.Exit.",
          "is_bot": false,
          "headline": "fix(migrator): use portal.Stop instead of portal.Shutdown to avoid os…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T18:44:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9dcd97c15e5411047689b17e9cfdf74f7ec53290",
          "body": "fix(migrator): correct renterd API endpoints and error handling",
          "is_bot": false,
          "headline": "Merge pull request #1662 from LumeWeb/fix/migrator-renterd-endpoints",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T18:14:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bdabca7950d583332f2bb333a702b2e655d4603c",
          "body": "- Fix bus list endpoint: use /api/bus/objects/* with query params\n- Fix worker download endpoint: use /api/worker/objects/{key}\n- Consolidate bus and worker URLs into single --renterd-url flag\n  (renterd serves both on same port, different path prefixes)\n- Fix portal.Init error being swallowed by portal.Shutdown's os.Exit\n  by logging and shutting down before returning the error\n- Add comprehensive tests for RenterdClient HTTP behavior",
          "is_bot": false,
          "headline": "fix(migrator): correct renterd API endpoints and error handling",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T18:09:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06c5a8233396791b13925a8c93b160e20d2abaef",
          "body": "fix(cli): print CLI errors to stderr before exit",
          "is_bot": false,
          "headline": "Merge pull request #1661 from LumeWeb/fix/cli-print-errors",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T14:34:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf729225a18941db695e6c30d7b54ed0f46012f1",
          "body": null,
          "is_bot": false,
          "headline": "fix(cli): print CLI errors to stderr before exit",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T14:33:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06006fe619a7e4d757c12ed3f6901bb07267d780",
          "body": "fix(sia-login): gate env var output behind --print-env flag",
          "is_bot": false,
          "headline": "Merge pull request #1660 from LumeWeb/fix/sia-login-env-vars",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T14:08:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "768fcb30df547e4d2ad48b492c2a32753d1643c1",
          "body": "Env vars are no longer printed by default after login. Users must\nexplicitly opt in with --print-env. Also changed Persist() to a\nglobal save instead of scoped to core.storage.sia.",
          "is_bot": false,
          "headline": "fix(sia-login): gate env var output behind --print-env flag",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T14:07:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d4892a38a0d8e9ac192b76cd722efbd6f21c637",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.sia.tech/indexd to v0.4.0",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-11T13:43:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b242b55e63aeb3631e15d64c1965b7d421675b6c",
          "body": "fix(sia-login): persist app key to config file after BulkSetAtomic",
          "is_bot": false,
          "headline": "Merge pull request #1659 from LumeWeb/fix/sia-login-persist-app-key",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T13:40:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1135a48a84010252e55ef7327ff4aa64746691b0",
          "body": "BulkSetAtomic only sets values in-memory (koanf). Persist() must be\ncalled separately to write the values to the file source so they\nsurvive restarts.",
          "is_bot": false,
          "headline": "fix(sia-login): persist app key to config file after BulkSetAtomic",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T13:39:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "558aa4b195a7418b1ee63d400b7b7bdd0db221bc",
          "body": "fix(cron): guard Stop() against nil BaseComponent",
          "is_bot": false,
          "headline": "Merge pull request #1656 from LumeWeb/fix/cron-stop-nil-panic",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T13:36:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b622bd0e9483334f036daf4259772dfc0419d97",
          "body": "CronServiceDefault.Stop() calls c.Config() which dereferences the\nembedded *BaseComponent. When the portal shuts down before the\nstartup sequence has wired the component (e.g. migrate-renterd-objects\ncommand), BaseComponent is nil and causes a SIGSEGV.\n\nAdd a nil guard to skip cleanup when the component was never initialized.",
          "is_bot": false,
          "headline": "fix(cron): guard Stop() against nil BaseComponent",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T13:35:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3bd3bf0d4345f73e6a1b5bca19a8be4be9f33f86",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update go.sia.tech/siastorage digest to 49501b7",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-11T12:58:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d83aa1f0689a238879e2f2b38c7c519396a8cb7",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.lumeweb.com/portal-router to v0.7.4",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-11T12:43:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29428116fa4e5809f36c16d34a293b507ad5ca87",
          "body": "feat: migrate RenterService from renterd to indexd-native storage",
          "is_bot": false,
          "headline": "Merge pull request #1629 from LumeWeb/feat/indexd-renter-service",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T12:39:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71bf77cb08e8783520a62484f97474b3e5af3987",
          "body": "…cing and packing fixes\n\nMigrate RenterService from renterd to indexd-native storage.\n\nTracing (comprehensive, all methods):\n- service/renter.go: 11 methods (UploadObject, DownloadObject, etc.)\n- service/internal/indexd/packing.go: 4 methods (PackStagedObjects, uploadGroup, uploadSubGroup, RecoverSt\n[…]\nFailure_BailsEarly (Bug 4)\n\nMock enhancements:\n- MockRenterPackedUpload: AddFailOnCalls, FinalizeCount\n- MockRenterSDK: UploadFactory for per-call fresh uploads\n- MockStagingBackend: GetErr, DeleteErr",
          "is_bot": false,
          "headline": "feat(indexd): migrate RenterService to indexd-native storage with tra…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T11:32:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a1cfc8c15fe2b35c5e8451a55b63c9b9423fba11",
          "body": "fix(otel): add configurable MaxQueueSize to batch span processor",
          "is_bot": false,
          "headline": "Merge pull request #1653 from LumeWeb/fix/otel-max-queue-size",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T06:50:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2eec07a7fa07d7a36c68c14c360af3e9b0d4051",
          "body": "…cessor\n\n- Add MaxQueueSize field to TracingConfig with schema validation and default (8192)\n- Wire sdktrace.WithMaxQueueSize into the batch processor in otel_setup.go\n- Default OTel SDK MaxQueueSize is 2048, which overflows during upload\n  operations that generate 700+ error spans in a single trace, silently\n  dropping workflow and indexd spans before they reach the exporter",
          "is_bot": false,
          "headline": "[verified] fix(otel): add configurable MaxQueueSize to batch span pro…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T06:49:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "abf8c97df62158bfc3a0cd655078f7223d9c0efa",
          "body": "fix(db): migrate RetryableComponentLock callers to RetryableComponentTransaction",
          "is_bot": false,
          "headline": "Merge pull request #1652 from LumeWeb/fix/retryable-component-lock-ctx",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T01:55:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85904212d66370c0884844195c022bee09947dab",
          "body": "…leComponentTransaction\n\nRetryableComponentLock does not accept a context parameter, so DB\nqueries using it had no context propagation for tracing or cancellation.\nAll 8 call sites in renter.go and storage.go already had ctx in scope —\nmigrated all to RetryableComponentTransaction(component, ctx, ...) which\npasses ctx through to the GORM session via .WithContext(ctx).",
          "is_bot": false,
          "headline": "[verified] fix(db): migrate RetryableComponentLock callers to Retryab…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T01:51:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f70152c49c12804e991ba082ed448a96dd6c4bd2",
          "body": "…0.0-20260710211738-6b80c414e96f",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-11T01:29:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95ccd1d49f1ff8ca1bb51098945dc0d2382c1fe7",
          "body": "feat(db): add PrepareStmt, connection pool tuning, and configurable pool settings",
          "is_bot": false,
          "headline": "Merge pull request #1650 from LumeWeb/feat/db-pool-tuning",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-11T01:25:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc73eb4b75a25aa8a366285c54b86fc99deee539",
          "body": "…figurable pool settings\n\n- Enable PrepareStmt in GORM config to cache prepared statements,\n  eliminating COM_STMT_PREPARE round-trips per query (~2-5ms savings)\n- Add MaxOpenConns, MaxIdleConns, ConnMaxLifetime to DatabaseConfig\n  with sensible defaults (25/10/5m)\n- Apply pool tuning in MySQLProvider.Connect() via sql.DB setters\n- Add zog schema validation for new pool config fields",
          "is_bot": false,
          "headline": "[verified] feat(db): add PrepareStmt, connection pool tuning, and con…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T22:12:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "236aafddc70b7df2a1e2ef9d3e9ab3a059f48a49",
          "body": "feat(otel): add trace.id attribute to all spans for orphan span correlation",
          "is_bot": false,
          "headline": "Merge pull request #1649 from LumeWeb/fix/add-trace-id-attribute",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T20:47:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f18413b67748f146ccee5b05fbe60ec5f8f8be01",
          "body": "… span correlation\n\n## Summary\n- Adds trace.id as a span attribute in StartSpan so every span includes its trace ID as a searchable attribute in Tempo\n- Enables correlation of orphan spans whose parent was dropped by tail sampling",
          "is_bot": false,
          "headline": "[verified] feat(otel): add trace.id attribute to all spans for orphan…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T20:46:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1a8997e9971c65af99e11d8533e800bb0a7d88d",
          "body": "revert: remove boot span recording infrastructure",
          "is_bot": false,
          "headline": "Merge pull request #1648 from LumeWeb/fix/revert-boot-span-recording",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T19:54:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2713c9893d2f0d8de67b94970c6ff8549243896a",
          "body": "Reverts the boot span tracing approach introduced in PRs #1643, #1644,\n#1646, and #1647, plus the boot-span-specific parts of #1640 (portal.boot\nspan, SetBootTraceParent/BootTraceParent, boot traceparent links in\nworkflow and cron coordinator).\n\nThe boot span recording mechanism (DeferredSpanProcess\n[…]\nn StorageHash interface\n- WorkflowSpanAttributes with CIDString\n\nNon-boot-span changes from #1642 are preserved:\n- WithNewRoot and WithSpanKind SpanConfig options\n- Root span at ExecuteJob entry point",
          "is_bot": false,
          "headline": "[verified] revert: remove boot span recording infrastructure",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T19:52:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "53690b0b99b746eeab6b4ae9c7f84ce68db66a26",
          "body": "fix(otel): always use AlwaysSample at builder time to prevent frozen NeverSample",
          "is_bot": false,
          "headline": "Merge pull request #1647 from LumeWeb/fix/tracer-provider-sampler",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T19:11:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f20dafc670e86438f0a3b310e72ee538b6ac0708",
          "body": "…ent frozen NeverSample\n\nNewContext is called before config.Init() loads the config file. The\ndefaults have Enabled=false, so the builder-time TracerProvider was created\nwith NeverSample(). Since the sampler is immutable after creation, no spans\nwere ever recorded—even after the startup func read th\n[…]\nn\nloading real config (Enabled=true) at startup. TestDeferredSpanProcessor_\nNeverSampleDropsSpans directly proves NeverSample causes 0 spans to\nreach the exporter while AlwaysSample exports correctly.",
          "is_bot": false,
          "headline": "[verified] fix(otel): always use AlwaysSample at builder time to prev…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T19:07:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c90d28bed8204fd33ddf2c5f6f5ebc6b547c6fa3",
          "body": "fix(otel): register OnExit at builder time to ensure shutdown on all paths",
          "is_bot": false,
          "headline": "Merge pull request #1646 from LumeWeb/fix/deferred-processor-shutdown",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T12:46:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c4ea1a2c8dbb0a9da405cde244882bdaced2084",
          "body": "…own on all paths\n\nOnExit was registered inside the startup func, after early-return guards\nfor disabled tracing and missing OTLP endpoint. When either guard\ntriggered, tp.Shutdown() was never called, leaving buffered spans in\nthe DeferredSpanProcessor unflushed and silently lost.\n\nMoved OnExit registration to builder time with a closure-scoped lp\nvariable that the startup func sets when logging is enabled.",
          "is_bot": false,
          "headline": "[verified] fix(otel): register OnExit at builder time to ensure shutd…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T12:25:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d259d0995ef3052df53fb8343438c23209c89043",
          "body": "…ision\n\nfix(content_scan): resolve duplicate Prometheus metric registration",
          "is_bot": false,
          "headline": "Merge pull request #1645 from LumeWeb/fix/content-scanner-metric-coll…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T10:42:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "959bb41698c6a808db0d7b2a77cd07701cd20ab0",
          "body": "…egistration collision\n\nMetricFailed and MetricOperationFailed were both set to \"failed_total\"\nwith the same subsystem prefix, producing two collectors with the same\nfully-qualified name (content_scanner_failed_total) but different label\nsets (scanner_id vs operation) and help strings. Prometheus rejects the\nsecond registration at startup.\n\nRename MetricOperationFailed to \"operation_failed_total\", following the\nsame pattern as the workflow service (failed_total vs step_failed_total).",
          "is_bot": false,
          "headline": "fix(content_scan): rename MetricOperationFailed to avoid Prometheus r…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T10:41:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c51294454ad954d9f588e1ee08000afc19112c7",
          "body": "fix(otel): defer exporter attachment so boot spans are captured",
          "is_bot": false,
          "headline": "Merge pull request #1644 from LumeWeb/fix/deferred-span-processor",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T10:10:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c6958ce9b245c619490b6006e70fcf6f521b757",
          "body": "The TracerProvider was created inside a startup func that runs AFTER\nthe portal.boot span is created. Spans created before the provider\nwas set went to the no-op tracer and were never exported.\n\nSolution: create the TracerProvider with a DeferredSpanProcessor\nimmediately during context construction \n[…]\nContextWithTelemetry builder option\n- Startup func now only attaches the OTLP exporter to the deferred processor\n- 5 regression tests covering buffering, forwarding, shutdown, idempotency, concurrency",
          "is_bot": false,
          "headline": "fix(otel): defer exporter attachment so boot spans are captured",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T10:08:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d5962dc480f74c61ffe575d9bd175bac1aa892f3",
          "body": "fix(boot): force root span at portal boot",
          "is_bot": false,
          "headline": "Merge pull request #1643 from LumeWeb/fix/boot-root-span",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T09:37:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a8dac2d42e8957edfc09081cc92c82d958cb180",
          "body": "The portal.boot span was created without WithNewRoot, so if the\ninitial context carried a trace from an external caller the boot\nspan would inherit it as parent instead of being its own root.\n\n- Apply WithNewRoot() + SpanKindServer to portal.boot span\n- Uses the WithNewRoot infrastructure added in PR #1642",
          "is_bot": false,
          "headline": "fix(boot): force root span at portal boot with WithNewRoot",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T09:37:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "304b5e8a143e24d0a6b5401ba07105e016e74af2",
          "body": "fix(cron): force root span at ExecuteJob entry point",
          "is_bot": false,
          "headline": "Merge pull request #1642 from LumeWeb/fix/cron-root-span",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T09:35:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba9e563ab956a286a94d1682b85706a809dc3a40",
          "body": "Cron jobs triggered by the scheduler had no parent trace context,\ncausing downstream spans to appear as disconnected orphans in Tempo.\n\n- Add WithNewRoot() and NewRoot field to core.SpanConfig\n- Apply WithNewRoot() + SpanKindServer at ExecuteJob to force a clean\n  root span for every cron job execut\n[…]\n\n- Remove redundant boot traceparent links from per-job-type span (it's\n  now a child of the ExecuteJob root, not a separate trace)\n- Keep boot traceparent as a link on ExecuteJob root for correlation",
          "is_bot": false,
          "headline": "fix(cron): force root span at ExecuteJob entry point with WithNewRoot",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T09:32:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d8efa2e30971d44cb435348cc02146d26c97981f",
          "body": "feat(otel): configurable BSP batch timeout and export batch size",
          "is_bot": false,
          "headline": "Merge pull request #1641 from LumeWeb/fix/bsp-batch-timeout-config",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T08:23:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8e76f4e7817c355ad9d63600054a9ba5bfef8d0",
          "body": "The OTel BatchSpanProcessor (BSP) defaulted to 5s flush interval and 512\nbatch size. Root spans ended last (via defer) and arrived after Alloy's\ntail sampling decision_wait window, causing '<root span not yet received>'\nin Tempo.\n\nAdd batch_timeout (seconds) and max_export_batch_size config fields to\nTracingConfig. Defaults preserve prior behavior (5s / 512) but can be\ntuned lower (e.g. 1s / 256) so root spans flush before Alloy's 10s\ndecision window elapses.",
          "is_bot": false,
          "headline": "feat(otel): configurable BSP batch timeout and export batch size",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T08:22:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73f90a3ae6b7ff5a3a656c1da1b397300988fb3f",
          "body": "fix: workflow tracing — eventCtx, boot root span, CIDString span attribute",
          "is_bot": false,
          "headline": "Merge pull request #1640 from LumeWeb/fix/workflow-tracing-v2",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T01:02:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3a898065b43f78d4e4daefd1e3fe3a279cfb509",
          "body": "…ibute\n\n- Fix eventCtx: workflowStepExecutorJob.Run now passes eventCtx (carries\n  cron job span) instead of ctx (portal root, no span) to all workflow\n  service calls. Spans inside ExecuteWorkflowStep now create proper child\n  spans of the cron execution trace instead of disconnected root spans.\n\n-\n[…]\n making it easier to trace and\n  cross-reference with IPFS gateways.\n\n- Regenerated mocks via mockery, updated hand-written MockStorageHash and\n  testStorageHash to implement the new interface method.",
          "is_bot": false,
          "headline": "fix: workflow tracing - eventCtx, boot root span, CIDString span attr…",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-10T00:56:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d83efb475d64b7fe73966a2366e00e1b5cc6e0ed",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/wneessen/go-mail to v0.8.1",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-10T00:02:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9df4faa3b5aead822bf57063d455599fe6223add",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/v2 to v2.22.0",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-10T00:02:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53d1bf4ccb922b53923d498b125056eaa906c34c",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module github.com/johannesboyne/gofakes3 to v1",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-10T00:02:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2beef927bce8cbfdde533e3a81d05f6dd174aa4",
          "body": "…0.0-20260709183641-10cdd5e5558f",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T20:13:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48afc37f5c6542ad221f47b9b92980ed7bc01118",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update golang.org/x/exp digest to 9ea1abe",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T20:13:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c48b905155a15a9bff8c59c780325914fd865ef",
          "body": "…0.0-20260708234909-c4697d43e545",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T01:09:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11c480c7c492572d79b17e68fe3aa3e6ae8c815b",
          "body": "…32.29",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-09T00:53:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "69986352e5d8947a1b8963ea46d4fd2ebc86b51d",
          "body": "Includes flaky TestFileSource_Watch fix (proper fsnotify lifecycle,\nevent debouncing) and MockKV.GetStream for etcd v3.7.0 compatibility.",
          "is_bot": false,
          "headline": "chore: bump configmanager to v0.3.29",
          "author_name": "Derrick Hammer",
          "author_login": "pcfreak30",
          "committed_at": "2026-07-09T00:52:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af9467368dff1d46d87c5c13c971866d24d2cee7",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module golang.org/x/crypto to v0.54.0",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T22:34:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b767bfd3fe50907ce7ed03dc93f0d71dd10f22a6",
          "body": "…0.0-20260708211158-fe80573fdf9e",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T21:25:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a2f303ef2dfd1d03487f5b727bb9680a811f1c6",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.etcd.io/etcd/client/v3 to v3.7.0",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T21:25:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a05e068ba2b6ea8cb059add349e59be1abc229f",
          "body": "…0.0-20260708173245-c3fa241ceee5",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T21:20:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea2e65dffb46878d378a63827ec0ee1d8948dae3",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update module go.sia.tech/coreutils to v0.23.5",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T10:42:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8c4294836173dc6b12b4a880275ca0c5ffe7a17",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update dependency go to v1.26.5",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T05:48:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "046b422d829cf1e955c8c6a31f3c203052a9a2d4",
          "body": "…0.0-20260707215852-f7abd19f08ff",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-07T23:11:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e50ad0c94aae9eabd5a63b0c9c34d84a50e7ce50",
          "body": "…0.0-20260707142944-b8706290bc4e",
          "is_bot": true,
          "headline": "chore(deps): update module github.com/go-co-op/gocron/mocks/v2 to v2.…",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-07T14:51:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 10,
      "commits_last_year": 835,
      "latest_release_at": "2026-05-26T16:49:40Z",
      "latest_release_tag": "v0.5.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 46,
      "days_since_latest_release": 59,
      "mean_days_between_releases": 78.5
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "go.lumeweb.com/portal",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": null,
          "registry_url": "https://pkg.go.dev/go.lumeweb.com/portal",
          "is_deprecated": false,
          "latest_version": "v0.5.1",
          "repository_url": null,
          "versions_count": 15,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-17T14:15:09Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 7
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 5,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2025-10-21",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 4
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 81000,
      "source_files_sampled": 377,
      "oversized_source_files": 4,
      "agent_instruction_files": [
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 15112
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "github.com/getkin/kin-openapi",
            "direct": false,
            "version": "v0.134.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-r277-6w6q-xmqw"
            ],
            "fixed_version": "0.144.0",
            "advisory_count": 1,
            "oldest_advisory_days": 0
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "3.14.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-52cp-r559-cp3m",
              "GHSA-h67p-54hq-rp68"
            ],
            "fixed_version": "4.3.0",
            "advisory_count": 2,
            "oldest_advisory_days": 39
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.1.1",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-52cp-r559-cp3m",
              "GHSA-h67p-54hq-rp68"
            ],
            "fixed_version": "4.3.0",
            "advisory_count": 2,
            "oldest_advisory_days": 39
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.1",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3v7f-55p6-f55p",
              "GHSA-c2c7-rcm5-vvqj"
            ],
            "fixed_version": "4.0.4",
            "advisory_count": 2,
            "oldest_advisory_days": 120
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.54.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 16
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 3,
          "unknown": 1,
          "critical": 1
        },
        "advisory_count": 8,
        "affected_count": 5,
        "assessed_count": 342,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/AfterShip/email-verifier",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.1"
        },
        {
          "name": "github.com/DATA-DOG/go-sqlmock",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.2"
        },
        {
          "name": "github.com/Oudwins/zog",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.22.2"
        },
        {
          "name": "github.com/adjust/rmq/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.2.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.43.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/config",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.32.31"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/credentials",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.30"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/s3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.106.0"
        },
        {
          "name": "github.com/aws/smithy-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.27.4"
        },
        {
          "name": "github.com/casbin/casbin/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.10.0"
        },
        {
          "name": "github.com/casbin/gorm-adapter/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.41.0"
        },
        {
          "name": "github.com/docker/go-units",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.5.0"
        },
        {
          "name": "github.com/eventials/go-tus",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20250612203642-7827b129cd4c"
        },
        {
          "name": "github.com/fatih/structs",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.0"
        },
        {
          "name": "github.com/gabriel-vasile/mimetype",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.15"
        },
        {
          "name": "github.com/gammazero/workerpool",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.1"
        },
        {
          "name": "github.com/go-co-op/gocron/mocks/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.0-20260717182408-cc444c2a6f2c"
        },
        {
          "name": "github.com/go-co-op/gocron/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.22.0"
        },
        {
          "name": "github.com/go-gorm/caches/v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.0.5"
        },
        {
          "name": "github.com/go-kiss/monkey",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20240508030602-d03795257a64"
        },
        {
          "name": "github.com/go-sql-driver/mysql",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.0"
        },
        {
          "name": "github.com/go-viper/mapstructure/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.5.0"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/invopop/jsonschema",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.14.0"
        },
        {
          "name": "github.com/ipfs/go-cid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.2"
        },
        {
          "name": "github.com/johannesboyne/gofakes3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/kenshaw/snaker",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.3"
        },
        {
          "name": "github.com/knadh/koanf/parsers/json",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/knadh/koanf/providers/confmap",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/knadh/koanf/providers/rawbytes",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/knadh/koanf/providers/structs",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/knadh/koanf/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.3.5"
        },
        {
          "name": "github.com/labstack/echo-contrib",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.17.4"
        },
        {
          "name": "github.com/labstack/echo/v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.15.4"
        },
        {
          "name": "github.com/looplab/fsm",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.3"
        },
        {
          "name": "github.com/mattn/go-sqlite3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.14.48"
        },
        {
          "name": "github.com/miekg/dns",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.72"
        },
        {
          "name": "github.com/multiformats/go-multibase",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.0"
        },
        {
          "name": "github.com/multiformats/go-multihash",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.2.3"
        },
        {
          "name": "github.com/pquerna/otp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.0"
        },
        {
          "name": "github.com/pressly/goose/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.27.3"
        },
        {
          "name": "github.com/pterm/pterm",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.12.83"
        },
        {
          "name": "github.com/redis/go-redis/v9",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v9.21.0"
        },
        {
          "name": "github.com/samber/lo",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.53.0"
        },
        {
          "name": "github.com/spf13/afero",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.15.0"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "github.com/tus/tusd/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.10.0"
        },
        {
          "name": "github.com/urfave/cli/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.10.1"
        },
        {
          "name": "github.com/wneessen/go-mail",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.8.1"
        },
        {
          "name": "go.lumeweb.com/configmanager",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.29"
        },
        {
          "name": "go.lumeweb.com/event/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.1.0"
        },
        {
          "name": "go.lumeweb.com/httputil",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.5.6"
        },
        {
          "name": "go.lumeweb.com/portal-middleware",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.7"
        },
        {
          "name": "go.lumeweb.com/portal-router",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.6"
        },
        {
          "name": "go.opentelemetry.io/contrib/bridges/otelzap",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.19.0"
        },
        {
          "name": "go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.69.0"
        },
        {
          "name": "go.opentelemetry.io/otel",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/log",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk/log",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "go.opentelemetry.io/otel/trace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.sia.tech/core",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.21.7"
        },
        {
          "name": "go.sia.tech/coreutils",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.23.5"
        },
        {
          "name": "go.sia.tech/indexd",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.0"
        },
        {
          "name": "go.sia.tech/siastorage",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.1-0.20260714120443-c13c06751808"
        },
        {
          "name": "go.uber.org/mock",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.0"
        },
        {
          "name": "go.uber.org/zap",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.28.0"
        },
        {
          "name": "go.uber.org/zap/exp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.0"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.54.0"
        },
        {
          "name": "golang.org/x/exp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260718201538-764159d718ef"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "gorm.io/datatypes",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.7"
        },
        {
          "name": "gorm.io/driver/mysql",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "gorm.io/driver/sqlite",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "gorm.io/gorm",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.31.2"
        },
        {
          "name": "gorm.io/plugin/opentelemetry",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.16"
        },
        {
          "name": "github.com/golang-jwt/jwt/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.3.1"
        },
        {
          "name": "github.com/knadh/koanf/maps",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.2"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.24.1"
        },
        {
          "name": "github.com/prometheus/client_model",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.2"
        },
        {
          "name": "go.lumeweb.com/queryutil",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.17"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/adjust/rmq/v5",
            "direct": true,
            "version": "v5.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aftership/email-verifier",
            "direct": true,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": true,
            "version": "v1.43.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": true,
            "version": "v1.32.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": true,
            "version": "v1.19.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/s3",
            "direct": true,
            "version": "v1.106.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/smithy-go",
            "direct": true,
            "version": "v1.27.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/casbin/casbin/v3",
            "direct": true,
            "version": "v3.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/casbin/gorm-adapter/v3",
            "direct": true,
            "version": "v3.41.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/data-dog/go-sqlmock",
            "direct": true,
            "version": "v1.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-units",
            "direct": true,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/eventials/go-tus",
            "direct": true,
            "version": "v0.0.0-20250612203642-7827b129cd4c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/structs",
            "direct": true,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gabriel-vasile/mimetype",
            "direct": true,
            "version": "v1.4.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gammazero/workerpool",
            "direct": true,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-co-op/gocron/mocks/v2",
            "direct": true,
            "version": "v2.0.0-20260717182408-cc444c2a6f2c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-co-op/gocron/v2",
            "direct": true,
            "version": "v2.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-gorm/caches/v4",
            "direct": true,
            "version": "v4.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-kiss/monkey",
            "direct": true,
            "version": "v0.0.0-20240508030602-d03795257a64",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-sql-driver/mysql",
            "direct": true,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-viper/mapstructure/v2",
            "direct": true,
            "version": "v2.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v5",
            "direct": true,
            "version": "v5.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/invopop/jsonschema",
            "direct": true,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ipfs/go-cid",
            "direct": true,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/johannesboyne/gofakes3",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kenshaw/snaker",
            "direct": true,
            "version": "v0.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/maps",
            "direct": true,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/parsers/json",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/providers/confmap",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/providers/rawbytes",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/providers/structs",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/v2",
            "direct": true,
            "version": "v2.3.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/labstack/echo-contrib",
            "direct": true,
            "version": "v0.17.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/labstack/echo/v4",
            "direct": true,
            "version": "v4.15.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/looplab/fsm",
            "direct": true,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-sqlite3",
            "direct": true,
            "version": "v1.14.48",
            "ecosystem": "go"
          },
          {
            "name": "github.com/miekg/dns",
            "direct": true,
            "version": "v1.1.72",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-multibase",
            "direct": true,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-multihash",
            "direct": true,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oudwins/zog",
            "direct": true,
            "version": "v0.22.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pquerna/otp",
            "direct": true,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pressly/goose/v3",
            "direct": true,
            "version": "v3.27.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.24.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": true,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pterm/pterm",
            "direct": true,
            "version": "v0.12.83",
            "ecosystem": "go"
          },
          {
            "name": "github.com/redis/go-redis/v9",
            "direct": true,
            "version": "v9.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/samber/lo",
            "direct": true,
            "version": "v1.53.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": true,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tus/tusd/v2",
            "direct": true,
            "version": "v2.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/urfave/cli/v3",
            "direct": true,
            "version": "v3.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/wneessen/go-mail",
            "direct": true,
            "version": "v0.8.1",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/configmanager",
            "direct": true,
            "version": "v0.3.29",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/event/v2",
            "direct": true,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/httputil",
            "direct": true,
            "version": "v0.5.6",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/portal-middleware",
            "direct": true,
            "version": "v0.3.7",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/portal-router",
            "direct": true,
            "version": "v0.7.6",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/queryutil",
            "direct": true,
            "version": "v0.3.17",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/bridges/otelzap",
            "direct": true,
            "version": "v0.19.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho",
            "direct": true,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/log",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/log",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/core",
            "direct": true,
            "version": "v0.21.7",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/coreutils",
            "direct": true,
            "version": "v0.23.5",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/indexd",
            "direct": true,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/siastorage",
            "direct": true,
            "version": "v0.1.1-0.20260714120443-c13c06751808",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/mock",
            "direct": true,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": true,
            "version": "v1.28.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap/exp",
            "direct": true,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.54.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": true,
            "version": "v0.0.0-20260718201538-764159d718ef",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/datatypes",
            "direct": true,
            "version": "v1.2.7",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/driver/mysql",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/driver/sqlite",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/gorm",
            "direct": true,
            "version": "v1.31.2",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/plugin/opentelemetry",
            "direct": true,
            "version": "v0.1.16",
            "ecosystem": "go"
          },
          {
            "name": "atomicgo.dev/cursor",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "atomicgo.dev/keyboard",
            "direct": false,
            "version": "v0.2.9",
            "ecosystem": "go"
          },
          {
            "name": "atomicgo.dev/schedule",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "filippo.io/edwards25519",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alicebob/miniredis/v2",
            "direct": false,
            "version": "v2.37.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/andybalholm/brotli",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
            "direct": false,
            "version": "v1.7.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
            "direct": false,
            "version": "v1.18.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
            "direct": false,
            "version": "v1.4.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
            "direct": false,
            "version": "v2.7.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
            "direct": false,
            "version": "v1.4.32",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
            "direct": false,
            "version": "v1.13.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
            "direct": false,
            "version": "v1.9.24",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
            "direct": false,
            "version": "v1.13.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
            "direct": false,
            "version": "v1.19.32",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/signin",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sso",
            "direct": false,
            "version": "v1.33.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sts",
            "direct": false,
            "version": "v1.45.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bahlo/generic-list-go",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bmatcuk/doublestar/v4",
            "direct": false,
            "version": "v4.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/boombuler/barcode",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/buger/jsonparser",
            "direct": false,
            "version": "v1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/casbin/govaluate",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clickhouse/ch-go",
            "direct": false,
            "version": "v0.73.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clickhouse/clickhouse-go/v2",
            "direct": false,
            "version": "v2.47.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/uax29/v2",
            "direct": false,
            "version": "v2.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/console",
            "direct": false,
            "version": "v1.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/coreos/go-semver",
            "direct": false,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/coreos/go-systemd/v22",
            "direct": false,
            "version": "v22.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dunglas/httpsfv",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gammazero/deque",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/getkin/kin-openapi",
            "direct": false,
            "version": "v0.134.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ghodss/yaml",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/glebarez/go-sqlite",
            "direct": false,
            "version": "v1.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/glebarez/sqlite",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-faster/city",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-faster/errors",
            "direct": false,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.22.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/jsonname",
            "direct": false,
            "version": "v0.25.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-sql/civil",
            "direct": false,
            "version": "v0.0.0-20220223132316-b832511892a9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-sql/sqlexp",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/protobuf",
            "direct": false,
            "version": "v1.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gookit/color",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.29.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-version",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hbollon/go-edlib",
            "direct": false,
            "version": "v1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/huandu/go-tls",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgpassfile",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgservicefile",
            "direct": false,
            "version": "v0.0.0-20240606120523-5a60cdf6a761",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgx/v5",
            "direct": false,
            "version": "v5.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/puddle/v2",
            "direct": false,
            "version": "v2.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jinzhu/inflection",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jinzhu/now",
            "direct": false,
            "version": "v1.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jonboulle/clockwork",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/julienschmidt/httprouter",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.19.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/cpuid/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/reedsolomon",
            "direct": false,
            "version": "v1.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/parsers/yaml",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/knadh/koanf/providers/file",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/labstack/gommon",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lithammer/fuzzysearch",
            "direct": false,
            "version": "v1.1.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mfridman/interpolate",
            "direct": false,
            "version": "v0.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-mssqldb",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/minio/sha256-simd",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/copystructure",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/reflectwalk",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mohae/deepcopy",
            "direct": false,
            "version": "v0.0.0-20170929034955-c48cc78d4826",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mr-tron/base58",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-base32",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-base36",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-varint",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ncruces/go-strftime",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oasdiff/yaml",
            "direct": false,
            "version": "v0.0.0-20260313112342-a3ea61cb4d4c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oasdiff/yaml3",
            "direct": false,
            "version": "v0.0.0-20260224194419-61cd415a242b",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oschwald/geoip2-golang",
            "direct": false,
            "version": "v1.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oschwald/maxminddb-golang",
            "direct": false,
            "version": "v1.13.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/paulmach/orb",
            "direct": false,
            "version": "v0.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pb33f/ordered-map/v2",
            "direct": false,
            "version": "v2.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/perimeterx/marshmallow",
            "direct": false,
            "version": "v1.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pierrec/lz4/v4",
            "direct": false,
            "version": "v4.1.27",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.70.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quic-go/qpack",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quic-go/quic-go",
            "direct": false,
            "version": "v0.60.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quic-go/webtransport-go",
            "direct": false,
            "version": "v0.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/remyoudompheng/bigfft",
            "direct": false,
            "version": "v0.0.0-20230129092748-24d4a6f8daec",
            "ecosystem": "go"
          },
          {
            "name": "github.com/robfig/cron/v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rs/cors",
            "direct": false,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ryszard/goskiplist",
            "direct": false,
            "version": "v0.0.0-20150312221310-2dfbae5fcf46",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/asm",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sethvargo/go-retry",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shopspring/decimal",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spaolacci/murmur3",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/objx",
            "direct": false,
            "version": "v0.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/valyala/bytebufferpool",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/valyala/fasttemplate",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/woodsbury/decimal128",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xo/terminfo",
            "direct": false,
            "version": "v0.0.0-20220910002029-abceb7e1c41e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/gopher-lua",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/etcd/api/v3",
            "direct": false,
            "version": "v3.7.0",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/etcd/client/pkg/v3",
            "direct": false,
            "version": "v3.7.0",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/etcd/client/v3",
            "direct": false,
            "version": "v3.7.0",
            "ecosystem": "go"
          },
          {
            "name": "go.lumeweb.com/gswagger",
            "direct": false,
            "version": "v0.20.12",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "go.shabbyrobe.org/gocovmerge",
            "direct": false,
            "version": "v0.0.0-20230507111327-fa4f82cfbf4d",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/jape",
            "direct": false,
            "version": "v0.14.1",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/mux",
            "direct": false,
            "version": "v1.5.3",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/atomic",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.4",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v4",
            "direct": false,
            "version": "v4.0.0-rc.2",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/arch",
            "direct": false,
            "version": "v0.24.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.38.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.48.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260720211330-0afa2a65878a",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.82.1",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/driver/clickhouse",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/driver/postgres",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/driver/sqlserver",
            "direct": false,
            "version": "v1.6.3",
            "ecosystem": "go"
          },
          {
            "name": "gorm.io/plugin/dbresolver",
            "direct": false,
            "version": "v1.6.2",
            "ecosystem": "go"
          },
          {
            "name": "lukechampine.com/blake3",
            "direct": false,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "lukechampine.com/frand",
            "direct": false,
            "version": "v1.5.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/libc",
            "direct": false,
            "version": "v1.74.3",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/mathutil",
            "direct": false,
            "version": "v1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/memory",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/sqlite",
            "direct": false,
            "version": "v1.54.0",
            "ecosystem": "go"
          },
          {
            "name": "@babel/runtime",
            "direct": false,
            "version": "7.28.4",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/apply-release-plan",
            "direct": false,
            "version": "7.0.14",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/assemble-release-plan",
            "direct": false,
            "version": "6.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/changelog-git",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/cli",
            "direct": false,
            "version": "2.29.8",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/config",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/errors",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/get-dependents-graph",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/get-release-plan",
            "direct": false,
            "version": "4.0.14",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/get-version-range-type",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/git",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/logger",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/parse",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/pre",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/read",
            "direct": false,
            "version": "0.6.6",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/should-skip-package",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/types",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/types",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@changesets/write",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/external-editor",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@manypkg/find-root",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@manypkg/get-packages",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.scandir",
            "direct": false,
            "version": "2.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.stat",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.walk",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "12.20.55",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-colors",
            "direct": false,
            "version": "4.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "1.0.10",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "array-union",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "better-path-resolve",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "braces",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "chardet",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "ci-info",
            "direct": false,
            "version": "3.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "detect-indent",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "dir-glob",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "enquirer",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "esprima",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "extendable-error",
            "direct": false,
            "version": "0.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "fast-glob",
            "direct": false,
            "version": "3.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "fastq",
            "direct": false,
            "version": "1.19.1",
            "ecosystem": "npm"
          },
          {
            "name": "fill-range",
            "direct": false,
            "version": "7.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "find-up",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fs-extra",
            "direct": false,
            "version": "7.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "fs-extra",
            "direct": false,
            "version": "8.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "glob-parent",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "globby",
            "direct": false,
            "version": "11.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "graceful-fs",
            "direct": false,
            "version": "4.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "human-id",
            "direct": false,
            "version": "4.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.1",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "is-extglob",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-glob",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "is-number",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-subdir",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-windows",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "3.14.2",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "jsonfile",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "locate-path",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "lodash.startcase",
            "direct": false,
            "version": "4.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge2",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromatch",
            "direct": false,
            "version": "4.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "mri",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "outdent",
            "direct": false,
            "version": "0.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-filter",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-limit",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-locate",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-map",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-try",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "package-manager-detector",
            "direct": false,
            "version": "0.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "path-exists",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-type",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "pify",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "prettier",
            "direct": false,
            "version": "2.8.8",
            "ecosystem": "npm"
          },
          {
            "name": "quansync",
            "direct": false,
            "version": "0.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "queue-microtask",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "read-yaml-file",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "resolve-from",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "reusify",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "run-parallel",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "slash",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "spawndamnit",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "sprintf-js",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "strip-bom",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "term-size",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "to-regex-range",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "universalify",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 342,
        "direct_count": 83,
        "indirect_count": 259
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 1499,
        "open_issues": 3,
        "closed_ratio": 0.25,
        "closed_issues": 1,
        "closed_unmerged_prs": 194
      },
      "bus_factor": 1,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "pcfreak30",
          "commits": 2768,
          "avatar_url": "https://avatars.githubusercontent.com/u/10647?v=4"
        },
        {
          "type": "User",
          "login": "semantic-release-bot",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/32174276?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.999
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "_build.yml",
        "build.yml",
        "release.yml",
        "test.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 8,
            "reason": "Found 4/5 approved changesets -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "d74f4f158e630272b420d9fec2921a1399c49218",
        "ran_at": "2026-07-24T19:36:03Z",
        "aggregate_score": 6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T13:01:36Z",
      "oldest_open_prs": [
        {
          "number": 1697,
          "created_at": "2026-07-23T19:11:38Z",
          "last_comment_at": "2026-07-23T19:11:39Z",
          "last_comment_author": "renovate"
        }
      ],
      "last_merged_pr_at": "2026-07-24T13:00:26Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 73,
          "created_at": "2024-05-01T08:35:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 77,
          "created_at": "2024-05-08T18:02:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1115,
          "created_at": "2025-10-08T06:07:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/LumeWeb/portal",
    "host": "github.com",
    "name": "portal",
    "owner": "LumeWeb"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 62,
      "inputs": {
        "security": 66,
        "vitality": 94,
        "community": 29,
        "governance": 55,
        "engineering": 61
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 94,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 96,
            "inputs": {
              "commits_last_year": 835,
              "human_commit_share": 0.6,
              "days_since_last_push": 0,
              "active_weeks_last_year": 46
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "46/52 weeks with commits",
                "points": 31.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 46
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "835 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 835
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 92,
            "inputs": {
              "releases_count": 10,
              "latest_release_tag": "v0.5.0",
              "releases_from_tags": false,
              "days_since_latest_release": 59,
              "mean_days_between_releases": 78.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "10 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 59 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 59
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~78.5 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 78.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 7,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 7 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 29,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "forks": 1,
              "stars": 5,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "5 stars",
                "points": 9.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 55,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 18,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.999
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "merged_prs": 1499,
              "open_issues": 3,
              "closed_issues": 1,
              "issue_closed_ratio": 0.25,
              "closed_unmerged_prs": 194
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "25% of issues closed",
                "points": 11.7,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 25
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1499/1693 decided PRs merged",
                "points": 33.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1499,
                      "decided": 1693
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 4/5 approved changesets -- score normalized to 8",
                "points": 12,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "followers": 26,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "LumeWeb",
              "public_repos": 317,
              "account_age_days": 1642
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "26 followers of LumeWeb",
                "points": 10.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 26,
                      "login": "LumeWeb"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "317 public repos, account ~4 yr old",
                "points": 22,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 317
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 4
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "go.lumeweb.com/portal"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 7
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 7 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "15 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 61,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 66,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 4/5 approved changesets -- score normalized to 8",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 342 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 342
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 89,
            "inputs": {
              "source": "osv",
              "advisories": 8,
              "affected_packages": 5,
              "assessed_packages": 342,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, high 3, unknown 1",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: golang.org/x/crypto v0.54.0 (unknown)",
                "points": 26.6,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "golang.org/x/crypto v0.54.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 342,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 78,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 15112
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "60 of 60 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 60,
                      "sampled": 60
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.4
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "40 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 40,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 81000,
              "source_files_sampled": 377,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/377 source files over 60KB",
                "points": 54.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 377,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T19:36:19.883509Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/l/LumeWeb/portal.svg",
  "full_name": "LumeWeb/portal",
  "license_state": "standard",
  "license_spdx": "MIT"
}