NeuralTrust / TrustGate

Full resolved dependency set from the GitHub dependency graph: 56 direct and 230 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 286 packages, which also include development and test pins that never ship: 3 carry known advisories, of which 1 are direct.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 12519,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 5261431,
        "CSS": 2221,
        "Shell": 25842,
        "Makefile": 8246,
        "Dockerfile": 2523,
        "JavaScript": 94,
        "TypeScript": 246950
      },
      "pushed_at": "2026-07-29T22:15:14Z",
      "created_at": "2026-05-26T16:15:52Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-29T22:15:20Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://neuraltrust.ai",
      "name": "NeuralTrust",
      "type": "Organization",
      "login": "NeuralTrust",
      "company": null,
      "location": "Spain",
      "followers": 26,
      "avatar_url": "https://avatars.githubusercontent.com/u/176712233?v=4",
      "created_at": "2024-07-26T20:00:15Z",
      "is_verified": null,
      "public_repos": 12,
      "account_age_days": 733
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.24.0",
          "kind": "minor",
          "published_at": "2026-07-29T22:13:34Z"
        },
        {
          "tag": "v0.23.2",
          "kind": "patch",
          "published_at": "2026-07-29T16:11:53Z"
        },
        {
          "tag": "v0.23.1",
          "kind": "patch",
          "published_at": "2026-07-29T15:55:24Z"
        },
        {
          "tag": "v0.23.0",
          "kind": "minor",
          "published_at": "2026-07-29T12:16:19Z"
        },
        {
          "tag": "v0.22.1",
          "kind": "patch",
          "published_at": "2026-07-29T12:03:57Z"
        },
        {
          "tag": "v0.22.0",
          "kind": "minor",
          "published_at": "2026-07-29T11:43:35Z"
        },
        {
          "tag": "v0.21.3",
          "kind": "patch",
          "published_at": "2026-07-29T11:29:06Z"
        },
        {
          "tag": "v0.21.2",
          "kind": "patch",
          "published_at": "2026-07-29T10:17:47Z"
        },
        {
          "tag": "v0.21.1",
          "kind": "patch",
          "published_at": "2026-07-29T07:32:06Z"
        },
        {
          "tag": "v0.21.0",
          "kind": "minor",
          "published_at": "2026-07-28T17:54:27Z"
        },
        {
          "tag": "v0.20.2",
          "kind": "patch",
          "published_at": "2026-07-28T14:56:47Z"
        },
        {
          "tag": "v0.20.1",
          "kind": "patch",
          "published_at": "2026-07-28T14:55:02Z"
        },
        {
          "tag": "v0.20.0",
          "kind": "minor",
          "published_at": "2026-07-28T11:44:22Z"
        },
        {
          "tag": "v0.19.2",
          "kind": "patch",
          "published_at": "2026-07-24T14:08:28Z"
        },
        {
          "tag": "v0.19.1",
          "kind": "patch",
          "published_at": "2026-07-23T11:51:26Z"
        },
        {
          "tag": "v0.19.0",
          "kind": "minor",
          "published_at": "2026-07-23T11:31:33Z"
        },
        {
          "tag": "v0.18.1",
          "kind": "patch",
          "published_at": "2026-07-21T15:08:58Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2026-07-21T14:56:48Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2026-07-21T14:15:34Z"
        },
        {
          "tag": "v0.16.1",
          "kind": "patch",
          "published_at": "2026-07-21T10:54:21Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2026-07-21T07:22:24Z"
        },
        {
          "tag": "v0.15.1",
          "kind": "patch",
          "published_at": "2026-07-20T17:09:55Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2026-07-20T10:59:29Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2026-07-20T09:41:32Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2026-07-20T07:37:22Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2026-07-17T15:00:35Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2026-07-17T13:42:16Z"
        },
        {
          "tag": "v0.10.4",
          "kind": "patch",
          "published_at": "2026-07-17T13:30:07Z"
        },
        {
          "tag": "v0.10.3",
          "kind": "patch",
          "published_at": "2026-07-17T12:06:35Z"
        },
        {
          "tag": "v0.10.2",
          "kind": "patch",
          "published_at": "2026-07-17T10:50:39Z"
        },
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2026-07-17T10:38:19Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2026-07-17T10:18:53Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-07-17T09:17:37Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-07-16T15:48:27Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-07-15T08:51:48Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-07-14T15:43:39Z"
        },
        {
          "tag": "v0.5.2",
          "kind": "patch",
          "published_at": "2026-07-14T14:21:22Z"
        },
        {
          "tag": "v0.5.1",
          "kind": "patch",
          "published_at": "2026-07-14T13:20:59Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-07-14T12:59:06Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-07-14T11:26:44Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-07-14T10:16:32Z"
        },
        {
          "tag": "v0.3.6",
          "kind": "patch",
          "published_at": "2026-07-13T15:37:12Z"
        },
        {
          "tag": "v0.3.5",
          "kind": "patch",
          "published_at": "2026-07-10T11:24:05Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-07-10T10:31:53Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-07-06T14:53:27Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-07-06T14:52:30Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-07-03T10:55:25Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-07-02T14:23:23Z"
        },
        {
          "tag": "v0.2.10",
          "kind": "patch",
          "published_at": "2026-06-30T15:07:09Z"
        },
        {
          "tag": "v0.2.9",
          "kind": "patch",
          "published_at": "2026-06-30T12:21:23Z"
        },
        {
          "tag": "v0.2.8",
          "kind": "patch",
          "published_at": "2026-06-30T10:55:00Z"
        },
        {
          "tag": "v0.2.7",
          "kind": "patch",
          "published_at": "2026-06-30T10:10:25Z"
        },
        {
          "tag": "v0.2.6",
          "kind": "patch",
          "published_at": "2026-06-29T15:00:56Z"
        },
        {
          "tag": "v0.2.5",
          "kind": "patch",
          "published_at": "2026-06-26T14:43:27Z"
        },
        {
          "tag": "v0.2.4",
          "kind": "patch",
          "published_at": "2026-06-26T14:25:13Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2026-06-23T10:27:38Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-06-22T13:22:22Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-06-22T06:45:54Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-06-16T17:01:50Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2026-06-16T14:46:44Z"
        },
        {
          "tag": "v0.1.4",
          "kind": "patch",
          "published_at": "2026-06-16T14:23:59Z"
        },
        {
          "tag": "v0.1.3",
          "kind": "patch",
          "published_at": "2026-06-15T11:07:26Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2026-06-10T08:04:11Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-06-04T10:27:02Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-06-03T11:47:39Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "2e624f1823198abba26f3d0163fd3e05624bc62f",
          "body": null,
          "is_bot": true,
          "headline": "promote agentgateway v0.24.0 in k8s/overlays/prod,k8s/overlays/prod-us",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T22:15:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8410e707c9b5edd779044e57a11b0f01a2ffe3f",
          "body": "Develop",
          "is_bot": false,
          "headline": "Merge pull request #327 from NeuralTrust/develop",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T22:13:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "331add15ec453c3c7b8f9edfc52e272bc1de2b11",
          "body": "…5d63 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to d734e482d6afa2497bc7a6dbc3c5ef266f77…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T22:09:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d734e482d6afa2497bc7a6dbc3c5ef266f775d63",
          "body": "…-test\n\nfix tests",
          "is_bot": false,
          "headline": "Merge pull request #329 from NeuralTrust/fix/auth-duplicate-name-repo…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T22:06:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "704846d0b645389b182c2a535be7291c85f70dd0",
          "body": null,
          "is_bot": false,
          "headline": "fix tests",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T22:06:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "edab690ba561cc3866cfd42bf4a391c52904c067",
          "body": "…497e in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to 7fdf0d5ccf6cf76108fd8830f4e802eeab03…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T21:57:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7fdf0d5ccf6cf76108fd8830f4e802eeab03497e",
          "body": "fix catalog desc",
          "is_bot": false,
          "headline": "Merge pull request #328 from NeuralTrust/feat/auth-key-preview",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T21:54:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d44287696d226ed6973f5afa57648531d9f77fa5",
          "body": null,
          "is_bot": false,
          "headline": "fix catalog desc",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T21:54:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99a90e5653e93b1c1b4d8015470e5e10bbc32c2c",
          "body": "…6020 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to 70351348e5f778b82485a7af9bc813521411…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T21:41:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70351348e5f778b82485a7af9bc8135214116020",
          "body": "keep only roles",
          "is_bot": false,
          "headline": "Merge pull request #326 from NeuralTrust/feat/auth-key-preview",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T21:39:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e18465118a1c876a55cc3b0738f6001538be454a",
          "body": null,
          "is_bot": false,
          "headline": "keep only roles",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T21:38:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70557fa422bbc12871305e8de8c4ed7f08acec11",
          "body": "…8086 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to 06a52809fa2e141d16b0a5f7866c2849831a…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T21:30:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06a52809fa2e141d16b0a5f7866c2849831a8086",
          "body": "feat(auth): allow duplicate auth names per gateway",
          "is_bot": false,
          "headline": "Merge pull request #323 from NeuralTrust/feat/allow-duplicate-auth-names",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T21:28:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0373e6ba43f84fed758df4791c51ad52091f3c7",
          "body": "…f46b in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to cd44c836c0004f37c7495bcea5be0b02fd4a…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T21:28:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd44c836c0004f37c7495bcea5be0b02fd4af46b",
          "body": "feat(auth): expose non-secret api_key prefix and suffix",
          "is_bot": false,
          "headline": "Merge pull request #325 from NeuralTrust/feat/auth-key-preview",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T21:25:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fcb6c78bd12b722c9eebd36a5622ae2def296939",
          "body": "Persist the head and last four characters of each generated api_key\nso list/get can show a recognition hint without storing the plaintext.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(auth): expose non-secret api_key prefix and suffix",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T21:24:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "74c057228a9b3cab7b4527a928dc1049c069d743",
          "body": "…036f in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to bb3d5ea764de92694979b17b1a75bac968d7…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T21:17:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb3d5ea764de92694979b17b1a75bac968d7036f",
          "body": "Feat/prompt compression plugin",
          "is_bot": false,
          "headline": "Merge pull request #324 from NeuralTrust/feat/prompt-compression-plugin",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T21:15:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e74507e59a5628cf5531d11e2f79e93e6c8ef3b7",
          "body": "Names are labels only; credentials resolve by id/key_hash. Drop\nauths_gateway_name_unique so consumers can mint multiple api_key\nauths that share a display name.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(auth): allow duplicate auth names per gateway",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T21:12:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "81e1eb393bf8a1075094ec31b2afee845f5f97e0",
          "body": "Compacting a few dozen bytes saves nothing measurable, while leaving\nsmall stable messages byte-identical protects provider prompt-cache\nprefixes, so unset min_length now resolves to 256 (matching the catalog\ndefault) instead of 0. An explicit 0 still compresses everything; test\nhelpers pin 0 because they exercise transforms on small samples.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(prompt-compression): default min_length to 256 bytes",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T21:03:00Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2ccc06d470e939bfe96e79d425d6c6ee8b9f94c1",
          "body": "Following the semantic_cache X-Cache-* convention, every execution now\nreports its outcome on the response so callers can verify compression\nwithout consulting the telemetry stream:\n\n- X-Prompt-Compression: compressed | observed | no_change |\n  skipped_too_large | skipped_lossy_roundtrip\n- X-Prompt-\n[…]\ne request body\n- X-Prompt-Compression-Ratio: compressed/original size (only when a\n  rewrite happened or, in observe mode, would have happened)\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(prompt-compression): surface outcome via response headers",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T20:41:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3c13dcb582b1aabc80b7e2c36efb9ad74bfa2890",
          "body": "…e8f2 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to 37e4430bfd25455678ee8f0cdcf8fac16026…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T20:16:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37e4430bfd25455678ee8f0cdcf8fac16026e8f2",
          "body": "Feat/prompt compression plugin",
          "is_bot": false,
          "headline": "Merge pull request #299 from NeuralTrust/feat/prompt-compression-plugin",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T20:13:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cfd2256e48fa1c581a947288eb1c11e5d07d0ffe",
          "body": null,
          "is_bot": true,
          "headline": "promote agentgateway v0.23.2 in k8s/overlays/prod,k8s/overlays/prod-us",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T16:13:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8217d750a4af86403420098c1dd763078adaa57a",
          "body": "Develop",
          "is_bot": false,
          "headline": "Merge pull request #322 from NeuralTrust/develop",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T16:11:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "141e58284d2f1e437db918023a383ddf63bf8b4d",
          "body": "…de10 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to b1396f21ec2da6f2e26a271838a004805da7…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T16:04:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b1396f21ec2da6f2e26a271838a004805da7de10",
          "body": "…t-default-xmtjw3\n\nClaude/mcp oauth2 neuraltrust default xmtjw3",
          "is_bot": false,
          "headline": "Merge pull request #321 from NeuralTrust/claude/mcp-oauth2-neuraltrus…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T16:02:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2bba89d70a1746f09ac3dfc6d47f1290a546f1d",
          "body": "Conflict in pkg/app/mcp/compose(): develop's #312 (partial consent federation)\nand this branch both reworked how a consent-pending upstream is handled.\n\nResolved in favour of develop's semantics: a consent-pending upstream is always\nskipped so linked upstreams keep federating, regardless of fail mod\n[…]\n develop's\nfakeCreds.errByURL instead of a duplicate per-registry stub.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ud4DKqxYxsgMEo5J6iE9L5",
          "is_bot": false,
          "headline": "Merge branch 'develop' into claude/mcp-oauth2-neuraltrust-default-xmtjw3",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T16:02:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5a95bd18c6dfa3dc5a87c3406fd0f7c41e9c1a47",
          "body": null,
          "is_bot": true,
          "headline": "promote agentgateway v0.23.1 in k8s/overlays/prod,k8s/overlays/prod-us",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T15:57:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1719abf75faeb1a37060fd99371c6ae8d363695e",
          "body": "…he token\n\nProviders that rotate refresh tokens (Notion, and OAuth 2.1 in general)\ninvalidate the previous refresh token on every refresh. The resolver's\nsingleflight only dedupes within one process, so on a multi-replica data plane\ntwo pods could refresh with the same stored token: the provider acc\n[…]\nbe traced from the logs instead of inferred from\nthe client-side error.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ud4DKqxYxsgMEo5J6iE9L5",
          "is_bot": false,
          "headline": "fix(mcp): stop re-prompting for consent when a peer replica rotates t…",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T15:56:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "003e0ef2826bb233fcc6ef5e11734cfeb35b5f65",
          "body": "Update PodDisruptionBudget and improve gateway denial status handling",
          "is_bot": false,
          "headline": "Merge pull request #320 from NeuralTrust/develop",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T15:54:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc90b4d5ecb736ac978ad2a548fb57f52925c6b9",
          "body": "…verlays",
          "is_bot": false,
          "headline": "Update .gitignore to include additional secret files for Kubernetes o…",
          "author_name": "Kadu Barral",
          "author_login": "kadubarral-nt",
          "committed_at": "2026-07-29T15:52:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52c870ca80cf564951fd7da77e0b317dc686e72e",
          "body": "…notation in prod-us overlay",
          "is_bot": false,
          "headline": "Update .gitignore to rename secret files and modify ServiceAccount an…",
          "author_name": "Kadu Barral",
          "author_login": "kadubarral-nt",
          "committed_at": "2026-07-29T15:50:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "444cab54079d035a74d71be91cc1a970d81e6176",
          "body": "…he call\n\nA tools/call routed to a healthy upstream failed with \"user consent required\"\nfor an entirely different provider: compose() aborted the whole composition as\nsoon as any bound upstream reported a ConsentRequiredError, so one disconnected\nserver (e.g. Notion) broke every tool call, including\n[…]\nail-closed keeps the strict contract and still fails the whole request.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ud4DKqxYxsgMEo5J6iE9L5",
          "is_bot": false,
          "headline": "fix(mcp): scope the consent requirement to the upstream that serves t…",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T15:24:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2ed6fd9cd527c8c491158563455630c340cf194e",
          "body": "…216f in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to 44c748fbb0cbbce99864869950f396dcb311…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T14:35:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44c748fbb0cbbce99864869950f396dcb311216f",
          "body": "Policy blocks and rate limits were keeping wire HTTP 200 while\ntrustgate.mcp.upstream_status already carried 403/429, so\nhttp.response.status_code stayed wrong for agents and dashboards.\nMap gateway denials to the resolved wire status and align metrics\nresponse.status_code with the MCP upstream outcome.",
          "is_bot": false,
          "headline": "fix(mcp): return real HTTP status on gateway denials (#319)",
          "author_name": "Sergi Vidal",
          "author_login": "NTSergiVidal",
          "committed_at": "2026-07-29T14:33:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a314d4908d48aaed180abbd9f8465ab6040b961",
          "body": "…prod, prod-us) as they are no longer needed. Update kustomization.yaml files to reflect this change by commenting out the references to the deleted patches.",
          "is_bot": false,
          "headline": "Remove replicas patches for agentgateway from all environments (dev, …",
          "author_name": "Kadu Barral",
          "author_login": "kadubarral-nt",
          "committed_at": "2026-07-29T13:56:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0ce95e751837b76aeb8383308a5ef9584cbdc87",
          "body": "…ailable instead of minAvailable for improved resilience during upgrades. This change applies to both agentgateway-proxy and agentgateway-mcp in the kustomization.yaml and pdb-patch.yaml files.",
          "is_bot": false,
          "headline": "Implement PodDisruptionBudget updates for agentgateway to use maxUnav…",
          "author_name": "Kadu Barral",
          "author_login": "kadubarral-nt",
          "committed_at": "2026-07-29T13:28:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "434d1710ce5c7e22aac666a198af43011691aaf9",
          "body": null,
          "is_bot": true,
          "headline": "promote agentgateway v0.23.0 in k8s/overlays/prod,k8s/overlays/prod-us",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T12:18:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46de71b6db6ad06d418d982064bfbda6b35a4cca",
          "body": "feat: promote MCP upstream_status HTTP int to prod (ENG-1114)",
          "is_bot": false,
          "headline": "Merge pull request #318 from NeuralTrust/develop",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T12:15:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dde322a648773cc77d0c3ba294b29ed4e5a483e6",
          "body": "…eb23 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to 36b5227653ed89004065c932e4fb99a89501…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T12:08:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "005b21b0d8ff09eac8b3fa3cab18149c7221923e",
          "body": null,
          "is_bot": true,
          "headline": "rebuild agentgateway v0.22.1 in k8s/overlays/prod,k8s/overlays/prod-us",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T12:07:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36b5227653ed89004065c932e4fb99a89501eb23",
          "body": "* feat(mcp): export upstream_status as logical HTTP int\n\nKeep wire HTTP 200 for MCP JSON-RPC policy errors while telemetry reports\nthe plugin/logical status (403/429/502/…) on trustgate.mcp.upstream_status.\n\n* test(mcp): use HTTP status int in policy-chain metrics fixture\n\nAlign TestBuilder_MCPFoldsPolicyChain with upstream_status as int after\nmerging develop.",
          "is_bot": false,
          "headline": "feat(mcp): export upstream_status as logical HTTP int (ENG-1114) (#316)",
          "author_name": "Sergi Vidal",
          "author_login": "NTSergiVidal",
          "committed_at": "2026-07-29T12:05:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f12cea367e10c8f45f0b91a4032e1d889d7113e",
          "body": "…t-default-xmtjw3\n\nfix(oauth): surface IdP token-endpoint errors returned with HTTP 200",
          "is_bot": false,
          "headline": "Merge pull request #317 from NeuralTrust/claude/mcp-oauth2-neuraltrus…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T12:03:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83a88849c45c6dc406d91e525a295002bded7088",
          "body": "GitHub (and other providers) report token-endpoint failures with HTTP 200 and\nan `error` field in the body instead of a 4xx status. idpTransport.tokenCall\nonly treated a non-200 status as failure, so a GitHub error (e.g.\nredirect_uri_mismatch, bad_verification_code) slipped through as a \"successful\"\n[…]\ness of the HTTP status, so the real IdP error surfaces at the callback.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ud4DKqxYxsgMEo5J6iE9L5",
          "is_bot": false,
          "headline": "fix(oauth): surface IdP token-endpoint errors returned with HTTP 200",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T12:02:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "450f8c5840ab81f55d9b8ae35aa93890c90d8523",
          "body": "…or admin and proxy deployments\n\n- Updated CPU and memory resource limits and requests for the agentgateway-admin and agentgateway-proxy deployments to optimize performance.\n- Changed maxReplicas for agentgateway-admin to 2 to prevent excessive load from multiple replicas recompiling config snapshots.\n- Adjusted PodDisruptionBudget settings to use maxUnavailable instead of minAvailable for better resilience during upgrades.",
          "is_bot": false,
          "headline": "refactor(agentgateway): adjust resource limits and replica settings f…",
          "author_name": "Kadu Barral",
          "author_login": "kadubarral-nt",
          "committed_at": "2026-07-29T12:00:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f0a8ee2c3926bce442c9c3d744b57a795caca19",
          "body": null,
          "is_bot": true,
          "headline": "promote agentgateway v0.22.0 in k8s/overlays/prod,k8s/overlays/prod-us",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T11:45:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31f561507d2acb504b1a89bf08e2bb32353951eb",
          "body": "Develop",
          "is_bot": false,
          "headline": "Merge pull request #313 from NeuralTrust/develop",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T11:43:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22b22fed95967d9435fa8863f5382e1c752ece28",
          "body": "…1d6d in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to fcd61599312027d0111572b402abdc643c03…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T11:41:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fcd61599312027d0111572b402abdc643c031d6d",
          "body": "Remove the orphan promptcompression simulation_test that failed\ntypecheck/license checks, ignore mcp-oauth.key locally, and allowlist\nthe deleted path so Gitleaks history scans stop blocking develop→main.",
          "is_bot": false,
          "headline": "fix(ci): drop broken simulation harness and allowlist purged key (#315)",
          "author_name": "Sergi Vidal",
          "author_login": "NTSergiVidal",
          "committed_at": "2026-07-29T11:39:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8346a2dc75ede528b611e4e78984a25661cb40f1",
          "body": "…d4a5 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to 07934342c2360f8e40a6410f1875d28baf3d…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T11:37:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07934342c2360f8e40a6410f1875d28baf3dd4a5",
          "body": "update",
          "is_bot": false,
          "headline": "Merge pull request #314 from NeuralTrust/main",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T11:34:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7dcb759b44116f713375f45e1dc3ca4462ae0dda",
          "body": null,
          "is_bot": true,
          "headline": "rebuild agentgateway v0.21.3 in k8s/overlays/prod,k8s/overlays/prod-us",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T11:32:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2037689060a1b1e51d42d14ef75243917dbbb3cd",
          "body": "…5329 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to b433f019e9cc72bcbfa6cfd1c0eff181586f…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T11:30:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c69abefec0e23c183d8732a86eb8166a9f2af904",
          "body": "fix(metrics): include policy_chain on MCP request events",
          "is_bot": false,
          "headline": "Merge pull request #311 from NeuralTrust/fix/mcp-metrics-policy-chain",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T11:28:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b433f019e9cc72bcbfa6cfd1c0eff181586f5329",
          "body": "…ration\n\nfix consent screen",
          "is_bot": false,
          "headline": "Merge pull request #312 from NeuralTrust/fix/mcp-partial-consent-fede…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T11:27:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5b0fea72fc487e0c9ef2e6d0e86dac1635ad8028",
          "body": null,
          "is_bot": false,
          "headline": "fix",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T11:26:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2aa84c2bac42ed27c0d80fd1f30faede91590f2b",
          "body": null,
          "is_bot": false,
          "headline": "fix consent screen",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T11:20:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "915d6232d12df9d1d6bc6972c11927be93f0eeea",
          "body": "MCP tools/call already runs plugins and records SpanPlugin, but buildMCP\nnever folded them into the exported event, so Activity/DataCore showed an\nempty policy_chain even on -32001 blocks.",
          "is_bot": false,
          "headline": "fix(metrics): include policy_chain on MCP request events",
          "author_name": "Sergi Vidal",
          "author_login": "NTSergiVidal",
          "committed_at": "2026-07-29T11:01:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c5a91f629842cc3d7efd5f803286eb7952dfa7d",
          "body": null,
          "is_bot": true,
          "headline": "rebuild agentgateway v0.21.2 in k8s/overlays/prod,k8s/overlays/prod-us",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T10:20:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d5cf612f43816b49ae161e9848ce02808cc2c27",
          "body": "…i-truncate\n\nfix(metrics): keep large Gemini/LLM bodies for Activity",
          "is_bot": false,
          "headline": "Merge pull request #310 from NeuralTrust/fix/activity-body-otlp-gemin…",
          "author_name": "Sergi Vidal",
          "author_login": "NTSergiVidal",
          "committed_at": "2026-07-29T10:17:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "639e58ce64cfe7ce31a9cb7a8368d58733030cd6",
          "body": "…0437 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to cccdd472b2b6b189d86c683c3f47327b2ae3…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T10:03:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d7e8580d5964544c0b7f1d1517c51627f7d6b23",
          "body": "Raise OTLP attribute body limit past 4KiB and JSON-safe truncate Gemini\ncontents[] so Activity can still render OpenAI/Gemini request traces.",
          "is_bot": false,
          "headline": "fix(metrics): keep large Gemini/LLM bodies for Activity",
          "author_name": "Sergi Vidal",
          "author_login": "NTSergiVidal",
          "committed_at": "2026-07-29T10:03:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cccdd472b2b6b189d86c683c3f47327b2ae30437",
          "body": "…lay-1l5zdl\n\nEncode the shared catalog once per compile and raise dev admin CPU",
          "is_bot": false,
          "headline": "Merge pull request #309 from NeuralTrust/claude/consumer-readiness-de…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T10:01:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80691da08988c45c5a05043af57cf0d0fffc104f",
          "body": "The compile duration logged in production (~19-20s) was CPU, not I/O:\nCompileAll merged the model catalog into the global snapshot and every\nper-gateway scoped snapshot, then JSON+proto encoded it N+1 times per\ndispatch -- the catalog is the bulk of the ~800KB snapshot -- all under\na 100m CPU limit \n[…]\n 1 (requests 50m -> 250m) so\nthe remaining encode work is not throttled.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Mn1tatcBxdsrBZmKAcvyct",
          "is_bot": false,
          "headline": "Encode the shared catalog once per compile and raise dev admin CPU",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T10:00:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e6c143440fa88e2f8be504eadf33db4527537224",
          "body": "…ee8e in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to 40cbc02d350c388796cb952478f0b3fd704b…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T09:47:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "40cbc02d350c388796cb952478f0b3fd704bee8e",
          "body": "…lay-1l5zdl\n\nCompile the snapshot from bulk table scans instead of per-gateway que…",
          "is_bot": false,
          "headline": "Merge pull request #308 from NeuralTrust/claude/consumer-readiness-de…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T09:44:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42e12d1862cfa3293606fe5f96b4904eb41f972c",
          "body": "…f603 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to 546cefb9a64c01394f75c008a8d814afc3ae…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T09:44:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "546cefb9a64c01394f75c008a8d814afc3aef603",
          "body": "…t-default-xmtjw3\n\nfeat(oauth): let an MCP consumer use the built-in default IdP on a mu…",
          "is_bot": false,
          "headline": "Merge pull request #307 from NeuralTrust/claude/mcp-oauth2-neuraltrus…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T09:41:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13321d04e31f5cdbe73c82d65e0940f3a8479cb1",
          "body": "…lti-IdP gateway\n\nPreviously a consumer that pinned no oauth2 auth on a gateway hosting several\nidentity providers failed with `invalid_target` (\"multiple identity providers\nconfigured for this gateway\"), even when the built-in NeuralTrust default IdP\nwas configured. The default only kicked in when \n[…]\n gateway never\nsilently picks one of several operator-configured IdPs).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ud4DKqxYxsgMEo5J6iE9L5",
          "is_bot": false,
          "headline": "feat(oauth): let an MCP consumer use the built-in default IdP on a mu…",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T09:35:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a43f954b57d5baf7440d7f4aa583d036a34d52cd",
          "body": "…ries\n\nEven collected concurrently, per-gateway collection costs five queries\nper gateway, so compile time grows with the tenant count and is\ndominated by database round-trips: measured ~18-20s per compile in\ndeployments with many gateways, which was the entire config propagation\ndelay to the data p\n[…]\nnapshot data is sorted\nbefore encoding, so version hashes are unchanged.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Mn1tatcBxdsrBZmKAcvyct",
          "is_bot": false,
          "headline": "Compile the snapshot from bulk table scans instead of per-gateway que…",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T09:29:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b5e3101c93b2e681804ab8734c6602cf63ee5898",
          "body": "…fd55 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to d3bd929b7361c0c1aaaac8191d5ec1711006…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T09:13:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3bd929b7361c0c1aaaac8191d5ec1711006fd55",
          "body": "…lay-1l5zdl\n\nClaude/consumer readiness delay 1l5zdl",
          "is_bot": false,
          "headline": "Merge pull request #306 from NeuralTrust/claude/consumer-readiness-de…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T09:11:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "422a25c9fd0f6571fb9a477b62486f727e7bb397",
          "body": "Every admin replica recompiles the full config snapshot on every write\n(local signal or peer dirty event), so scaling the admin out multiplies\nthe compile herd against Postgres and slows every replica's compile --\nand the compile CPU burst itself pushes the HPA toward scaling up,\nfeeding the loop. Two replicas keep HA without the multiplier.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Mn1tatcBxdsrBZmKAcvyct",
          "is_bot": false,
          "headline": "Pin dev admin HPA to 2 replicas",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T09:09:00Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e6573c47422e32fb98d48b2bf5baac007f9639b2",
          "body": "Version notices are not replayed when a data plane's Sync stream\nreconnects: a version broadcast during the disconnect window was\nsilently missed and the data plane stayed stale until the poll backstop\n(minutes). The watch loop now runs a catch-up converge after every\nstream break before re-watching; when nothing was missed this is a\ncheap not-modified fetch.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Mn1tatcBxdsrBZmKAcvyct",
          "is_bot": false,
          "headline": "Converge after a broken watch stream so missed notices are not lost",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T08:53:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "95eb01bb35520ba9fc5f4710eabe6b3b5740047d",
          "body": "…ness-delay-1l5zdl",
          "is_bot": false,
          "headline": "Merge remote-tracking branch 'origin/main' into claude/consumer-readi…",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T08:23:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7652c9e05b9a1dc09e8bd8a741df732d2b99a804",
          "body": "…6b2a in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to 07d4fc60ab54e05fb9205e186fc853b8f9be…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T08:10:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07d4fc60ab54e05fb9205e186fc853b8f9be6b2a",
          "body": "…lay-1l5zdl\n\nCollect catalog models concurrently in the snapshot compiler",
          "is_bot": false,
          "headline": "Merge pull request #305 from NeuralTrust/claude/consumer-readiness-de…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T08:08:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29298ee725c167b048eeab5b510681b7c05ea8bf",
          "body": null,
          "is_bot": true,
          "headline": "rebuild agentgateway v0.21.1 in k8s/overlays/prod,k8s/overlays/prod-us",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T07:35:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a724e0cef0f771ac8e6a19c5047d228e304555d",
          "body": "collectCatalog issued one sequential models query per provider on every\ncompile; with a large model catalog this serial N+1 adds directly to\nconfig propagation latency. Provider model lists are now fetched through\nthe same bounded errgroup pattern as gateway collection and appended in\nprovider order, keeping snapshot bytes and version hashes deterministic.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Mn1tatcBxdsrBZmKAcvyct",
          "is_bot": false,
          "headline": "Collect catalog models concurrently in the snapshot compiler",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T07:33:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ac53c15cb5135eb0e3b4d04fa3c5fa5d00863401",
          "body": "…t-user\n\nfix(routing): prefer last user message for complexity scoring",
          "is_bot": false,
          "headline": "Merge pull request #303 from NeuralTrust/hotfix/complexity-prefer-las…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T07:31:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3fe02797793faf9b6a0eb645ec3d092bbea30005",
          "body": "Fix unused assignment in default IdP selection test; bump golang.org/x/text for CVE-2026-56852.",
          "is_bot": false,
          "headline": "chore: unblock CI lint and Trivy on hotfix branch",
          "author_name": "Sergi Vidal",
          "author_login": "NTSergiVidal",
          "committed_at": "2026-07-29T07:22:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e05952d36b157fd8bd3ec41da276d677897ec03",
          "body": "Unblocks PR CI after the default IdP method was added to the interface.",
          "is_bot": false,
          "headline": "test: stub DefaultOAuth2ForGateway on CredentialFinder fakes",
          "author_name": "Sergi Vidal",
          "author_login": "NTSergiVidal",
          "committed_at": "2026-07-29T07:15:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a985ab02abb201f5fecc22df2c4f7305380ee06",
          "body": "…bac8 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to 66ffcabba716323279a5739688da28843369…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T07:12:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66ffcabba716323279a5739688da28843369bac8",
          "body": "…lay-1l5zdl\n\nClaude/consumer readiness delay 1l5zdl",
          "is_bot": false,
          "headline": "Merge pull request #304 from NeuralTrust/claude/consumer-readiness-de…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T07:10:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3cbbac58579053f52a5e0a9ffc013217f383dc9",
          "body": "Avoid scoring tool-role content when the chat turn ends with role=tool.",
          "is_bot": false,
          "headline": "fix(routing): prefer last user message for complexity scoring",
          "author_name": "Sergi Vidal",
          "author_login": "NTSergiVidal",
          "committed_at": "2026-07-29T07:08:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b6ce3646c9ed46d7b08248956517b3c874d9293",
          "body": "The compiler collected each gateway's config with several sequential\nPostgres queries per gateway, one gateway at a time, so compile time\ngrew linearly with the tenant count and dominated config propagation\nlatency on deployments with many gateways (a ~800KB snapshot took\nseconds to compile on every\n[…]\nthe compiled bytes and version hashes are identical\nto a serial collect.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Mn1tatcBxdsrBZmKAcvyct",
          "is_bot": false,
          "headline": "Collect gateways concurrently in the snapshot compiler",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T06:55:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bbe77034c817b9bd09632c3a935d0e4fdea12f62",
          "body": "…854f in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to bba6a03a7d4cc65cbeefc3ac1804e9272135…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T06:43:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bba6a03a7d4cc65cbeefc3ac1804e9272135854f",
          "body": "…lay-1l5zdl\n\nShrink recompile debounce to 250ms and log snapshot publish latency",
          "is_bot": false,
          "headline": "Merge pull request #302 from NeuralTrust/claude/consumer-readiness-de…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T06:41:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50e0b7f04ea1ef594f1e3249c2efd38f73b6e53e",
          "body": "With leading-edge dispatch the debounce no longer delays the first write;\nit is only the horizon for folding a burst of follow-up admin calls into\none trailing recompile. A 2s window still made multi-call flows (create\nconsumer, attach key, set policies) wait up to 2s for the trailing edge\nbefore th\n[…]\ncorrelating it with the data plane's \"applied config\nsnapshot\" log line.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Mn1tatcBxdsrBZmKAcvyct",
          "is_bot": false,
          "headline": "Shrink recompile debounce to 250ms and log snapshot publish latency",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T06:34:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b48a86ece5d7a829baaedce7660a562e00ce2a68",
          "body": "…d8be in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to 6c05c56e37d920964202a315869d8459c3fb…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-29T06:11:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c05c56e37d920964202a315869d8459c3fbd8be",
          "body": "…lay-1l5zdl\n\nDispatch config snapshot on the leading edge of a write signal",
          "is_bot": false,
          "headline": "Merge pull request #300 from NeuralTrust/claude/consumer-readiness-de…",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-29T06:09:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2266a024f1fc76b805e10b2ca40da90a4f36645a",
          "body": "A newly created consumer (or key, registry, policy, ...) previously sat\nout the full recompile debounce (2s by default) before the control plane\neven started compiling the snapshot, so the data plane could not accept\nrequests for it until the debounce, compile, broadcast, and converge all\ncompleted.\n[…]\neep the burst behaviour\nunchanged: identical data still broadcasts once.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Mn1tatcBxdsrBZmKAcvyct",
          "is_bot": false,
          "headline": "Dispatch config snapshot on the leading edge of a write signal",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-29T06:05:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b8ac99fd52addc6313b09677f04615779f05828f",
          "body": "- Drop tool_result from the content-part allowlist: the adapter cannot\n  round-trip array-form results, is_error flags, or text adjacency, so\n  agentic Anthropic requests carrying them now pass through untouched.\n- Extend the structural scan to tools and tool_choice so nested\n  unmodeled fields (Ant\n[…]\nTreat an explicit stream:false as the provider default in the\n  top-level field check so those requests stay compressible.\n- gofmt the package.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(prompt-compression): close remaining round-trip loopholes",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-28T21:51:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5f6096ffcff189a590fd2da74566be147361884a",
          "body": "The canonical decode/encode cycle drops request shapes it does not\nmodel: multimodal content parts are flattened to text, per-part\nannotations such as Anthropic cache_control disappear, and unmodeled\ntop-level fields (seed, n, penalties) are lost on encode. A compression\nplugin must never trade toke\n[…]\nalls back to\nfenced-block compaction, fenced blocks are matched once instead of\ntwice, and max_consecutive_blank_lines is bounded to [1, 1000].\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(prompt-compression): guard against lossy canonical round-trips",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-28T21:42:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ee0eee70e422875bed6c2a0ecb142c551b79659a",
          "body": "- Add max_body_bytes gate (default 1 MiB, explicit 0 disables) so the\n  transform pipeline never runs unbounded on the proxy hot path, plus a\n  cheap pre-scan fast path in normalizeWhitespace that skips the\n  split/join for already-clean content.\n- Cover tool-call argument compaction with Execute-le\n[…]\ndies so BytesIn - BytesOut ==\n  BytesSaved always holds; drop the double json.Valid/json.Compact scan;\n  rename ErrUnknownRole to ErrEmptyRole.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(prompt-compression): address review blockers and suggestions",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-28T21:32:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "97335322e48c0771c361cb89dfd2ab285d511972",
          "body": "Shrinks the request prompt before it reaches the model: minifies\nstandalone and fenced JSON (including tool-call arguments), strips ANSI\nescape sequences, and collapses redundant whitespace. All transforms are\ndeterministic and idempotent so provider prompt-cache prefixes stay\nstable across turns, a\n[…]\nerror.\n\nRegistered in the container plugin catalog and surfaced in the admin UI\nvia a prompt_compression catalog entry under Prompt Management.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(plugins): add native prompt_compression plugin",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-28T21:07:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c1161fd4e6e28da1c058a8f13f177019f5958be5",
          "body": "…0639 in k8s/overlays/dev",
          "is_bot": true,
          "headline": "update agentgateway image tag to a703d8922701459f8deac834ea18c8d94734…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-28T17:56:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ce4119ea3ba5094f27d1dfee89e42398e2a21d6",
          "body": null,
          "is_bot": true,
          "headline": "promote agentgateway v0.21.0 in k8s/overlays/prod,k8s/overlays/prod-us",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-28T17:56:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "719a31e7ca16ae6ae9a043792222b367c7734213",
          "body": "Develop",
          "is_bot": false,
          "headline": "Merge pull request #298 from NeuralTrust/develop",
          "author_name": "Victor",
          "author_login": "vgmartinez",
          "committed_at": "2026-07-28T17:54:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 65,
      "commits_last_year": 790,
      "latest_release_at": "2026-07-29T22:13:34Z",
      "latest_release_tag": "v0.24.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 10,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 0.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": true,
      "health_percentage": 37,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/NeuralTrust/TrustGate",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/NeuralTrust/TrustGate",
          "is_deprecated": false,
          "latest_version": "v0.24.0",
          "repository_url": "https://github.com/NeuralTrust/TrustGate",
          "versions_count": 317,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-29T22:13:15Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 4,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-07-15",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 2
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [
        "docs/openapi.json",
        "docs/swagger.json",
        "docs/swagger.yaml",
        "pkg/infra/configsnapshot/proto/configsync.proto",
        "pkg/infra/configsnapshot/proto/snapshot.proto"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [
        "frontend/tsconfig.json"
      ],
      "toolchain_manifests": [
        "go.mod",
        "pkg/metrics/go.mod"
      ],
      "largest_source_bytes": 247549,
      "source_files_sampled": 1261,
      "oversized_source_files": 1,
      "agent_instruction_files": [
        ".agents/AGENT.md",
        ".agents/AGENTS.md"
      ],
      "agent_instruction_max_bytes": 36781
    },
    "dependencies": {
      "manifests": [
        "frontend/package.json",
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "github.com/gofiber/fiber/v2",
            "direct": true,
            "version": "v2.52.13",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-gcfq-8gqf-4876"
            ],
            "fixed_version": "3.3.0",
            "advisory_count": 1,
            "oldest_advisory_days": 27
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.17.9",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5841"
            ],
            "fixed_version": "1.18.7",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.53.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 22
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 2,
          "moderate": 1
        },
        "advisory_count": 3,
        "affected_count": 3,
        "assessed_count": 286,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go",
        "npm"
      ],
      "dependencies": [
        {
          "name": "@radix-ui/react-dialog",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.1.15"
        },
        {
          "name": "@radix-ui/react-dropdown-menu",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.1.16"
        },
        {
          "name": "@radix-ui/react-label",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.1.8"
        },
        {
          "name": "@radix-ui/react-popover",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.1.15"
        },
        {
          "name": "@radix-ui/react-select",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.2.6"
        },
        {
          "name": "@radix-ui/react-switch",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.2.6"
        },
        {
          "name": "@radix-ui/react-tabs",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.1.13"
        },
        {
          "name": "@radix-ui/react-toast",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.2.15"
        },
        {
          "name": "@tanstack/react-query",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.101.0"
        },
        {
          "name": "clsx",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.1.1"
        },
        {
          "name": "jose",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^6.2.3"
        },
        {
          "name": "lucide-react",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.17.0"
        },
        {
          "name": "next",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "16.2.11"
        },
        {
          "name": "react",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^19.2.7"
        },
        {
          "name": "react-dom",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^19.2.7"
        },
        {
          "name": "react-hook-form",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.77.0"
        },
        {
          "name": "tailwind-merge",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.6.0"
        },
        {
          "name": "zod",
          "manifest": "frontend/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.4.3"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.21.1"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.13.1"
        },
        {
          "name": "github.com/alicebob/miniredis/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.38.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.41.9"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/config",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.32.20"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/credentials",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.19"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/bedrockruntime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.53.1"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/sts",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.42.3"
        },
        {
          "name": "github.com/aws/smithy-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.26.0"
        },
        {
          "name": "github.com/confluentinc/confluent-kafka-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.9.2"
        },
        {
          "name": "github.com/gofiber/fiber/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.52.13"
        },
        {
          "name": "github.com/gofiber/swagger",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/golang-jwt/jwt/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.3.1"
        },
        {
          "name": "github.com/google/addlicense",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/jackc/pgx/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.9.2"
        },
        {
          "name": "github.com/joho/godotenv",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.1"
        },
        {
          "name": "github.com/mitchellh/mapstructure",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.0"
        },
        {
          "name": "github.com/modelcontextprotocol/go-sdk",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.1"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "github.com/swaggo/swag",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.16.4"
        },
        {
          "name": "github.com/valyala/fasthttp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.51.0"
        },
        {
          "name": "github.com/vektra/mockery/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.53.6"
        },
        {
          "name": "go.opentelemetry.io/otel",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "go.opentelemetry.io/otel/log",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk/log",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.20.0"
        },
        {
          "name": "go.uber.org/dig",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.0"
        },
        {
          "name": "golang.org/x/sync",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.21.0"
        },
        {
          "name": "google.golang.org/grpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.82.1"
        },
        {
          "name": "google.golang.org/protobuf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "github.com/NeuralTrust/TrustGate/pkg/metrics",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/feature/rds/auth",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.25"
        },
        {
          "name": "github.com/redis/go-redis/v9",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v9.21.0"
        },
        {
          "name": "go.opentelemetry.io/otel/metric",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "go.opentelemetry.io/otel/trace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/alicebob/miniredis/v2",
            "direct": true,
            "version": "v2.38.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": true,
            "version": "v1.41.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": true,
            "version": "v1.32.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": true,
            "version": "v1.19.19",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/rds/auth",
            "direct": true,
            "version": "v1.6.25",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/bedrockruntime",
            "direct": true,
            "version": "v1.53.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sts",
            "direct": true,
            "version": "v1.42.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/smithy-go",
            "direct": true,
            "version": "v1.26.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/azcore",
            "direct": true,
            "version": "v1.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/azidentity",
            "direct": true,
            "version": "v1.13.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/confluentinc/confluent-kafka-go",
            "direct": true,
            "version": "v1.9.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofiber/fiber/v2",
            "direct": true,
            "version": "v2.52.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofiber/swagger",
            "direct": true,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v5",
            "direct": true,
            "version": "v5.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/addlicense",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgx/v5",
            "direct": true,
            "version": "v5.9.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/joho/godotenv",
            "direct": true,
            "version": "v1.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/mapstructure",
            "direct": true,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modelcontextprotocol/go-sdk",
            "direct": true,
            "version": "v1.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/redis/go-redis/v9",
            "direct": true,
            "version": "v9.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/swaggo/swag",
            "direct": true,
            "version": "v1.16.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/valyala/fasthttp",
            "direct": true,
            "version": "v1.51.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vektra/mockery/v2",
            "direct": true,
            "version": "v2.53.6",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/log",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/log",
            "direct": true,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/dig",
            "direct": true,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": true,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": true,
            "version": "v1.82.1",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": true,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "@radix-ui/react-dialog",
            "direct": true,
            "version": "1.1.15",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-dropdown-menu",
            "direct": true,
            "version": "2.1.16",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-label",
            "direct": true,
            "version": "2.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-popover",
            "direct": true,
            "version": "1.1.15",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-select",
            "direct": true,
            "version": "2.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-switch",
            "direct": true,
            "version": "1.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-tabs",
            "direct": true,
            "version": "1.1.13",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-toast",
            "direct": true,
            "version": "1.2.15",
            "ecosystem": "npm"
          },
          {
            "name": "@tanstack/react-query",
            "direct": true,
            "version": "5.101.0",
            "ecosystem": "npm"
          },
          {
            "name": "clsx",
            "direct": true,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": true,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "lucide-react",
            "direct": true,
            "version": "1.17.0",
            "ecosystem": "npm"
          },
          {
            "name": "next",
            "direct": true,
            "version": "16.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "react",
            "direct": true,
            "version": "19.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "react-dom",
            "direct": true,
            "version": "19.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "react-hook-form",
            "direct": true,
            "version": "7.77.0",
            "ecosystem": "npm"
          },
          {
            "name": "tailwind-merge",
            "direct": true,
            "version": "3.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": true,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "github.com/andybalholm/brotli",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
            "direct": false,
            "version": "v1.7.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
            "direct": false,
            "version": "v1.18.25",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
            "direct": false,
            "version": "v1.4.25",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
            "direct": false,
            "version": "v2.7.25",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
            "direct": false,
            "version": "v1.4.26",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
            "direct": false,
            "version": "v1.13.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
            "direct": false,
            "version": "v1.13.25",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/signin",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sso",
            "direct": false,
            "version": "v1.30.19",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
            "direct": false,
            "version": "v1.36.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/internal",
            "direct": false,
            "version": "v1.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azuread/microsoft-authentication-library-for-go",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bmatcuk/doublestar/v4",
            "direct": false,
            "version": "v4.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/chigopher/pathlib",
            "direct": false,
            "version": "v0.19.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cpuguy83/go-md2man/v2",
            "direct": false,
            "version": "v2.0.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.19.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.19.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/spec",
            "direct": false,
            "version": "v0.20.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.19.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-viper/mapstructure/v2",
            "direct": false,
            "version": "v2.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/jsonschema-go",
            "direct": false,
            "version": "v0.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.29.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/huandu/xstrings",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/iancoleman/strcase",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgpassfile",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/pgservicefile",
            "direct": false,
            "version": "v0.0.0-20240606120523-5a60cdf6a761",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackc/puddle/v2",
            "direct": false,
            "version": "v2.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jinzhu/copier",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.17.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kylebanks/depth",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kylelemons/godebug",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.7.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-homedir",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml/v2",
            "direct": false,
            "version": "v2.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/browser",
            "direct": false,
            "version": "v0.0.0-20240102092130-5ac0b6a4141c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/puerkitobio/purell",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/puerkitobio/urlesc",
            "direct": false,
            "version": "v0.0.0-20170810143723-de5bf2ad4578",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rs/zerolog",
            "direct": false,
            "version": "v1.34.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/russross/blackfriday/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sagikazarmark/locafero",
            "direct": false,
            "version": "v0.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/asm",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/segmentio/encoding",
            "direct": false,
            "version": "v0.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": false,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/viper",
            "direct": false,
            "version": "v1.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/objx",
            "direct": false,
            "version": "v0.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/subosito/gotenv",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/swaggo/files/v2",
            "direct": false,
            "version": "v2.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/urfave/cli/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/valyala/bytebufferpool",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/valyala/tcplisten",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yosida95/uritemplate/v3",
            "direct": false,
            "version": "v3.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/gopher-lua",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/atomic",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.53.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.56.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.44.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.39.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260615183401-62b3387ff324",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260615183401-62b3387ff324",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc/cmd/protoc-gen-go-grpc",
            "direct": false,
            "version": "v1.6.2",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "@alloc/quick-lru",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/core",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.11.2",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/wasi-threads",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@floating-ui/core",
            "direct": false,
            "version": "1.7.5",
            "ecosystem": "npm"
          },
          {
            "name": "@floating-ui/dom",
            "direct": false,
            "version": "1.7.6",
            "ecosystem": "npm"
          },
          {
            "name": "@floating-ui/react-dom",
            "direct": false,
            "version": "2.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@floating-ui/utils",
            "direct": false,
            "version": "0.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "@img/colour",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-darwin-arm64",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-darwin-x64",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-freebsd-wasm32",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-darwin-arm64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-darwin-x64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-arm",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-arm64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-ppc64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-riscv64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-s390x",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-x64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linuxmusl-arm64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linuxmusl-x64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-arm",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-arm64",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-ppc64",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-riscv64",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-s390x",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-x64",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linuxmusl-arm64",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linuxmusl-x64",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-wasm32",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-webcontainers-wasm32",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-win32-arm64",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-win32-ia32",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-win32-x64",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/gen-mapping",
            "direct": false,
            "version": "0.3.13",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/remapping",
            "direct": false,
            "version": "2.3.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/wasm-runtime",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@next/env",
            "direct": false,
            "version": "16.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "@next/swc-darwin-arm64",
            "direct": false,
            "version": "16.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "@next/swc-darwin-x64",
            "direct": false,
            "version": "16.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "@next/swc-linux-arm64-gnu",
            "direct": false,
            "version": "16.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "@next/swc-linux-arm64-musl",
            "direct": false,
            "version": "16.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "@next/swc-linux-x64-gnu",
            "direct": false,
            "version": "16.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "@next/swc-linux-x64-musl",
            "direct": false,
            "version": "16.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "@next/swc-win32-arm64-msvc",
            "direct": false,
            "version": "16.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "@next/swc-win32-x64-msvc",
            "direct": false,
            "version": "16.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/number",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/primitive",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-arrow",
            "direct": false,
            "version": "1.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-collection",
            "direct": false,
            "version": "1.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-compose-refs",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-context",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-direction",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-dismissable-layer",
            "direct": false,
            "version": "1.1.11",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-focus-guards",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-focus-scope",
            "direct": false,
            "version": "1.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-id",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-menu",
            "direct": false,
            "version": "2.1.16",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-popper",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-portal",
            "direct": false,
            "version": "1.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-presence",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-primitive",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-primitive",
            "direct": false,
            "version": "2.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-roving-focus",
            "direct": false,
            "version": "1.1.11",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-slot",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-slot",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-use-callback-ref",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-use-controllable-state",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-use-effect-event",
            "direct": false,
            "version": "0.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-use-escape-keydown",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-use-layout-effect",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-use-previous",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-use-rect",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-use-size",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/react-visually-hidden",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@radix-ui/rect",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@swc/helpers",
            "direct": false,
            "version": "0.5.15",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/node",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide-android-arm64",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide-darwin-arm64",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide-darwin-x64",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide-freebsd-x64",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide-linux-arm-gnueabihf",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide-linux-arm64-gnu",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide-linux-arm64-musl",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide-linux-x64-gnu",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide-linux-x64-musl",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide-wasm32-wasi",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide-win32-arm64-msvc",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/oxide-win32-x64-msvc",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/postcss",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tanstack/query-core",
            "direct": false,
            "version": "5.101.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tybys/wasm-util",
            "direct": false,
            "version": "0.10.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "25.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/react",
            "direct": false,
            "version": "19.2.16",
            "ecosystem": "npm"
          },
          {
            "name": "@types/react-dom",
            "direct": false,
            "version": "19.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "aria-hidden",
            "direct": false,
            "version": "1.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "baseline-browser-mapping",
            "direct": false,
            "version": "2.10.33",
            "ecosystem": "npm"
          },
          {
            "name": "caniuse-lite",
            "direct": false,
            "version": "1.0.30001793",
            "ecosystem": "npm"
          },
          {
            "name": "client-only",
            "direct": false,
            "version": "0.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "csstype",
            "direct": false,
            "version": "3.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "detect-node-es",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "enhanced-resolve",
            "direct": false,
            "version": "5.22.1",
            "ecosystem": "npm"
          },
          {
            "name": "get-nonce",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "graceful-fs",
            "direct": false,
            "version": "4.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "jiti",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-android-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-freebsd-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-arm64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-x64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.16",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.22",
            "ecosystem": "npm"
          },
          {
            "name": "react-remove-scroll",
            "direct": false,
            "version": "2.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "react-remove-scroll-bar",
            "direct": false,
            "version": "2.3.8",
            "ecosystem": "npm"
          },
          {
            "name": "react-style-singleton",
            "direct": false,
            "version": "2.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "scheduler",
            "direct": false,
            "version": "0.27.0",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.8.5",
            "ecosystem": "npm"
          },
          {
            "name": "sharp",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "styled-jsx",
            "direct": false,
            "version": "5.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "tailwindcss",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "tapable",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "7.24.6",
            "ecosystem": "npm"
          },
          {
            "name": "use-callback-ref",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "use-sidecar",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 286,
        "direct_count": 56,
        "indirect_count": 230
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 300,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 27
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "edukmx",
          "commits": 293,
          "avatar_url": "https://avatars.githubusercontent.com/u/97445496?v=4"
        },
        {
          "type": "User",
          "login": "NTSergiVidal",
          "commits": 83,
          "avatar_url": "https://avatars.githubusercontent.com/u/282521747?v=4"
        },
        {
          "type": "User",
          "login": "vgmartinez",
          "commits": 70,
          "avatar_url": "https://avatars.githubusercontent.com/u/10614247?v=4"
        },
        {
          "type": "User",
          "login": "kadubarral-nt",
          "commits": 35,
          "avatar_url": "https://avatars.githubusercontent.com/u/237961738?v=4"
        },
        {
          "type": "User",
          "login": "claude",
          "commits": 19,
          "avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
        },
        {
          "type": "User",
          "login": "marti-jorda-roca",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/108732053?v=4"
        }
      ],
      "contributors_sampled": 6,
      "top_contributor_share": 0.585
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "auto-release.yml",
        "ci.yml",
        "deploy.yml",
        "metrics-module-release.yml",
        "notify-bundle.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 6,
            "reason": "6 out of 10 merged PRs checked by a CI test -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/13 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 3,
            "reason": "SAST tool is not run on all commits -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 7,
            "reason": "3 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "2e624f1823198abba26f3d0163fd3e05624bc62f",
        "ran_at": "2026-07-30T00:55:24Z",
        "aggregate_score": 3.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-29T22:17:08Z",
      "oldest_open_prs": [
        {
          "number": 213,
          "created_at": "2026-07-13T15:19:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 235,
          "created_at": "2026-07-15T14:20:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-29T22:13:15Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/NeuralTrust/TrustGate",
    "host": "github.com",
    "name": "TrustGate",
    "owner": "NeuralTrust"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 59,
      "inputs": {
        "security": 45,
        "vitality": 77,
        "community": 37,
        "governance": 59,
        "engineering": 72
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 77,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "commits_last_year": 790,
              "human_commit_share": 0.68,
              "days_since_last_push": 0,
              "active_weeks_last_year": 10
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "10/52 weeks with commits",
                "points": 6.9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 10
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "790 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 790
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 65,
              "latest_release_tag": "v0.24.0",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 0.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "65 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 65
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.1 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 37,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 8,
            "inputs": {
              "forks": 1,
              "stars": 4,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "4 stars",
                "points": 7.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 59,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 32,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 6,
              "top_contributor_share": 0.585
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 58% of commits",
                "points": 9.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 58
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "6 contributors",
                "points": 8.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 66,
            "inputs": {
              "merged_prs": 300,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 27
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "300/327 decided PRs merged",
                "points": 35.1,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 300,
                      "decided": 327
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/13 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 52,
            "inputs": {
              "followers": 26,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "NeuralTrust",
              "public_repos": 12,
              "account_age_days": 733
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "26 followers of NeuralTrust",
                "points": 10.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 26,
                      "login": "NeuralTrust"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "12 public repos, account ~2 yr old",
                "points": 12.1,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 12
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 2
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/NeuralTrust/TrustGate"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "317 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 317
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 72,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "6 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "6 out of 10 merged PRs checked by a CI test -- score normalized to 6",
                "points": 12,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 45,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 36,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 3.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "6 out of 10 merged PRs checked by a CI test -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/13 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "3 existing vulnerabilities detected",
                "points": 5.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "good",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 286 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 286
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "source": "osv",
              "advisories": 3,
              "affected_packages": 3,
              "assessed_packages": 286,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 1, unknown 2",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: github.com/gofiber/fiber/v2 v2.52.13 (moderate 5.3)",
                "points": 20.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "github.com/gofiber/fiber/v2 v2.52.13 (moderate 5.3)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 286,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 88,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.882,
              "agent_instruction_files": [
                ".agents/AGENT.md",
                ".agents/AGENTS.md"
              ],
              "agent_instruction_max_bytes": 36781
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".agents/AGENT.md, .agents/AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".agents/AGENT.md, .agents/AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "60 of 68 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 60,
                      "sampled": 68
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "package-lock.json"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "frontend/tsconfig.json"
              ],
              "agent_commit_share": 0.21,
              "toolchain_manifests": [
                "go.mod",
                "pkg/metrics/go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "frontend/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "frontend/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "21 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 21,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 247549,
              "source_files_sampled": 1261,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/1261 source files over 60KB",
                "points": 55,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 1261,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "excellent",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": true,
              "api_schema_files": [
                "docs/openapi.json",
                "docs/swagger.json",
                "docs/swagger.yaml",
                "pkg/infra/configsnapshot/proto/configsync.proto",
                "pkg/infra/configsnapshot/proto/snapshot.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "docs/openapi.json, docs/swagger.json, docs/swagger.yaml, pkg/infra/configsnapshot/proto/configsync.proto, pkg/infra/configsnapshot/proto/snapshot.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "docs/openapi.json, docs/swagger.json, docs/swagger.yaml, pkg/infra/configsnapshot/proto/configsync.proto, pkg/infra/configsnapshot/proto/snapshot.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-30T00:55:41.058578Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/n/NeuralTrust/TrustGate.svg",
  "full_name": "NeuralTrust/TrustGate",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}