ShiftControl-io/scim-v2-rust holds a health index of 44 out of 100, placing it in the Weak band. It scores highest on AI Readiness (55/100) and lowest on Security (33/100). It was last updated today. A single contributor accounts for most of its recent work.
44
overall / 100
Weak
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
44
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 46 is calibrated to 44 on the published index scale (record calibration 2026-08-02).
Excluded from scoring (no data or not applicable): dangerous_workflow, packaging, pinned_dependencies, token_permissions. Remaining weights renormalized.
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Manageable file sizes — 1/14 source files over 60KB
Inputs used
primary_language
Rust
largest_source_bytes
478,573
source_files_sampled
14
oversized_source_files
1
Key facts
13GitHub stars
2contributors
4commits, last 12 months
0days since last push
14releases
1bus factor
0open issues
crates.iopackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
deps.dev does not index crates:scim_v2@0.4.1; advisories assessed against the repository dependency graph instead
No resolved dependencies carried a version and a supported ecosystem
More detail
Star and fork history 0 ★ / 8 ⇿
0Stars
8Forks
3Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 2
Each point covers 2 days.
OpenSSF Scorecard 3.3 / 10
3.3aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-30 11:18 UTC
Full resolved dependency set from the GitHub dependency graph: 5 direct and 3 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
crates.io
fluent-uri
—
direct
crates.io
lalrpop-util
—
direct
crates.io
serde
—
direct
crates.io
serde_json
—
direct
crates.io
thiserror
—
direct
crates.io
pretty_assertions
—
indirect
crates.io
test-case
—
indirect
crates.io
uuid
—
indirect
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 182,
"has_wiki": false,
"homepage": null,
"languages": {
"Rust": 679784
},
"pushed_at": "2026-07-30T02:49:43Z",
"created_at": "2024-03-11T01:28:56Z",
"owner_type": "Organization",
"updated_at": "2026-07-30T02:49:50Z",
"description": "A Rust crate that provides utilities for working with the System for Cross-domain Identity Management (SCIM) version 2.0 protocol. ",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Rust",
"significant_languages": [
"Rust"
]
},
"owner": {
"blog": "https://shiftcontrol.io",
"name": "ShiftControl",
"type": "Organization",
"login": "ShiftControl-io",
"company": null,
"location": "Singapore",
"followers": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/158009553?v=4",
"created_at": "2024-01-29T03:02:15Z",
"is_verified": null,
"public_repos": 4,
"account_age_days": 913
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v",
"kind": "other",
"published_at": "2025-11-19T00:04:15Z"
},
{
"tag": "v0.2.5",
"kind": "patch",
"published_at": "2025-03-17T09:41:17Z"
},
{
"tag": "v0.2.4",
"kind": "patch",
"published_at": "2025-03-02T04:48:21Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2024-03-26T09:58:51Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2024-03-21T10:22:26Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2024-03-21T09:10:12Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2024-03-20T12:05:30Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2024-03-18T07:07:02Z"
},
{
"tag": "v0.1.5",
"kind": "patch",
"published_at": "2024-03-18T06:07:58Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2024-03-18T02:56:36Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2024-03-18T02:01:38Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2024-03-11T10:01:34Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2024-03-11T05:52:08Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2024-03-11T05:19:54Z"
}
],
"recent_commits": [
{
"oid": "c74703b28733fcc0070703d455f294fae8aa2cf8",
"body": "Co-authored-by: Devin AI <dan+devin@shiftcontrol.io>",
"is_bot": true,
"headline": "ci: trigger publish/release on version tags only (#43)",
"author_name": "devin-ai-integration[bot]",
"author_login": "devin-ai-integration[bot]",
"committed_at": "2026-07-30T02:49:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0d0f2272c482633b7f04081f457a31ffe7270e1d",
"body": "Co-authored-by: Devin AI <dan+devin@shiftcontrol.io>",
"is_bot": true,
"headline": "chore(release): bump crate version to 0.4.1 (#42)",
"author_name": "devin-ai-integration[bot]",
"author_login": "devin-ai-integration[bot]",
"committed_at": "2026-07-30T02:41:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c4c1972d8f5428247792c7b168b63e5d36057899",
"body": "…sh of #40) (#41)\n\n* fix(models): Resources field can be omitted if empty\n\nCo-authored-by: Sidney Rubidge <sidney.rubidge@lastwall.com>\n\n* test(models): cover ListResponse without Resources key\n\n---------\n\nCo-authored-by: Sidney Rubidge <sidney.rubidge@lastwall.com>\nCo-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "fix(models): allow ListResponse.Resources to be omitted (signed re-pu…",
"author_name": "devin-ai-integration[bot]",
"author_login": "devin-ai-integration[bot]",
"committed_at": "2026-07-30T02:36:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0e31134aedd86c2aed56cbf9e1558d027575cfe3",
"body": "…es (#39)\n\n* refactor patch operation.\n\n* add filter parser.\n\n* feat: Add more lenient deserialization of some fields for entra compatability.\n\n* feat: Parameterize ID types of user and group\n\nThis allows users of the library to use different types.\nEg String, uiid::Uuid, email_address::EmailAddress\n[…]\n\n- Aligns with previous decision to remove agent-generated test fixtures\n\n---------\n\nCo-authored-by: Paul Ellenbogen <paul.ellenbogen@legionintel.com>\nCo-authored-by: Dan Gericke <dan@shiftcontrol.io>",
"is_bot": false,
"headline": "Refactor PATCH operations, add filter parser, and parameterize ID typ…",
"author_name": "Paul Ellenbogen",
"author_login": "Paul-E",
"committed_at": "2026-04-26T07:22:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3ab7771f07f305c7fca422937711916e2f57b4f8",
"body": "…ncy update in README.md. (#38)",
"is_bot": false,
"headline": "Release version 0.3.1 with breaking changes documentation and depende…",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2025-11-19T00:03:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc49e6b88d1ceb8e5bbf6ba03ae636e9e509d2f9",
"body": "* Update GitHub Actions workflows with refined permissions and minor adjustments\n\n* Pin GitHub Action versions in workflows for better stability and reproducibility.",
"is_bot": false,
"headline": "Pin and update GitHub Actions workflows (#37)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2025-11-18T23:57:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "978898627a85ace50dcdf1c75da254b589ca0ae0",
"body": "* Add externalId to user and group.\n\n- Add externalId to user and group entities\n- Use serde rewrite attributes on containers\n- Run \"cargo fmt\" and add CI check for formatting\n\n* PR feedback changes.\n\n* Bump dependencies.\n\n---------\n\nCo-authored-by: Paul Ellenbogen <paul.ellenbogen@legionintel.com>",
"is_bot": false,
"headline": "Add externalId to user and group. (#36)",
"author_name": "Paul Ellenbogen",
"author_login": "Paul-E",
"committed_at": "2025-11-18T23:46:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60509087e74b433825ba07f7ff906ceb5ea2c220",
"body": "Updated the crate version to 0.2.5 and upgraded multiple dependencies in `Cargo.toml` for better compatibility and support. Simplified assertions in tests by removing redundant `std::` prefixes for improved readability. Also, removed an unnecessary newline in `user.rs`.",
"is_bot": false,
"headline": "Bump crate version and update dependencies (#33)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2025-03-17T09:39:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1afa50a43081e68dec547e06cf1e37eb4582a22",
"body": "Bump the crate version to 0.2.4 and update several dependencies, including `serde`, `serde_json`, and development dependencies like `indoc` and `rustversion`. These updates ensure compatibility with newer versions and improve the overall stability of the project.",
"is_bot": false,
"headline": "Update crate version and dependencies in Cargo.toml (#32)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2025-03-02T04:46:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "470fa9892cdc9dc34624290aee614c06a95448ee",
"body": "* Fix typo in CODEOWNERS file\r\n* Add @edbo to CODEOWNERS",
"is_bot": false,
"headline": "Fix CODEOWNERS (#31)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-04-29T00:44:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e21707921f651ec227d77d44030d2269822f1d9e",
"body": null,
"is_bot": false,
"headline": "Bump to v0.2.3 (#30)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-26T09:55:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51faccacfba9493b7e25c988b26f685ca40589c5",
"body": null,
"is_bot": false,
"headline": "Fix the Github url in the Cargo.toml file. (#29)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-26T09:51:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c351862c1377d7a429d8b04b3cdccc265ddea31",
"body": "Add action for publishing to crates.io\r\nBump version to v0.2.2",
"is_bot": false,
"headline": "Fix rust docs. (#28)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-21T10:21:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ac4e2116fdb61c448279bc82891e6882d3024ab",
"body": "* Make all fields in ListQuery optional because when it is used to map query params in axum it will validate if a field is there, and we expect queries fully empty as well.\r\n* Add attributes and excludedAttributes to the list of possible query parameters.\r\n* Add patchOp structs for urn:ietf:params:scim:api:messages:2.0:PatchOp\r\n* Remove redunant external crate imports.\r\n* Clean up dependencies and bump to v0.2.1",
"is_bot": false,
"headline": "Add patchOp Structs & make ListQuery flexible (#27)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-21T09:09:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca202f59d31baa43a5329366c00d3e2515ec73a4",
"body": "* Add a NotFoundError.\r\n* Bump version to v0.2.0",
"is_bot": false,
"headline": "Add a NotFound Error to SCIMError & Bump version to v0.2.0 (#26)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-20T12:03:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99f1f0dce4e31321568fb82d3d39e2fc1b045d5a",
"body": "* Make ResourceType an enum value in ListResponse Resource.\r\n* Add more errors to ScimError\r\n* Add ConflictError to SCIMError\r\n* Make SCIMError msg types normalized.\r\n* Reformatting code.",
"is_bot": false,
"headline": "Update Error logic (#25)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-20T07:52:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c242ec3821726c77658cee97bcfab416f2b1a034",
"body": "Updating the docs to proper example instead of the User example.",
"is_bot": false,
"headline": "Update docs for schema. (#24)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-19T05:43:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6d5a6a0cbdc9950a54e4086d270230024af2d14",
"body": "* Add a model to support generating the expected error formats.",
"is_bot": false,
"headline": "Implement SCIM Error for HTTP Responses (#23)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-19T05:36:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1545ae9d975d0ae7a2a8116df16108535cd45b1a",
"body": "* Make documenationUri optional.\r\n* Remove empty null values from json when set to None.",
"is_bot": false,
"headline": "Useability fixes (#22)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-19T03:49:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6c2bc7ee08edb1d5f69d7436616eb0275229bde",
"body": null,
"is_bot": false,
"headline": "Fix serde rename for itemsperpage (#21)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-18T09:10:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7917e892fe7b255738c67e3c9c4e6374aed12533",
"body": "* Add enum to Resource so it handles multiple response types.\r\n* Add docs for get_schemas.\r\n* Bump to v0.1.7",
"is_bot": false,
"headline": "Fix enum for Resource and implement docs for get_schemas (#20)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-18T08:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f78addc0f05213b4c43f9a8cef035ad607ab7ffa",
"body": "* Add missing items from authentication schemes.\r\n* Give meta defaults.\r\n* Bump version to v0.1.6",
"is_bot": false,
"headline": "Fix authenticationschemes (#19)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-18T07:05:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c571382eece1a8f51e17f55cc749560bfe1ca9cc",
"body": "* Extend to add meta as part of the stuct.\r\n* Fix debugs.\r\n* Bump version.",
"is_bot": false,
"headline": "Adjust defaults and bump version (#18)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-18T06:06:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5a028d9054eb1d8787abfa6c2582d339344bd11",
"body": "Added a helper function to allow users to get_resource_types as they are standard and known. For any custom resourcetype, they can build their own objects and add them using the provided schema.",
"is_bot": false,
"headline": "Implement get_resource_types helper function. (#17)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-18T05:55:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbf03703fa892fe1c2d258cb41ab350f9270a926",
"body": "* Make schema json files json objects instead of a list of a json object.\r\n* Implement functions to handle scim_schema requests to /Schema endpoints.\r\n* Reformat the files and make them pretty and take in clippy suggestions.",
"is_bot": false,
"headline": "Add scim schema querying and responses (#16)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-18T05:26:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d34ffd23d012b9eac2aee605dc332d083f89b317",
"body": "* Add defaults to structs\r\n* Bump version to 0.1.4",
"is_bot": false,
"headline": "Implement defaults for all structs (#15)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-18T02:55:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "702b69bcf25a260fd123cef78d060876c2889de8",
"body": "* Make the structs public in others.rs",
"is_bot": false,
"headline": "Make other structs public (#14)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-18T02:00:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a74459a26e497dde08071f896acd76b1ca838d38",
"body": "* Add structs for pagination of users.\r\n* Implement Clippy suggestions\r\n* Add helper structs and structs that do other functions in SCIM to others.\r\n* Move structs to others.rs\r\n* Bump cargo version.",
"is_bot": false,
"headline": "Add other structs to support queries (#13)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-18T01:54:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2355100ae915268932886acfffda078a19c485d2",
"body": "Bump the readme and examples to 0.1.2",
"is_bot": false,
"headline": "Bump readme version to 0.1.2 (#12)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T09:56:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2b8d9b02e286bfb9a2f5a5a966860cd40c644df",
"body": "* Moved functions from lib.rs into each model.\r\n* We're now exposing a try_from() that converts JSON into each model, as well as serialize and deserializer functions.\r\n* Renamed the verify function to validate.\r\n* Bump version to 0.1.2",
"is_bot": false,
"headline": "Build functions into models (#11)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T09:38:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59e33cc6b67b29a35babd588e566c577bc72552f",
"body": "* Bump to v0.1.1",
"is_bot": false,
"headline": "Bump to v0.1.1 (#10)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T05:50:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7511074ed6c0ae661a10b132c01275600e56ed4a",
"body": "…ag-generation\n\nAuto release only on tag generation",
"is_bot": false,
"headline": "Merge pull request #9 from ShiftControl-io/dan/auto-release-only-on-t…",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T05:36:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "592209ed2174106ff383849c2006ddc4eb0c55d6",
"body": null,
"is_bot": false,
"headline": "Run the release workflow only when we push a tag to main.",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T05:35:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c40f633c9475046a00148a823abbceb2c757a870",
"body": "Make the actions use updated versions and clean them up.",
"is_bot": false,
"headline": "Fix the github actions to use maintained versions (#8)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T05:32:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ece522517470ec2e7584a94cdfe845a62947cb3",
"body": "* Fix release.yml order.",
"is_bot": false,
"headline": "Dan/fix release yml (#7)",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T04:24:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a166aedceb1dca3c48acb1a2c6c59517bd9bdf82",
"body": "Fix release creation",
"is_bot": false,
"headline": "Merge pull request #6 from ShiftControl-io/dan/fix-release-yml",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T04:19:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5274f1907bc9de07c205a86f53d334741c1cea8c",
"body": "…t-archive.",
"is_bot": false,
"headline": "Add .gitattributes to ignore directories and update release to use gi…",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T04:16:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48b7c8be387c8b5e9a6468988dc3f2322b1b5f3e",
"body": "…omatically-tagrelease-on-change-of-version\n\nAdd codeowners and release actions",
"is_bot": false,
"headline": "Merge pull request #5 from ShiftControl-io/dan/sc-97-make-scim_v2-aut…",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T04:06:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fea1e06a97004ffcfd678c049bd3571f1f5dba31",
"body": null,
"is_bot": false,
"headline": "Adding codeowners and a release workflow for actions.",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T04:03:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab4ae91f529c2c98c034ddc63cff4e77a566620e",
"body": null,
"is_bot": false,
"headline": "Fix the actions file to use the proper versions.",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T02:28:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e0c5726a3ea1c12ccfcebc07e87ce85910042b6",
"body": "Update Actions Workflow",
"is_bot": false,
"headline": "Merge pull request #3",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T02:21:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06d1152a44d60b5643fefb69b52f0eea3cb56610",
"body": "…tions.",
"is_bot": false,
"headline": "Update the Actions workflow file to use the latest versions of the ac…",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T02:20:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0259562667848a1222049751461e377319c40611",
"body": "Add README.md and LICENSE files",
"is_bot": false,
"headline": "Merge pull request #2",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T02:16:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "789fa0e5b7eed3b44ca3c9d633fe28b63e507731",
"body": "This commit includes a detailed README.md file for the `scim_v2` Rust crate, providing an overview of the project, installation instructions, usage examples, and contribution guidelines. It also adds the MIT License to the project.",
"is_bot": false,
"headline": "Add README.md and LICENSE files",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T02:15:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd02efb4155013eaffa7b245b8b28f3e5b01b16c",
"body": "Implement CI/CD on Push and PR Events",
"is_bot": false,
"headline": "Merge pull request #1",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T02:06:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f199e4dc71666823d2486c5a60db92699eb3c475",
"body": null,
"is_bot": false,
"headline": "Add test to ci/cd",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T02:03:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4bde509a6762c0a1902a853a4032440b58b009e",
"body": null,
"is_bot": false,
"headline": "Initial commit",
"author_name": "Dan Gericke",
"author_login": "shiftcontrol-dan",
"committed_at": "2024-03-11T01:54:36Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 14,
"commits_last_year": 4,
"latest_release_at": "2025-11-19T00:04:15Z",
"latest_release_tag": "v",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 2,
"days_since_latest_release": 253,
"mean_days_between_releases": 67.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "scim_v2",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/scim_v2",
"is_deprecated": false,
"latest_version": "0.4.1",
"repository_url": "https://github.com/ShiftControl-io/scim-v2-rust",
"versions_count": 9,
"total_downloads": 47737,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 8541,
"first_published_at": "2024-03-21T09:27:29.184162Z",
"latest_published_at": "2026-07-30T02:42:14.199057Z",
"latest_version_yanked": false,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 8,
"stars": 13,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2024-10-24",
"count": 1
},
{
"date": "2024-12-17",
"count": 1
},
{
"date": "2025-04-12",
"count": 1
},
{
"date": "2025-05-02",
"count": 1
},
{
"date": "2025-09-18",
"count": 1
},
{
"date": "2025-11-01",
"count": 1
},
{
"date": "2025-11-13",
"count": 1
},
{
"date": "2025-12-10",
"count": 1
}
],
"complete": true,
"collected": 8,
"total_forks": 8
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"Cargo.toml"
],
"largest_source_bytes": 478573,
"source_files_sampled": 14,
"oversized_source_files": 1,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 108
},
"dependencies": {
"manifests": [
"Cargo.toml"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 8,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "serde",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0.228"
},
{
"name": "serde_json",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0.145"
},
{
"name": "lalrpop-util",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.23.1"
},
{
"name": "fluent-uri",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.4.1"
},
{
"name": "thiserror",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.0.18"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "fluent-uri",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "lalrpop-util",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "serde",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "serde_json",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "thiserror",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "pretty_assertions",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "test-case",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "uuid",
"direct": false,
"version": null,
"ecosystem": "crates"
}
],
"collected": true,
"truncated": false,
"total_count": 8,
"direct_count": 5,
"indirect_count": 3
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 40,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "shiftcontrol-dan",
"commits": 42,
"avatar_url": "https://avatars.githubusercontent.com/u/151308270?v=4"
},
{
"type": "User",
"login": "Paul-E",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/4206484?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.955
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"build.yml",
"publish.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 6,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 2,
"reason": "7 out of 30 merged PRs checked by a CI test -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 2/27 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 2,
"reason": "3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 1,
"reason": "SAST tool is not run on all commits -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "c74703b28733fcc0070703d455f294fae8aa2cf8",
"ran_at": "2026-07-30T11:18:09Z",
"aggregate_score": 3.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-30T02:50:27Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-30T02:49:41Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/ShiftControl-io/scim-v2-rust",
"host": "github.com",
"name": "scim-v2-rust",
"owner": "ShiftControl-io"
},
"metrics": {
"overall": {
"key": "overall",
"band": "weak",
"name": "Overall health",
"note": "The weighted overall 46 is calibrated to 44 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 46,
"calibrated": 44,
"calibration": "2026-08-02"
}
}
],
"value": 44,
"inputs": {
"security": 33,
"vitality": 53,
"community": 44,
"governance": 52,
"calibration": "2026-08-02",
"engineering": 43,
"ai_readiness": 55,
"weighted_overall_raw": 46
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 53,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "weak",
"name": "Development activity",
"note": null,
"notes": [],
"value": 46,
"inputs": {
"commits_last_year": 4,
"human_commit_share": 0.936,
"days_since_last_push": 0,
"active_weeks_last_year": 2
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "2/52 weeks with commits",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 2
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "4 commits in the last year",
"points": 6.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 4
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "moderate",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"releases_count": 14,
"latest_release_tag": "v",
"releases_from_tags": false,
"days_since_latest_release": 253,
"mean_days_between_releases": 67.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "14 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 14
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 253 days ago",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 253
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~67.9 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 67.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 98,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 98 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 98
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 44,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"forks": 8,
"stars": 13,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "13 stars",
"points": 17.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 13
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "8 forks",
"points": 7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 8
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"packages": [
"scim_v2"
],
"dependents": null,
"ecosystems": "crates",
"total_downloads": 47737,
"monthly_downloads": 8541
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "8,541 downloads/month across crates",
"points": 52.4,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 8541,
"ecosystems": "crates"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 52,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 16,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.955
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 96% of commits",
"points": 1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 96
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"merged_prs": 40,
"open_issues": 0,
"closed_issues": 0,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": null,
"closed_unmerged_prs": 3,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "40/43 decided PRs merged",
"points": 27.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 40,
"decided": 43
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/27 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 47,
"inputs": {
"followers": 7,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "ShiftControl-io",
"public_repos": 4,
"account_age_days": 913
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "7 followers of ShiftControl-io",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 7,
"login": "ShiftControl-io"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "4 public repos, account ~2 yr old",
"points": 10.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 4
}
},
{
"code": "account_age_years",
"params": {
"years": 2
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"scim_v2"
],
"ecosystems": "crates",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on crates",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "crates"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "9 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 9
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "weak",
"name": "Engineering Quality",
"value": 43,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 28,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 30 merged PRs checked by a CI test -- score normalized to 2",
"points": 4,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 33,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 33,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 14,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 4,
"scorecard_aggregate": 3.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 30 merged PRs checked by a CI test -- score normalized to 2",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/27 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 1",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 55,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "moderate",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.818,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 108
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md (stub)",
"points": 18,
"status": "partial",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md"
}
},
{
"code": "agent_instructions_stub",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "36 of 44 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 36,
"sampled": 44
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.064,
"toolchain_manifests": [
"Cargo.toml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Cargo.toml (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "Cargo.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Rust (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "3 of the last 47 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 3,
"sampled": 47
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 96,
"inputs": {
"primary_language": "Rust",
"largest_source_bytes": 478573,
"source_files_sampled": 14,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Rust (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/14 source files over 60KB",
"points": 51.1,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 14,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:crates",
"weight": 6
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"deps.dev does not index crates:scim_v2@0.4.1; advisories assessed against the repository dependency graph instead",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-30T11:18:28.278467Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/ShiftControl-io/scim-v2-rust.svg",
"full_name": "ShiftControl-io/scim-v2-rust",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with ShiftControl-io/scim-v2-rust. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.3.1, schema v0.27.0 — full methodology · metrics wiki.
