Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 06:03 UTC

SiaFoundation / hostd

The next generation of Sia hosting. Stable. Fast. Scalable.

GoMIT★ 69 stars⑂ 27 forkssince May 2022View on GitHub ↗

SiaFoundation/hostd holds a health index of 74 out of 100, placing it in the Good band. It scores highest on Vitality (95/100) and lowest on Community & Adoption (57/100). It was last updated 4 days ago. A single contributor accounts for most of its recent work.

74
overall / 100
Good

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

74
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

The Sia FoundationOrganization
320 followers69 public repossince Sep 2020

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
Gogo.sia.tech/hostd/v2v2.10.2-6213 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

95Excellent · 22% of overall
How it's scored
36/36Push recency — last push 4 days ago
33.9/36Commit cadence — 49/52 weeks with commits
18/18Commit volume — 336 commits in the last year
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year336
human_commit_share0.77
days_since_last_push4
active_weeks_last_year49
How it's scored
27/27Ships releases — 94 releases published
36/36Release recency — latest release 13 days ago
27/27Release cadence — a release every ~14.7 days
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Inputs used
releases_count94
latest_release_tagv2.10.2
releases_from_tagsno
days_since_latest_release13
mean_days_between_releases14.7

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

57Moderate · 18% of overall
How it's scored
29.7/60Stars — 69 stars
11.8/25Forks — 27 forks
3.9/15Watchers — 6 watchers
Inputs used
forks27
stars69
watchers6
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (MIT)
18/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingyes
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

71Good · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
7/22.5Commit distribution — top contributor authored 69% of commits
13.5/13.5Contributor breadth — 15 contributors
10/10OpenSSF Scorecard: Contributors — project has 4 contributing companies or organizations
Inputs used
bus_factor1
contributors_sampled15
top_contributor_share0.691
How it's scored
41.7/46.8Issue resolution — 89% of issues closed
33.9/38.3PR acceptance — 542/611 decided PRs merged
6/15OpenSSF Scorecard: Code-Review — Found 4/9 approved changesets -- score normalized to 4
Inputs used
merged_prs542
open_issues36
closed_issues293
issue_closed_ratio0.891
closed_unmerged_prs69
How it's scored
30/30Ownership backing — organization-owned
0/20Verified domain
18/25Owner reach — 320 followers of SiaFoundation
24.7/25Track record — 69 public repos, account ~5 yr old
Inputs used
followers320
owner_typeOrganization
is_verified
owner_loginSiaFoundation
public_repos69
account_age_days2,133
How it's scored
25/25Published & resolvable — 1 package(s) on go
35/35Publish recency — latest publish 13 days ago
20/20Version history — 62 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesgo.sia.tech/hostd/v2
ecosystemsgo
any_deprecatedno
min_days_since_publish13

Engineering Quality

Are baseline engineering and documentation practices in place?

76Good · 20% of overall
How it's scored
24/24CI workflows — 6 workflow(s)
24/24Tests present
16/16Linter config — .golangci.yml
0/9.6Pre-commit hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 14 out of 14 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configyes
has_precommit_configno

Documentation

65Moderate
How it's scored
30/30README
0/25Documentation directory
15/15Documentation / homepage site — https://sia.tech/software/hostd
10/10Repository description
10/10Topics — 5 topics
0/10Wiki
Inputs used
topicsblockchain, decentralized-storage, golang, storage, hacktoberfest
has_wikino
homepagehttps://sia.tech/software/hostd
has_readmeyes
has_docs_dirno
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

67Moderate · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
6/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 14 out of 14 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
3/7.5Code-Review — Found 4/9 approved changesets -- score normalized to 4
2.5/2.5Contributors — project has 4 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — no data
3.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 7
5/5SAST — SAST tool is run on all commits
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
5.2/7.5Vulnerabilities — 3 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate6.3
Excluded from scoring (no data or not applicable): packaging. Remaining weights renormalized.
How it's scored
26.6/35Direct dependencies free of known advisories — 1 affected: github.com/aws/aws-sdk-go v1.55.8 (unknown)
0/25Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
37.2/40No advisories left outstanding — 1 advisory-carrying package(s) unaddressed past 90 days; oldest published 1,625 days ago
Inputs used
sourceosv
advisories3
affected_packages2
assessed_packages36
unassessed_packages0
affected_by_severityunknown 2
direct_affected_packages1
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 36 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

58Moderate · 0% of overall
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
12.5/40Legible commit history — 18 of 77 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.234
agent_instruction_files
agent_instruction_max_bytes
How it's scored
12.6/18One-command bootstrap — go.mod (toolchain convention, no task runner)
22/22Automated tests
11/11Lint / format config — .golangci.yml
11/11Static type checking — Go (statically typed)
10/10Reproducible environment — Dockerfile, lockfile
2/10Demonstrated agent practice — 1 of the last 100 commits agent-authored or agent-credited
8/8Automated maintenance — 15 of the last 100 commits are automated dependency updates
7/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 7
Inputs used
has_nixno
has_testsyes
lockfilesgo.sum
has_dockerfileyes
typed_languageyes
bootstrap_files
has_devcontainerno
has_linter_configyes
typecheck_configs
agent_commit_share0.01
toolchain_manifestsgo.mod
dependency_bot_commit_share0.15
How it's scored
45/45Type-checkable code — Go (statically typed)
53.4/55Manageable file sizes — 4/135 source files over 60KB
Inputs used
primary_languageGo
largest_source_bytes86,751
source_files_sampled135
oversized_source_files4
How it's scored
40/40API schema (OpenAPI/GraphQL/proto) — openapi.yml
0/20MCP server
0/40Runnable examples
Inputs used
example_dirs
has_mcp_signalno
api_schema_filesopenapi.yml

Key facts

69GitHub stars
15contributors
336commits, last 12 months
4days since last push
94releases
1bus factor
36open issues
Gopackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

More detail

Star and fork history 0 ★ / 27 ⇿
0Stars
27Forks
90Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

0510152025302712023-032024-112026-06
Major 1Minor 11Patch 29

Each point covers 3 days.

OpenSSF Scorecard 6.3 / 10
6.3aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-26 06:03 UTC

10Binary-Artifactsno binaries found in the repo
8Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests14 out of 14 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
4Code-ReviewFound 4/9 approved changesets -- score normalized to 4
10Contributorsproject has 4 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
n/aPackagingpackaging workflow not detected
7Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 7
10SASTSAST tool is run on all commits
0Security-Policysecurity policy file not detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
7Vulnerabilities3 existing vulnerabilities detected
Direct dependencies 18
RegistryPackageVersion constraintManifest
Gogithub.com/aws/aws-sdk-gov1.55.8go.mod
Gogithub.com/cloudflare/cloudflare-gov0.117.0go.mod
Gogithub.com/google/go-githubv17.0.0+incompatiblego.mod
Gogithub.com/hashicorp/golang-lru/v2v2.0.7go.mod
Gogithub.com/mattn/go-sqlite3v1.14.48go.mod
Gogithub.com/shopspring/decimalv1.4.0go.mod
Gogo.sia.tech/corev0.21.7go.mod
Gogo.sia.tech/coreutilsv0.23.5go.mod
Gogo.sia.tech/japev0.14.1go.mod
Gogo.sia.tech/web/hostdv0.68.2go.mod
Gogo.uber.org/zapv1.28.0go.mod
Gogolang.org/x/sysv0.47.0go.mod
Gogolang.org/x/termv0.45.0go.mod
Gogolang.org/x/timev0.15.0go.mod
Gogopkg.in/yaml.v3v3.0.1go.mod
Golukechampine.com/flaggv1.1.1go.mod
Golukechampine.com/frandv1.5.1go.mod
Golukechampine.com/upnpv0.3.0go.mod
All dependencies 36

Full resolved dependency set from the GitHub dependency graph: 18 direct and 18 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
Gogithub.com/aws/aws-sdk-gov1.55.8direct
Gogithub.com/cloudflare/cloudflare-gov0.117.0direct
Gogithub.com/google/go-githubv17.0.0+incompatibledirect
Gogithub.com/hashicorp/golang-lru/v2v2.0.7direct
Gogithub.com/mattn/go-sqlite3v1.14.48direct
Gogithub.com/shopspring/decimalv1.4.0direct
Gogo.sia.tech/corev0.21.7direct
Gogo.sia.tech/coreutilsv0.23.5direct
Gogo.sia.tech/japev0.14.1direct
Gogo.sia.tech/web/hostdv0.68.2direct
Gogo.uber.org/zapv1.28.0direct
Gogolang.org/x/sysv0.47.0direct
Gogolang.org/x/termv0.45.0direct
Gogolang.org/x/timev0.15.0direct
Gogopkg.in/yaml.v3v3.0.1direct
Golukechampine.com/flaggv1.1.1direct
Golukechampine.com/frandv1.5.1direct
Golukechampine.com/upnpv0.3.0direct
Gogithub.com/dunglas/httpsfvv1.1.0indirect
Gogithub.com/goccy/go-jsonv0.10.5indirect
Gogithub.com/google/go-querystringv1.1.0indirect
Gogithub.com/jmespath/go-jmespathv0.4.0indirect
Gogithub.com/julienschmidt/httprouterv1.3.0indirect
Gogithub.com/quic-go/qpackv0.6.0indirect
Gogithub.com/quic-go/quic-gov0.60.0indirect
Gogithub.com/quic-go/webtransport-gov0.11.1indirect
Gogithub.com/rogpeppe/go-internalv1.12.0indirect
Gogo.etcd.io/bboltv1.5.0indirect
Gogo.sia.tech/muxv1.5.3indirect
Gogo.sia.tech/webv0.0.0-20240610131903-5611d44a533eindirect
Gogo.uber.org/multierrv1.11.0indirect
Gogolang.org/x/cryptov0.54.0indirect
Gogolang.org/x/netv0.57.0indirect
Gogolang.org/x/textv0.40.0indirect
Gogolang.org/x/toolsv0.48.0indirect
Gogopkg.in/yaml.v2v2.4.0indirect
Dependency advisories 2

This repository publishes no package the index resolves, so its own dependency graph was assessed — 36 packages, which also include development and test pins that never ship: 2 carry known advisories, of which 1 are direct.

PackageVersionRelationSeverityAdvisoriesFixed in
github.com/aws/aws-sdk-gov1.55.8directunknown2
golang.org/x/cryptov0.54.0indirectunknown1

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "blockchain",
        "decentralized-storage",
        "golang",
        "storage",
        "hacktoberfest"
      ],
      "is_fork": false,
      "size_kb": 10425,
      "has_wiki": false,
      "homepage": "https://sia.tech/software/hostd",
      "languages": {
        "Go": 1252099,
        "Dockerfile": 1119
      },
      "pushed_at": "2026-07-21T08:53:33Z",
      "created_at": "2022-05-25T19:29:12Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-21T08:54:58Z",
      "description": "The next generation of Sia hosting. Stable. Fast. Scalable.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "master",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://sia.tech",
      "name": "The Sia Foundation",
      "type": "Organization",
      "login": "SiaFoundation",
      "company": null,
      "location": "United States of America",
      "followers": 320,
      "avatar_url": "https://avatars.githubusercontent.com/u/71667087?v=4",
      "created_at": "2020-09-21T19:04:19Z",
      "is_verified": null,
      "public_repos": 69,
      "account_age_days": 2133
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.10.2",
          "kind": "patch",
          "published_at": "2026-07-12T23:28:36Z"
        },
        {
          "tag": "v2.10.1",
          "kind": "patch",
          "published_at": "2026-07-06T14:34:13Z"
        },
        {
          "tag": "v2.10.0",
          "kind": "minor",
          "published_at": "2026-07-03T17:48:27Z"
        },
        {
          "tag": "v2.9.1-beta.1",
          "kind": "prerelease",
          "published_at": "2026-06-30T08:32:51Z"
        },
        {
          "tag": "v2.9.0",
          "kind": "minor",
          "published_at": "2026-06-03T17:59:19Z"
        },
        {
          "tag": "v2.9.0-beta.1",
          "kind": "prerelease",
          "published_at": "2026-05-29T10:52:59Z"
        },
        {
          "tag": "v2.8.0",
          "kind": "minor",
          "published_at": "2026-04-23T21:26:19Z"
        },
        {
          "tag": "v2.8.0-beta.2",
          "kind": "prerelease",
          "published_at": "2026-04-22T13:16:02Z"
        },
        {
          "tag": "v2.8.0-beta.1",
          "kind": "prerelease",
          "published_at": "2026-04-15T07:39:03Z"
        },
        {
          "tag": "v2.7.0",
          "kind": "minor",
          "published_at": "2026-03-02T20:30:12Z"
        },
        {
          "tag": "v2.7.0-beta.1",
          "kind": "prerelease",
          "published_at": "2026-02-25T21:09:14Z"
        },
        {
          "tag": "v2.6.0",
          "kind": "minor",
          "published_at": "2026-01-23T19:20:40Z"
        },
        {
          "tag": "v2.6.0-beta.4",
          "kind": "prerelease",
          "published_at": "2026-01-13T07:32:47Z"
        },
        {
          "tag": "v2.6.0-beta.3",
          "kind": "prerelease",
          "published_at": "2025-12-21T00:51:21Z"
        },
        {
          "tag": "v2.6.0-beta.2",
          "kind": "prerelease",
          "published_at": "2025-12-18T22:52:41Z"
        },
        {
          "tag": "v2.6.0-beta.1",
          "kind": "prerelease",
          "published_at": "2025-12-18T20:44:21Z"
        },
        {
          "tag": "v2.5.1",
          "kind": "patch",
          "published_at": "2025-11-12T14:26:54Z"
        },
        {
          "tag": "v2.4.2-beta.1",
          "kind": "prerelease",
          "published_at": "2025-09-26T16:57:33Z"
        },
        {
          "tag": "v2.4.1",
          "kind": "patch",
          "published_at": "2025-09-05T20:57:13Z"
        },
        {
          "tag": "v2.4.0",
          "kind": "minor",
          "published_at": "2025-08-27T18:59:08Z"
        },
        {
          "tag": "v2.4.0-beta.1",
          "kind": "prerelease",
          "published_at": "2025-08-19T21:04:01Z"
        },
        {
          "tag": "v2.3.7",
          "kind": "patch",
          "published_at": "2025-08-10T18:22:26Z"
        },
        {
          "tag": "v2.3.7-beta.2",
          "kind": "prerelease",
          "published_at": "2025-08-06T03:48:08Z"
        },
        {
          "tag": "v2.3.7-beta.1",
          "kind": "prerelease",
          "published_at": "2025-08-06T02:18:21Z"
        },
        {
          "tag": "v2.3.6",
          "kind": "patch",
          "published_at": "2025-08-04T19:12:58Z"
        },
        {
          "tag": "v2.3.6-beta.1",
          "kind": "prerelease",
          "published_at": "2025-08-01T23:18:58Z"
        },
        {
          "tag": "v2.3.5",
          "kind": "patch",
          "published_at": "2025-07-01T23:12:16Z"
        },
        {
          "tag": "v2.3.4",
          "kind": "patch",
          "published_at": "2025-06-25T22:40:41Z"
        },
        {
          "tag": "v2.3.3",
          "kind": "patch",
          "published_at": "2025-06-20T04:43:03Z"
        },
        {
          "tag": "v2.3.2",
          "kind": "patch",
          "published_at": "2025-06-17T15:54:32Z"
        },
        {
          "tag": "v2.3.2-beta.4",
          "kind": "prerelease",
          "published_at": "2025-06-16T19:20:45Z"
        },
        {
          "tag": "v2.3.2-beta.3",
          "kind": "prerelease",
          "published_at": "2025-06-15T18:43:59Z"
        },
        {
          "tag": "v2.3.2-beta.1",
          "kind": "prerelease",
          "published_at": "2025-06-14T16:35:44Z"
        },
        {
          "tag": "v2.3.1",
          "kind": "patch",
          "published_at": "2025-06-12T23:40:49Z"
        },
        {
          "tag": "v2.3.0",
          "kind": "minor",
          "published_at": "2025-06-07T19:31:04Z"
        },
        {
          "tag": "v2.2.3",
          "kind": "patch",
          "published_at": "2025-05-29T23:14:56Z"
        },
        {
          "tag": "v2.2.0",
          "kind": "minor",
          "published_at": "2025-05-26T21:08:48Z"
        },
        {
          "tag": "v2.2.0-beta.1",
          "kind": "prerelease",
          "published_at": "2025-05-19T23:39:15Z"
        },
        {
          "tag": "v2.1.0",
          "kind": "minor",
          "published_at": "2025-05-06T16:20:17Z"
        },
        {
          "tag": "v2.1.0-beta.4",
          "kind": "prerelease",
          "published_at": "2025-04-24T19:01:38Z"
        },
        {
          "tag": "v2.1.0-beta.3",
          "kind": "prerelease",
          "published_at": "2025-03-27T05:13:02Z"
        },
        {
          "tag": "v2.1.0-beta.2",
          "kind": "prerelease",
          "published_at": "2025-03-11T18:41:28Z"
        },
        {
          "tag": "v2.1.0-beta.1",
          "kind": "prerelease",
          "published_at": "2025-03-01T00:25:44Z"
        },
        {
          "tag": "v2.0.4",
          "kind": "patch",
          "published_at": "2025-02-24T23:10:23Z"
        },
        {
          "tag": "v2.0.3",
          "kind": "patch",
          "published_at": "2025-02-11T01:13:13Z"
        },
        {
          "tag": "v2.0.2",
          "kind": "patch",
          "published_at": "2025-01-17T15:34:15Z"
        },
        {
          "tag": "v2.0.2-beta.1",
          "kind": "prerelease",
          "published_at": "2025-01-15T23:54:19Z"
        },
        {
          "tag": "v2.0.1",
          "kind": "patch",
          "published_at": "2025-01-13T18:51:14Z"
        },
        {
          "tag": "v2.0.0-beta.5",
          "kind": "prerelease",
          "published_at": "2025-01-11T19:29:39Z"
        },
        {
          "tag": "v2.0.0-beta.4",
          "kind": "prerelease",
          "published_at": "2025-01-11T17:28:50Z"
        },
        {
          "tag": "v2.0.0-beta.3",
          "kind": "prerelease",
          "published_at": "2025-01-08T21:59:27Z"
        },
        {
          "tag": "v2.0.0-beta.2",
          "kind": "prerelease",
          "published_at": "2025-01-07T22:44:04Z"
        },
        {
          "tag": "v2.0.0-beta.1",
          "kind": "prerelease",
          "published_at": "2024-12-20T17:04:17Z"
        },
        {
          "tag": "v2.0.0-alpha.4",
          "kind": "prerelease",
          "published_at": "2024-11-20T19:02:05Z"
        },
        {
          "tag": "v2.0.0-alpha.3",
          "kind": "prerelease",
          "published_at": "2024-09-04T19:02:13Z"
        },
        {
          "tag": "v2.0.0-alpha.1",
          "kind": "prerelease",
          "published_at": "2024-09-01T16:47:21Z"
        },
        {
          "tag": "v1.1.2",
          "kind": "patch",
          "published_at": "2024-07-12T03:15:57Z"
        },
        {
          "tag": "v1.1.1",
          "kind": "patch",
          "published_at": "2024-07-10T18:28:35Z"
        },
        {
          "tag": "v1.1.1-beta.2",
          "kind": "prerelease",
          "published_at": "2024-06-27T23:06:21Z"
        },
        {
          "tag": "v1.1.1-beta.1",
          "kind": "prerelease",
          "published_at": "2024-06-13T16:57:21Z"
        },
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2024-05-20T16:44:47Z"
        },
        {
          "tag": "v1.1.0-beta.2",
          "kind": "prerelease",
          "published_at": "2024-05-07T16:58:09Z"
        },
        {
          "tag": "v1.0.4",
          "kind": "patch",
          "published_at": "2024-04-06T04:32:52Z"
        },
        {
          "tag": "v1.1.0-beta.1",
          "kind": "prerelease",
          "published_at": "2024-03-27T22:38:26Z"
        },
        {
          "tag": "v1.0.3",
          "kind": "patch",
          "published_at": "2024-03-11T16:33:24Z"
        },
        {
          "tag": "v1.0.3-beta.2",
          "kind": "prerelease",
          "published_at": "2024-03-06T00:04:42Z"
        },
        {
          "tag": "v1.0.3-beta.1",
          "kind": "prerelease",
          "published_at": "2024-02-17T01:40:30Z"
        },
        {
          "tag": "v1.0.2",
          "kind": "patch",
          "published_at": "2024-02-12T22:39:09Z"
        },
        {
          "tag": "v1.0.2-beta.4",
          "kind": "prerelease",
          "published_at": "2024-01-24T17:26:18Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2024-01-10T18:49:39Z"
        },
        {
          "tag": "v1.0.1-beta.2",
          "kind": "prerelease",
          "published_at": "2024-01-07T03:08:49Z"
        },
        {
          "tag": "v1.0.1-beta.1",
          "kind": "prerelease",
          "published_at": "2023-12-29T02:09:54Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2023-12-25T13:01:34Z"
        },
        {
          "tag": "v0.3.0-beta.1",
          "kind": "prerelease",
          "published_at": "2023-12-19T21:35:14Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2023-12-02T20:13:35Z"
        },
        {
          "tag": "v0.2.2-beta.2",
          "kind": "prerelease",
          "published_at": "2023-11-28T01:18:40Z"
        },
        {
          "tag": "v0.2.2-beta.1",
          "kind": "prerelease",
          "published_at": "2023-11-14T22:33:15Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2023-11-14T22:25:14Z"
        },
        {
          "tag": "v0.2.1-beta.1",
          "kind": "prerelease",
          "published_at": "2023-10-18T14:12:19Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2023-09-28T19:38:40Z"
        },
        {
          "tag": "v0.2.0-beta.1",
          "kind": "prerelease",
          "published_at": "2023-09-13T02:04:11Z"
        },
        {
          "tag": "v0.1.7",
          "kind": "patch",
          "published_at": "2023-08-28T18:53:29Z"
        },
        {
          "tag": "v0.1.6",
          "kind": "patch",
          "published_at": "2023-08-28T17:15:24Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2023-08-21T18:55:21Z"
        },
        {
          "tag": "v0.1.4",
          "kind": "patch",
          "published_at": "2023-08-08T05:21:50Z"
        },
        {
          "tag": "v0.1.4-beta.1",
          "kind": "prerelease",
          "published_at": "2023-08-02T16:58:00Z"
        },
        {
          "tag": "v0.1.3",
          "kind": "patch",
          "published_at": "2023-07-31T16:15:01Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2023-07-19T18:08:23Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2023-07-16T01:24:31Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2023-06-27T16:22:39Z"
        },
        {
          "tag": "v0.1.0-beta",
          "kind": "prerelease",
          "published_at": "2023-06-19T20:55:16Z"
        },
        {
          "tag": "v0.1.0-alpha.3",
          "kind": "prerelease",
          "published_at": "2023-06-10T01:12:10Z"
        },
        {
          "tag": "v0.1.0-alpha.2",
          "kind": "prerelease",
          "published_at": "2023-06-05T17:09:00Z"
        },
        {
          "tag": "v0.1.0-alpha.1",
          "kind": "prerelease",
          "published_at": "2023-05-22T19:39:37Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "ca5b3e6bb363a804d1a80473c80a5438196d544b",
          "body": "Bumps the dependencies group with 1 update: [go.sia.tech/core](https://github.com/SiaFoundation/core).\n\n\nUpdates `go.sia.tech/core` from 0.21.6 to 0.21.7\n- [Release notes](https://github.com/SiaFoundation/core/releases)\n- [Changelog](https://github.com/SiaFoundation/core/blob/master/CHANGELOG.md)\n- \n[…]\ne\n  dependency-version: 0.21.7\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump go.sia.tech/core in the dependencies group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T08:53:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e4e5ca715da6fa6649520edb637e72bff1762514",
          "body": "Bumps the dependencies group with 3 updates: [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3), [golang.org/x/sys](https://github.com/golang/sys) and [golang.org/x/term](https://github.com/golang/term).\n\n\nUpdates `github.com/mattn/go-sqlite3` from 1.14.47 to 1.14.48\n- [Release notes\n[…]\nm\n  dependency-version: 0.45.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the dependencies group with 3 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-14T14:11:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9f5b4def0f19f760c9a69d686ec4e76710696417",
          "body": "chore: prepare release 2.10.2",
          "is_bot": false,
          "headline": "Merge pull request #976 from SiaFoundation/release",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-07-12T23:10:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7fa050474a55c685880b2b7cb961fda0eba81b96",
          "body": null,
          "is_bot": true,
          "headline": "chore: prepare release 2.10.2",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-12T22:39:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6aa51aa87be263ffa5ca7f1eca5b27db3b9f61cd",
          "body": null,
          "is_bot": false,
          "headline": "fix refresh time",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-07-12T22:39:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00c6ae72b88a2ea434bc5462d9d511554dae9e56",
          "body": null,
          "is_bot": false,
          "headline": "fix nomad cert issuance",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-07-12T21:49:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aec62d38dfb08923eb2f2f26b1b80427f9ded0df",
          "body": "chore: prepare release 2.10.1",
          "is_bot": false,
          "headline": "Merge pull request #974 from SiaFoundation/release",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-07-06T14:08:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd02e86c40f1f11c887485820bd84ea8a444574e",
          "body": null,
          "is_bot": true,
          "headline": "chore: prepare release 2.10.1",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-06T05:21:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bfc7eee5c4d881b65876bd78609888741a807d99",
          "body": null,
          "is_bot": false,
          "headline": "update coreutils",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-07-06T05:21:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc2a12097842feaaa62ba2dd9c78a5a0dfc840ea",
          "body": null,
          "is_bot": false,
          "headline": "update core and coreutils",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-07-05T22:33:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9a920a0f3a5fe48205d0fbee74a8284b2c908b8",
          "body": "chore: prepare release 2.10.0",
          "is_bot": false,
          "headline": "Merge pull request #970 from SiaFoundation/release",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-07-03T17:11:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a31f9dea50e1e44975a3b3733cf747fa7bbf1a12",
          "body": null,
          "is_bot": true,
          "headline": "chore: prepare release 2.10.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-03T17:02:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0f98f4dfdd52cbb508d4bba73c6ed1e05361ce4",
          "body": null,
          "is_bot": false,
          "headline": "update core and coreutils",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-07-03T17:01:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03a409be15dd3b94c92422c5c787da8a56e7aa8b",
          "body": "Detect sector corruption",
          "is_bot": false,
          "headline": "Merge pull request #973 from SiaFoundation/nate/corrupt-sectors",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-07-02T15:15:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30aa5d9b320ca0741f27dc1fa0aa5093ae33fd4f",
          "body": null,
          "is_bot": false,
          "headline": "detect sector corruption",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-07-01T18:33:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b251a83764040f753cb34b0c4b30dba4670fd101",
          "body": null,
          "is_bot": false,
          "headline": "fix build",
          "author_name": "Chris Schinnerl",
          "author_login": "ChrisSchinnerl",
          "committed_at": "2026-06-30T08:08:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f693eb6dcce39c45cfe3e6e892e74c8b4e3e528",
          "body": "Bumps the dependencies group with 1 update: [go.sia.tech/coreutils](https://github.com/SiaFoundation/coreutils).\n\n\nUpdates `go.sia.tech/coreutils` from 0.22.0 to 0.22.1\n- [Release notes](https://github.com/SiaFoundation/coreutils/releases)\n- [Changelog](https://github.com/SiaFoundation/coreutils/blo\n[…]\ns\n  dependency-version: 0.22.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump go.sia.tech/coreutils in the dependencies group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-30T08:08:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1113c2cc68526b74b6042cf4d30e5a6f78c643d6",
          "body": "Bumps the dependencies group with 1 update: [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3).\n\n\nUpdates `github.com/mattn/go-sqlite3` from 1.14.45 to 1.14.47\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.1\n[…]\n\n  dependency-version: 1.14.47\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump github.com/mattn/go-sqlite3 in the dependencies group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T08:49:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c3324cce0d5261f2809cf13ca8bae1e775b09d11",
          "body": null,
          "is_bot": false,
          "headline": "fix bug",
          "author_name": "Christopher Tarry",
          "author_login": "chris124567",
          "committed_at": "2026-06-17T07:38:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc8edc740b721044b43a4bb954a8a4f2ba40d665",
          "body": null,
          "is_bot": false,
          "headline": "review fix",
          "author_name": "Christopher Tarry",
          "author_login": "chris124567",
          "committed_at": "2026-06-17T07:38:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a450e5561ed8e5da263b46688d4984cc3de74c18",
          "body": null,
          "is_bot": false,
          "headline": "review fix",
          "author_name": "Christopher Tarry",
          "author_login": "chris124567",
          "committed_at": "2026-06-17T07:38:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77e6adaca044724512f6d49d9efaf72411002e1a",
          "body": null,
          "is_bot": true,
          "headline": "Auto generate changeset",
          "author_name": "knope-bot[bot]",
          "author_login": "knope-bot[bot]",
          "committed_at": "2026-06-17T07:38:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aed2883e567049608a8bdf5a4e87772ce8805aca",
          "body": null,
          "is_bot": false,
          "headline": "fix alert no disk space",
          "author_name": "Christopher Tarry",
          "author_login": "chris124567",
          "committed_at": "2026-06-17T07:38:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fc0e661c8604eeec55cb205bd1cf4a4a21a3d82",
          "body": null,
          "is_bot": false,
          "headline": "testing: address comments",
          "author_name": "PJ",
          "author_login": "peterjan",
          "committed_at": "2026-06-17T07:24:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "479140136d412e66e5211f46194392d05112e483",
          "body": null,
          "is_bot": false,
          "headline": "store: repair v2 contracts in database",
          "author_name": "PJ",
          "author_login": "peterjan",
          "committed_at": "2026-06-17T07:24:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "306d8925f9bf4b1c44ccb93aabb90da4d4a187fb",
          "body": "Bumps the dependencies group with 1 update: [go.sia.tech/core](https://github.com/SiaFoundation/core).\n\n\nUpdates `go.sia.tech/core` from 0.21.0 to 0.21.1\n- [Release notes](https://github.com/SiaFoundation/core/releases)\n- [Changelog](https://github.com/SiaFoundation/core/blob/master/CHANGELOG.md)\n- \n[…]\ne\n  dependency-version: 0.21.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump go.sia.tech/core in the dependencies group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-16T07:11:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e169186007c45873a40d16b5a2d1cee2be8f939",
          "body": "It has happened",
          "is_bot": false,
          "headline": "Merge pull request #968 from SiaFoundation/chris/it-has-happened",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-06-09T14:50:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ff1222acd1dc7a8a773f6ffa071bf6ee7d36410",
          "body": null,
          "is_bot": false,
          "headline": "It has happened",
          "author_name": "Chris Schinnerl",
          "author_login": "ChrisSchinnerl",
          "committed_at": "2026-06-09T14:48:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f3332fa2bbb3712eb3bad94e70ae46d310a2d48d",
          "body": "Bumps the dependencies group with 3 updates: [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3), [golang.org/x/sys](https://github.com/golang/sys) and [golang.org/x/term](https://github.com/golang/term).\n\n\nUpdates `github.com/mattn/go-sqlite3` from 1.14.44 to 1.14.45\n- [Release notes\n[…]\nm\n  dependency-version: 0.44.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the dependencies group with 3 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-09T08:10:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "deaec7030ea67d43c1274f8c9d41fe2b191ce6ce",
          "body": "chore: prepare release 2.9.0",
          "is_bot": false,
          "headline": "Merge pull request #960 from SiaFoundation/release",
          "author_name": "Christopher Schinnerl",
          "author_login": "ChrisSchinnerl",
          "committed_at": "2026-06-03T15:45:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc357d55954d2a9486bb7159e728f26338df7e67",
          "body": null,
          "is_bot": true,
          "headline": "chore: prepare release 2.9.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-27T14:07:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0531f0342aba7e7140f412385a338546bee4c84",
          "body": "Bumps the dependencies group with 2 updates: [github.com/cloudflare/cloudflare-go](https://github.com/cloudflare/cloudflare-go) and [golang.org/x/sys](https://github.com/golang/sys).\n\n\nUpdates `github.com/cloudflare/cloudflare-go` from 0.116.0 to 0.117.0\n- [Release notes](https://github.com/cloudfla\n[…]\ns\n  dependency-version: 0.45.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the dependencies group with 2 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-27T14:07:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8abe431cd3f0cee9c8e078477e777d8d6b588490",
          "body": "Suppress irrelevant errors until host is announced",
          "is_bot": false,
          "headline": "Merge pull request #963 from SiaFoundation/christopher/suppress",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-05-22T05:18:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5abb968035d9ab1e6e4d1620808277968fd5bd1a",
          "body": null,
          "is_bot": false,
          "headline": "fix changeset",
          "author_name": "Christopher Tarry",
          "author_login": "chris124567",
          "committed_at": "2026-05-21T19:31:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6a8db59730ed28db46a704c88552ac4ff579d12",
          "body": null,
          "is_bot": true,
          "headline": "Auto generate changeset",
          "author_name": "knope-bot[bot]",
          "author_login": "knope-bot[bot]",
          "committed_at": "2026-05-21T19:31:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31f1e8ba257c13583fed9c621e120b4060766f80",
          "body": null,
          "is_bot": false,
          "headline": "review fixes",
          "author_name": "Christopher Tarry",
          "author_login": "chris124567",
          "committed_at": "2026-05-21T19:30:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "268a1048f5f1a40b1e406c30fff4d43e0c610a76",
          "body": null,
          "is_bot": false,
          "headline": "add announced check",
          "author_name": "Christopher Tarry",
          "author_login": "chris124567",
          "committed_at": "2026-05-21T19:17:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d098f0862b6fa0213a4901384dc0d626752c6f53",
          "body": null,
          "is_bot": false,
          "headline": "update workflow",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-05-18T15:11:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57e829c0fd5c43bcf9f76968a1d7f583d35fc69a",
          "body": "ci: pin GitHub Actions to SHA-256 commits",
          "is_bot": false,
          "headline": "Merge pull request #962 from SiaFoundation/pin-actions",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-05-15T17:14:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "767d5c6b5704b69798e775ec79618e307650d19c",
          "body": "Pin all action references to specific commit SHAs to prevent supply-chain\nattacks. Each pin is annotated with a human-readable version tag for clarity.\nVersions stay within the existing major version to avoid breaking changes.",
          "is_bot": false,
          "headline": "ci: pin GitHub Actions to SHA-256 commits",
          "author_name": "Nate Maninger",
          "author_login": "n8mgr",
          "committed_at": "2026-05-15T16:25:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfddf8239725c03df3990a0ff1e3f725bc7141eb",
          "body": null,
          "is_bot": false,
          "headline": "remove account deletion on zero balance in reject",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-05-15T08:31:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c1f1afdf388e4c6e6b6cb48450463a6f35dc452",
          "body": null,
          "is_bot": false,
          "headline": "add pool reject test",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-05-15T08:31:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35e504e4b8b52281f5f2f981374e5bd7625144f4",
          "body": null,
          "is_bot": false,
          "headline": "reset rejected pool funding",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-05-15T08:31:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae1f829ee6a1b49d5bd4144a012159f6d0b10fcb",
          "body": null,
          "is_bot": false,
          "headline": "use prepared statement",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-05-15T08:31:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4010c4b3be797bae7867532d4bc6eec6f87a0f2b",
          "body": null,
          "is_bot": false,
          "headline": "add support for RHP4 pools",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-05-15T08:31:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc5e22b8c71b7d4bbdb57f0efc7921ac8483713b",
          "body": "Bumps the dependencies group with 3 updates: [go.sia.tech/core](https://github.com/SiaFoundation/core), [golang.org/x/sys](https://github.com/golang/sys) and [golang.org/x/term](https://github.com/golang/term).\n\n\nUpdates `go.sia.tech/core` from 0.20.0 to 0.21.0\n- [Release notes](https://github.com/S\n[…]\nm\n  dependency-version: 0.43.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the dependencies group with 3 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T07:35:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3f476d4919ae201de3290b77e201973cb02f4637",
          "body": null,
          "is_bot": false,
          "headline": "changeset",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-05-11T09:32:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f12ed08cab2e7ddefc3b2e7be23fb2572c1167e",
          "body": "The syncer's read/write rate limiters were only wired to the dialer,\nso only outbound peer connections respected `syncerIngressLimit` and\n`syncerEgressLimit`. Inbound connections accepted by the syncer\nlistener used a default unlimited limiter, leaving the bulk of syncer\ntraffic uncapped.\n\nPass the \n[…]\nlimiters to `monitoring.Listen` so the listener\nshares them with the dialer and the settings manager, ensuring both\ninbound and outbound syncer traffic are capped by the configured\nlimits.\n\nFixes #957",
          "is_bot": false,
          "headline": "fix: apply syncer rate limits to inbound peer connections",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-05-11T09:32:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f8bc7f3f423e07f656feed089bb299f7d3b4f8da",
          "body": "Bumps the dependencies group with 2 updates: [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) and [go.uber.org/zap](https://github.com/uber-go/zap).\n\n\nUpdates `github.com/mattn/go-sqlite3` from 1.14.42 to 1.14.44\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Co\n[…]\np\n  dependency-version: 1.28.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the dependencies group with 2 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-05T13:30:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3df4caa9ff90a475e01ed7175f32f2fa26a94c40",
          "body": "chore: prepare release 2.8.0",
          "is_bot": false,
          "headline": "Merge pull request #943 from SiaFoundation/release",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-04-23T20:57:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20475ef7e7463bc2524b9bae4d8814d2a088f2eb",
          "body": null,
          "is_bot": true,
          "headline": "chore: prepare release 2.8.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-23T20:44:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06931af5dbb0a23996890c4c3d172c4120c3e1ca",
          "body": null,
          "is_bot": false,
          "headline": "update core and coreutils",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-04-23T20:44:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a583b7b3f82cdf80db9d6f88b105ed3757fc0881",
          "body": null,
          "is_bot": false,
          "headline": "Extend pruning description",
          "author_name": "CtrlAltDefeat94",
          "author_login": "CtrlAltDefeat94",
          "committed_at": "2026-04-22T15:30:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6322b52c6f1f7be2112b7c4e931aa63345dc9383",
          "body": "Updates the example config to use new default values.\r\nAdds a table with all settings in similar style as Renterd has.\r\nRemoves deprecated fields such as RHP2 etc.\r\n\r\nCloses #937",
          "is_bot": false,
          "headline": "Update configs in README.md",
          "author_name": "CtrlAltDefeat94",
          "author_login": "CtrlAltDefeat94",
          "committed_at": "2026-04-22T15:30:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36a3f89d2256bf8985d0d29633b558e7d7fc5aea",
          "body": null,
          "is_bot": false,
          "headline": "update coreutils",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-04-21T18:00:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d06e194a376cc5ef98f36eafe4760d91298d0a4b",
          "body": "Fix failing refresh after wallet address change",
          "is_bot": false,
          "headline": "Merge pull request #955 from SiaFoundation/chris/fix-signing-error",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-04-21T17:59:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fcad9b8d38e6659789111541223f77204dd5e4ba",
          "body": null,
          "is_bot": false,
          "headline": "update coreutils",
          "author_name": "Chris Schinnerl",
          "author_login": "ChrisSchinnerl",
          "committed_at": "2026-04-21T14:13:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9cd9e3b5155cbcf066981acc1e18dfa5a0483cf",
          "body": null,
          "is_bot": false,
          "headline": "Fix failing refresh after wallet address change",
          "author_name": "Chris Schinnerl",
          "author_login": "ChrisSchinnerl",
          "committed_at": "2026-04-21T10:05:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1df58b59f2b0463e80e3c89f11bf5c554520e2ac",
          "body": null,
          "is_bot": false,
          "headline": "update action to use newer Node",
          "author_name": "Christopher Tarry",
          "author_login": "chris124567",
          "committed_at": "2026-04-14T07:53:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21a48b236dfccebbd1e514f3691f312b1949d680",
          "body": null,
          "is_bot": false,
          "headline": "changeset",
          "author_name": "Chris Schinnerl",
          "author_login": "ChrisSchinnerl",
          "committed_at": "2026-04-14T07:51:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55f89277bc70ed713db709494e42daea09e0c2d8",
          "body": "Bumps the dependencies group with 5 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.41` | `1.14.42` |\n| [go.sia.tech/core](https://github.com/SiaFoundation/core) | `0.19.1-0.20260323200052-1bfa3facc408` | `0.19.1` |\n|\n[…]\nm\n  dependency-version: 0.42.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the dependencies group with 5 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-14T07:51:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ee284f1b85a449c7f622880075eb052dbbea9a46",
          "body": "Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Update host/settings/announce_test.go",
          "author_name": "Christopher Schinnerl",
          "author_login": "ChrisSchinnerl",
          "committed_at": "2026-04-08T07:05:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "33e59ec4f1c975ae7bb383419acab11472e8f896",
          "body": null,
          "is_bot": false,
          "headline": "changeset",
          "author_name": "Chris Schinnerl",
          "author_login": "ChrisSchinnerl",
          "committed_at": "2026-04-08T07:05:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d1f3d3e55c967049df9ed34d37afd1c91a06217",
          "body": null,
          "is_bot": false,
          "headline": "extend TestAutoAnnounceV2",
          "author_name": "Chris Schinnerl",
          "author_login": "ChrisSchinnerl",
          "committed_at": "2026-04-08T07:05:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1776726f16e86c1ed282807bc1a056f49c5b4a67",
          "body": null,
          "is_bot": false,
          "headline": "update LastAnnouncement to ignore address after v2 announcement",
          "author_name": "Chris Schinnerl",
          "author_login": "ChrisSchinnerl",
          "committed_at": "2026-04-08T07:05:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "39a3ab8e71ae0929b8c3355d9ee6a6f3367f457b",
          "body": "Bumps the dependencies group with 2 updates: [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) and [go.sia.tech/web/hostd](https://github.com/SiaFoundation/web).\n\n\nUpdates `github.com/mattn/go-sqlite3` from 1.14.38 to 1.14.41\n- [Release notes](https://github.com/mattn/go-sqlite3/rel\n[…]\nd\n  dependency-version: 0.68.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the dependencies group with 2 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-07T07:43:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "28f06aaa8b488d29313d2a8d87652462f6df9af4",
          "body": null,
          "is_bot": false,
          "headline": "rename stopListeningFuncs to closeFns and add rhp4.Close() to it first",
          "author_name": "Alright",
          "author_login": "Alrighttt",
          "committed_at": "2026-04-02T13:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1b042ec25a5a463a4350b154e5663da973a8dc3",
          "body": null,
          "is_bot": false,
          "headline": "move defer rhp4.Close() to before stopListenerFuncs",
          "author_name": "Alright",
          "author_login": "Alrighttt",
          "committed_at": "2026-04-02T13:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57a3af157db9083c5f4316e3fdf85098739fafa7",
          "body": null,
          "is_bot": false,
          "headline": "bump core and coreutls for RHP4 graceful shutdown changes",
          "author_name": "Alright",
          "author_login": "Alrighttt",
          "committed_at": "2026-04-02T13:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4cec5301d7495cfd40593b2772c3cfe324984db",
          "body": null,
          "is_bot": false,
          "headline": "properly fix NDF test",
          "author_name": "Alright",
          "author_login": "Alrighttt",
          "committed_at": "2026-04-02T13:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a37d4b7a4631816621df18eeca375cf107dd83a",
          "body": null,
          "is_bot": false,
          "headline": "gracefully close RHP4 server in rhp4 tests",
          "author_name": "Alright",
          "author_login": "Alrighttt",
          "committed_at": "2026-04-02T13:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b34cafc8ac3c39bfa787536bae51dec80a30fb52",
          "body": null,
          "is_bot": false,
          "headline": "use a single defer for breaking down RHP4 server",
          "author_name": "Alright",
          "author_login": "Alrighttt",
          "committed_at": "2026-04-02T13:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4e2cc5c7d011ca389b246f5d6306eee359a04f5",
          "body": "Co-authored-by: Christopher Schinnerl <3903476+ChrisSchinnerl@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Update .changeset/graceful_shutdown_of_rhp4_server_via_defer_close.md",
          "author_name": "Alrighttt",
          "author_login": "Alrighttt",
          "committed_at": "2026-04-02T13:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d168dc58cabdb2c4b0cb358bfab8fed2848b6be7",
          "body": null,
          "is_bot": false,
          "headline": "Fix an NDF test due to unrelated coreutils changes",
          "author_name": "Alright",
          "author_login": "Alrighttt",
          "committed_at": "2026-04-02T13:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f2ba4f088d567172319309a67a7abc0d4703966",
          "body": null,
          "is_bot": false,
          "headline": "go.sum",
          "author_name": "Alright",
          "author_login": "Alrighttt",
          "committed_at": "2026-04-02T13:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18d25a6e4f424080378149b6c0806a993389624c",
          "body": null,
          "is_bot": false,
          "headline": "Temporarily patch core and coreutils",
          "author_name": "Alright",
          "author_login": "Alrighttt",
          "committed_at": "2026-04-02T13:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b170df2ef9c78b739178ec7240c49bd067a894e7",
          "body": null,
          "is_bot": false,
          "headline": "add changeset",
          "author_name": "Alright",
          "author_login": "Alrighttt",
          "committed_at": "2026-04-02T13:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17b5aa80810126663b92a075b9f6f1375414a30c",
          "body": null,
          "is_bot": false,
          "headline": "add graceful shutdown of RHP4 server with defer rhp4.Close()",
          "author_name": "Alright",
          "author_login": "Alrighttt",
          "committed_at": "2026-04-02T13:03:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06be32f696d89cc11e47b1a1c1d9c0b446196784",
          "body": "Bumps the dependencies group with 1 update: [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3).\n\n\nUpdates `github.com/mattn/go-sqlite3` from 1.14.37 to 1.14.38\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.1\n[…]\n\n  dependency-version: 1.14.38\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump github.com/mattn/go-sqlite3 in the dependencies group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-31T11:10:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "50d2b4d1353845bdbe816398f6fc6187f1d648f6",
          "body": "…ternal-error-contract-not-found\n\nUse new contract not found error",
          "is_bot": false,
          "headline": "Merge pull request #942 from SiaFoundation/christopher/dont-return-in…",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-23T16:31:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "700422e13257ed00e25ecbbae89d146840607493",
          "body": "…tract-not-found",
          "is_bot": false,
          "headline": "Merge branch 'master' into christopher/dont-return-internal-error-con…",
          "author_name": "Christopher Tarry",
          "author_login": "chris124567",
          "committed_at": "2026-03-22T23:09:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "beea3ab11bca321534f4ee255730955c06e7ad7e",
          "body": "Constant time contract renewals and refreshes",
          "is_bot": false,
          "headline": "Merge pull request #938 from SiaFoundation/nate/constant-renewals",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-20T19:13:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d1dc87f352864cdc3a874d3a231162d27bbc784",
          "body": null,
          "is_bot": false,
          "headline": "update changeset",
          "author_name": "Christopher Tarry",
          "author_login": "chris124567",
          "committed_at": "2026-03-19T12:58:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe62590da14a3d3be32cb1564a47de2c914a7052",
          "body": null,
          "is_bot": true,
          "headline": "Auto generate changeset",
          "author_name": "knope-bot[bot]",
          "author_login": "knope-bot[bot]",
          "committed_at": "2026-03-19T12:57:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ea4587819a0a33616ea7649528b5daaaf04c379",
          "body": null,
          "is_bot": false,
          "headline": "update errors",
          "author_name": "Christopher Tarry",
          "author_login": "chris124567",
          "committed_at": "2026-03-19T12:53:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f221337402a2b94bd20ed8333328c1979917ee6",
          "body": null,
          "is_bot": false,
          "headline": "update core",
          "author_name": "Christopher Tarry",
          "author_login": "chris124567",
          "committed_at": "2026-03-19T12:20:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ee65cedd7eddeee8fd7fb0f3fd260061649130d",
          "body": null,
          "is_bot": false,
          "headline": "add index and delete benchmark",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-17T18:24:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7220c016a071f006a20c999d837e6bdeb10264b",
          "body": null,
          "is_bot": false,
          "headline": "add renew -> reject test case",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-17T18:24:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48219ae4d64ee0547c1e490149297f3d2bf2c9bf",
          "body": null,
          "is_bot": false,
          "headline": "move ORDER BY to outer query",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-17T18:24:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "051f395142c5ab303f5740d3f1a0259c657f9878",
          "body": null,
          "is_bot": false,
          "headline": "add contract_sectors to track expired contract sectors that are orphaned",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-17T18:24:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1cc6cbad36df75bc51083476c8a0d927940fd22",
          "body": null,
          "is_bot": false,
          "headline": "address comments",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-17T18:24:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b6df829b256d857cfa5d155343c3556027b0cd5",
          "body": null,
          "is_bot": false,
          "headline": "only count contract sectors for active contracts",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-17T18:24:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd87963b0966a81581043b5259689a5b13611b7b",
          "body": null,
          "is_bot": false,
          "headline": "remove todo",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-17T18:24:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a6edb6235020a539bec9acaf4f430230fc93c5e",
          "body": null,
          "is_bot": false,
          "headline": "add additional test case for overwritten sectors",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-17T18:24:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8cdeed26552bc5750fee7bb953ec643456530dbd",
          "body": null,
          "is_bot": false,
          "headline": "fix lint",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-17T18:24:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ed8f28ef4564c9b813e2b553c452023fd61fa2e",
          "body": null,
          "is_bot": false,
          "headline": "fix hidden orphans",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-17T18:24:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54c6f3fd03cf905b981fab504a12fe53f489bda8",
          "body": "…nsively duplicate sector roots",
          "is_bot": false,
          "headline": "contract renewals and refreshes are now constant time and do not expe…",
          "author_name": "Nate",
          "author_login": "n8mgr",
          "committed_at": "2026-03-17T18:24:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c819d7bfc5a32559c5e77587d0d0e4041dc1500a",
          "body": "Bumps the dependencies group with 2 updates: [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) and [golang.org/x/term](https://github.com/golang/term).\n\n\nUpdates `github.com/mattn/go-sqlite3` from 1.14.34 to 1.14.37\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [\n[…]\nm\n  dependency-version: 0.41.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the dependencies group with 2 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-17T13:33:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3675e60889d3a646487eafe9e34d665d5e2afa8",
          "body": "Bumps the dependencies group with 2 updates: [golang.org/x/sys](https://github.com/golang/sys) and [golang.org/x/time](https://github.com/golang/time).\n\n\nUpdates `golang.org/x/sys` from 0.41.0 to 0.42.0\n- [Commits](https://github.com/golang/sys/compare/v0.41.0...v0.42.0)\n\nUpdates `golang.org/x/time`\n[…]\ne\n  dependency-version: 0.15.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump the dependencies group with 2 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-10T08:10:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ee8ad050b1c38c2922da1caa48c62376fa6b85ea",
          "body": "Bumps the dependencies group with 1 update: [go.sia.tech/web/hostd](https://github.com/SiaFoundation/web).\n\n\nUpdates `go.sia.tech/web/hostd` from 0.68.0 to 0.68.1\n- [Release notes](https://github.com/SiaFoundation/web/releases)\n- [Commits](https://github.com/SiaFoundation/web/compare/hostd@0.68.0...\n[…]\nd\n  dependency-version: 0.68.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump go.sia.tech/web/hostd in the dependencies group",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-03T08:07:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 94,
      "commits_last_year": 336,
      "latest_release_at": "2026-07-12T23:28:36Z",
      "latest_release_tag": "v2.10.2",
      "releases_from_tags": false,
      "days_since_last_push": 4,
      "active_weeks_last_year": 49,
      "days_since_latest_release": 13,
      "mean_days_between_releases": 14.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "go.sia.tech/hostd/v2",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": null,
          "registry_url": "https://pkg.go.dev/go.sia.tech/hostd/v2",
          "is_deprecated": false,
          "latest_version": "v2.10.2",
          "repository_url": null,
          "versions_count": 62,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-12T23:10:05Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 13
        }
      ]
    },
    "popularity": {
      "forks": 27,
      "stars": 69,
      "watchers": 6,
      "fork_history": {
        "days": [
          {
            "date": "2023-03-27",
            "count": 1
          },
          {
            "date": "2023-06-12",
            "count": 1
          },
          {
            "date": "2023-06-30",
            "count": 1
          },
          {
            "date": "2023-07-07",
            "count": 1
          },
          {
            "date": "2023-10-16",
            "count": 1
          },
          {
            "date": "2023-10-17",
            "count": 1
          },
          {
            "date": "2023-10-25",
            "count": 1
          },
          {
            "date": "2023-10-27",
            "count": 1
          },
          {
            "date": "2023-12-11",
            "count": 1
          },
          {
            "date": "2024-01-03",
            "count": 1
          },
          {
            "date": "2024-04-30",
            "count": 1
          },
          {
            "date": "2024-12-10",
            "count": 1
          },
          {
            "date": "2024-12-31",
            "count": 1
          },
          {
            "date": "2025-01-18",
            "count": 1
          },
          {
            "date": "2025-01-26",
            "count": 1
          },
          {
            "date": "2025-01-28",
            "count": 1
          },
          {
            "date": "2025-03-01",
            "count": 1
          },
          {
            "date": "2025-04-24",
            "count": 1
          },
          {
            "date": "2025-08-20",
            "count": 1
          },
          {
            "date": "2025-08-28",
            "count": 1
          },
          {
            "date": "2025-09-29",
            "count": 1
          },
          {
            "date": "2025-11-14",
            "count": 1
          },
          {
            "date": "2025-12-02",
            "count": 1
          },
          {
            "date": "2025-12-27",
            "count": 1
          },
          {
            "date": "2026-02-10",
            "count": 1
          },
          {
            "date": "2026-03-28",
            "count": 1
          },
          {
            "date": "2026-06-10",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 27,
        "total_forks": 27
      },
      "star_history": null,
      "open_issues_and_prs": 37
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [
        "openapi.yml"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 86751,
      "source_files_sampled": 135,
      "oversized_source_files": 4,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "github.com/aws/aws-sdk-go",
            "direct": true,
            "version": "v1.55.8",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2022-0635",
              "GO-2022-0646"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": 1625
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.54.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 18
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 2
        },
        "advisory_count": 3,
        "affected_count": 2,
        "assessed_count": 36,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/aws/aws-sdk-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.55.8"
        },
        {
          "name": "github.com/cloudflare/cloudflare-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.117.0"
        },
        {
          "name": "github.com/google/go-github",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v17.0.0+incompatible"
        },
        {
          "name": "github.com/hashicorp/golang-lru/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.7"
        },
        {
          "name": "github.com/mattn/go-sqlite3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.14.48"
        },
        {
          "name": "github.com/shopspring/decimal",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.0"
        },
        {
          "name": "go.sia.tech/core",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.21.7"
        },
        {
          "name": "go.sia.tech/coreutils",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.23.5"
        },
        {
          "name": "go.sia.tech/jape",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.14.1"
        },
        {
          "name": "go.sia.tech/web/hostd",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.68.2"
        },
        {
          "name": "go.uber.org/zap",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.28.0"
        },
        {
          "name": "golang.org/x/sys",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.47.0"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.0"
        },
        {
          "name": "golang.org/x/time",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.15.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "lukechampine.com/flagg",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "lukechampine.com/frand",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.1"
        },
        {
          "name": "lukechampine.com/upnp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/aws/aws-sdk-go",
            "direct": true,
            "version": "v1.55.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cloudflare/cloudflare-go",
            "direct": true,
            "version": "v0.117.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-github",
            "direct": true,
            "version": "v17.0.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru/v2",
            "direct": true,
            "version": "v2.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-sqlite3",
            "direct": true,
            "version": "v1.14.48",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shopspring/decimal",
            "direct": true,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/core",
            "direct": true,
            "version": "v0.21.7",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/coreutils",
            "direct": true,
            "version": "v0.23.5",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/jape",
            "direct": true,
            "version": "v0.14.1",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/web/hostd",
            "direct": true,
            "version": "v0.68.2",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": true,
            "version": "v1.28.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": true,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": true,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "lukechampine.com/flagg",
            "direct": true,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "lukechampine.com/frand",
            "direct": true,
            "version": "v1.5.1",
            "ecosystem": "go"
          },
          {
            "name": "lukechampine.com/upnp",
            "direct": true,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dunglas/httpsfv",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goccy/go-json",
            "direct": false,
            "version": "v0.10.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-querystring",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jmespath/go-jmespath",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/julienschmidt/httprouter",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quic-go/qpack",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quic-go/quic-go",
            "direct": false,
            "version": "v0.60.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quic-go/webtransport-go",
            "direct": false,
            "version": "v0.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rogpeppe/go-internal",
            "direct": false,
            "version": "v1.12.0",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/bbolt",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/mux",
            "direct": false,
            "version": "v1.5.3",
            "ecosystem": "go"
          },
          {
            "name": "go.sia.tech/web",
            "direct": false,
            "version": "v0.0.0-20240610131903-5611d44a533e",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.54.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.48.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 36,
        "direct_count": 18,
        "indirect_count": 18
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 542,
        "open_issues": 36,
        "closed_ratio": 0.891,
        "closed_issues": 293,
        "closed_unmerged_prs": 69
      },
      "bus_factor": 1,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "n8mgr",
          "commits": 1481,
          "avatar_url": "https://avatars.githubusercontent.com/u/5544150?v=4"
        },
        {
          "type": "User",
          "login": "n8maninger",
          "commits": 358,
          "avatar_url": "https://avatars.githubusercontent.com/u/233170665?v=4"
        },
        {
          "type": "User",
          "login": "ChrisSchinnerl",
          "commits": 174,
          "avatar_url": "https://avatars.githubusercontent.com/u/3903476?v=4"
        },
        {
          "type": "User",
          "login": "alexfreska",
          "commits": 37,
          "avatar_url": "https://avatars.githubusercontent.com/u/1412796?v=4"
        },
        {
          "type": "User",
          "login": "peterjan",
          "commits": 24,
          "avatar_url": "https://avatars.githubusercontent.com/u/684818?v=4"
        },
        {
          "type": "User",
          "login": "chris124567",
          "commits": 15,
          "avatar_url": "https://avatars.githubusercontent.com/u/26444923?v=4"
        },
        {
          "type": "User",
          "login": "bustedware",
          "commits": 13,
          "avatar_url": "https://avatars.githubusercontent.com/u/7598211?v=4"
        },
        {
          "type": "User",
          "login": "timrettop",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/434913?v=4"
        },
        {
          "type": "User",
          "login": "Alrighttt",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/36680730?v=4"
        },
        {
          "type": "User",
          "login": "SAHU-01",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/71656941?v=4"
        }
      ],
      "contributors_sampled": 15,
      "top_contributor_share": 0.691
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "main.yml",
        "openapi-sync.yml",
        "prepare-release.yml",
        "project-add.yml",
        "publish.yml",
        "ui.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 8,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 4,
            "reason": "Found 4/9 approved changesets -- score normalized to 4",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 4 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 7,
            "reason": "dependency not pinned by hash detected -- score normalized to 7",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 7,
            "reason": "3 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "ca5b3e6bb363a804d1a80473c80a5438196d544b",
        "ran_at": "2026-07-26T06:03:33Z",
        "aggregate_score": 6.3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-22T20:04:22Z",
      "oldest_open_prs": [
        {
          "number": 975,
          "created_at": "2026-07-08T12:48:32Z",
          "last_comment_at": "2026-07-08T12:48:48Z",
          "last_comment_author": "socket-security"
        }
      ],
      "last_merged_pr_at": "2026-07-21T08:53:31Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 52,
          "created_at": "2023-05-24T14:05:52Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 59,
          "created_at": "2023-05-26T18:51:09Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 62,
          "created_at": "2023-05-29T18:25:22Z",
          "last_comment_at": "2023-05-30T14:10:14Z",
          "last_comment_author": "alexfreska"
        },
        {
          "number": 74,
          "created_at": "2023-06-10T15:49:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 75,
          "created_at": "2023-06-10T16:43:53Z",
          "last_comment_at": "2023-06-10T16:45:22Z",
          "last_comment_author": "rdwild"
        },
        {
          "number": 85,
          "created_at": "2023-06-16T18:26:45Z",
          "last_comment_at": "2025-12-02T23:31:56Z",
          "last_comment_author": "alexfreska"
        },
        {
          "number": 104,
          "created_at": "2023-07-10T14:00:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 196,
          "created_at": "2023-10-22T16:38:56Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 235,
          "created_at": "2023-12-14T18:26:51Z",
          "last_comment_at": "2025-03-17T15:06:48Z",
          "last_comment_author": "serveriukai"
        },
        {
          "number": 275,
          "created_at": "2024-01-18T19:49:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 292,
          "created_at": "2024-02-04T06:01:12Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 305,
          "created_at": "2024-02-15T05:23:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 348,
          "created_at": "2024-03-27T14:42:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 376,
          "created_at": "2024-05-01T17:35:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 398,
          "created_at": "2024-05-22T13:50:33Z",
          "last_comment_at": "2024-08-02T14:28:22Z",
          "last_comment_author": "n8mgr"
        },
        {
          "number": 424,
          "created_at": "2024-07-01T16:25:22Z",
          "last_comment_at": "2025-04-09T18:03:01Z",
          "last_comment_author": "alexfreska"
        },
        {
          "number": 589,
          "created_at": "2025-01-27T11:18:02Z",
          "last_comment_at": "2025-02-04T15:56:56Z",
          "last_comment_author": "npelov"
        },
        {
          "number": 597,
          "created_at": "2025-02-10T14:39:12Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 642,
          "created_at": "2025-04-06T08:12:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 653,
          "created_at": "2025-04-15T13:26:55Z",
          "last_comment_at": "2025-12-03T22:28:00Z",
          "last_comment_author": "alexfreska"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/SiaFoundation/hostd",
    "host": "github.com",
    "name": "hostd",
    "owner": "SiaFoundation"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 74,
      "inputs": {
        "security": 67,
        "vitality": 95,
        "community": 57,
        "governance": 71,
        "engineering": 76
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 95,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "commits_last_year": 336,
              "human_commit_share": 0.77,
              "days_since_last_push": 4,
              "active_weeks_last_year": 49
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "49/52 weeks with commits",
                "points": 33.9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 49
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "336 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 336
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 94,
              "latest_release_tag": "v2.10.2",
              "releases_from_tags": false,
              "days_since_latest_release": 13,
              "mean_days_between_releases": 14.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "94 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 94
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 13 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 13
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~14.7 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 14.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 13,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 13 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 13
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 57,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 45,
            "inputs": {
              "forks": 27,
              "stars": 69,
              "watchers": 6,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "69 stars",
                "points": 29.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 69
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "27 forks",
                "points": 11.8,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 27
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "6 watchers",
                "points": 3.9,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 71,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 15,
              "top_contributor_share": 0.691
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 69% of commits",
                "points": 7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 69
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "15 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "merged_prs": 542,
              "open_issues": 36,
              "closed_issues": 293,
              "issue_closed_ratio": 0.891,
              "closed_unmerged_prs": 69
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "89% of issues closed",
                "points": 41.7,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 89
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "542/611 decided PRs merged",
                "points": 33.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 542,
                      "decided": 611
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 4/9 approved changesets -- score normalized to 4",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 73,
            "inputs": {
              "followers": 320,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "SiaFoundation",
              "public_repos": 69,
              "account_age_days": 2133
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "320 followers of SiaFoundation",
                "points": 18,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 320,
                      "login": "SiaFoundation"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "69 public repos, account ~5 yr old",
                "points": 24.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 69
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 5
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "go.sia.tech/hostd/v2"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 13
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 13 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 13
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "62 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 62
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 76,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "6 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "blockchain",
                "decentralized-storage",
                "golang",
                "storage",
                "hacktoberfest"
              ],
              "has_wiki": false,
              "homepage": "https://sia.tech/software/hostd",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://sia.tech/software/hostd",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 67,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 63,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 6.3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 4/9 approved changesets -- score normalized to 4",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 7",
                "points": 3.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "3 existing vulnerabilities detected",
                "points": 5.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 36 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 36
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 85,
            "inputs": {
              "source": "osv",
              "advisories": 3,
              "affected_packages": 2,
              "assessed_packages": 36,
              "unassessed_packages": 0,
              "affected_by_severity": "unknown 2",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: github.com/aws/aws-sdk-go v1.55.8 (unknown)",
                "points": 26.6,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "github.com/aws/aws-sdk-go v1.55.8 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 1625 days ago",
                "points": 37.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 1625
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 36,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 12
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 58,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 12,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.234,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "18 of 77 human commits state their intent (structured subject or explanatory body)",
                "points": 12.5,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 18,
                      "sampled": 77
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.01,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.15
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "1 of the last 100 commits agent-authored or agent-credited",
                "points": 2,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "15 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 15,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 7",
                "points": 7,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 86751,
              "source_files_sampled": 135,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/135 source files over 60KB",
                "points": 53.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 135,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": false,
              "api_schema_files": [
                "openapi.yml"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "openapi.yml",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "openapi.yml"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T06:03:54.130373Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/SiaFoundation/hostd.svg",
  "full_name": "SiaFoundation/hostd",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsGo.