TykTechnologies/graphql-go-tools holds a health index of 44 out of 100, placing it in the Weak band. It scores highest on AI Readiness (68/100) and lowest on Community & Adoption (28/100). It was last updated 40 days ago. A single contributor accounts for most of its recent work.
44
overall / 100
Weak
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
44
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 46 is calibrated to 44 on the published index scale (record calibration 2026-08-02).
Direct dependencies free of known advisories — 3 affected: github.com/buger/jsonparser 1.1.1 (high 7.5), github.com/eclipse/paho.mqtt.golang 1.2.0 (moderate 5.3), github.com/vektah/gqlparser/v2 2.5.1 (moderate 5.3)
0/25
Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
27.5/40
No advisories left outstanding — 3 advisory-carrying package(s) unaddressed past 90 days; oldest published 782 days ago
Inputs used
source
osv
advisories
89
affected_packages
12
assessed_packages
116
unassessed_packages
0
affected_by_severity
critical 1, high 5, moderate 3, unknown 3
direct_affected_packages
3
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 116 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Community profile unavailable
More detail
Star and fork history 0 ★ / 5 ⇿
0Stars
5Forks
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Each point covers 4 days.
OpenSSF Scorecard 4.1 / 10
4.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-08-04 05:55 UTC
Full resolved dependency set from the GitHub dependency graph: 41 direct and 75 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Go
github.com/99designs/gqlgen
0.17.20
direct
Go
github.com/99designs/gqlgen
0.17.22
direct
Go
github.com/andybalholm/brotli
1.1.0
direct
Go
github.com/buger/jsonparser
1.1.1
direct
Go
github.com/cespare/xxhash/v2
2.1.2
direct
Go
github.com/coder/websocket
1.8.12
direct
Go
github.com/dave/jennifer
1.4.0
direct
Go
github.com/davecgh/go-spew
1.1.1
direct
Go
github.com/eclipse/paho.mqtt.golang
1.2.0
direct
Go
github.com/evanphx/json-patch/v5
5.1.0
direct
Go
github.com/go-test/deep
1.0.8
direct
Go
github.com/gobwas/ws
1.0.4
direct
Go
github.com/golang/mock
1.6.0
direct
Go
github.com/google/go-cmp
0.5.8
direct
Go
github.com/google/uuid
1.1.1
direct
Go
github.com/gorilla/websocket
1.5.0
direct
Go
github.com/hashicorp/go-multierror
1.1.1
direct
Go
github.com/hashicorp/golang-lru
0.5.4
direct
Go
github.com/iancoleman/strcase
0.2.0
direct
Go
github.com/ibm/sarama
1.42.1
direct
Go
github.com/jensneuse/abstractlogger
0.0.4
direct
Go
github.com/jensneuse/byte-template
0.0.0-20200214152254-4f3cf06e5c68
direct
Go
github.com/jensneuse/diffview
1.0.0
direct
Go
github.com/jensneuse/pipeline
0.0.0-20200117120358-9fb4de085cd6
direct
Go
github.com/mitchellh/go-homedir
1.1.0
direct
Go
github.com/ory/dockertest/v3
3.10.0
direct
Go
github.com/pkg/errors
0.9.1
direct
Go
github.com/r3labs/sse/v2
2.8.1
direct
Go
github.com/santhosh-tekuri/jsonschema/v5
5.3.0
direct
Go
github.com/sebdah/goldie
0.0.0-20180424091453-8784dd1ab561
direct
Go
github.com/sebdah/goldie/v2
2.5.3
direct
Go
github.com/spf13/cobra
0.0.5
direct
Go
github.com/spf13/viper
1.3.2
direct
Go
github.com/stretchr/testify
1.7.1
direct
Go
github.com/stretchr/testify
1.8.4
direct
Go
github.com/tidwall/gjson
1.11.0
direct
Go
github.com/tidwall/sjson
1.0.4
direct
Go
github.com/vektah/gqlparser/v2
2.5.1
direct
Go
go.uber.org/atomic
1.9.0
direct
Go
go.uber.org/zap
1.18.1
direct
Go
gopkg.in/yaml.v2
2.4.0
direct
Go
dario.cat/mergo
1.0.2
indirect
Go
github.com/agnivade/levenshtein
1.1.1
indirect
Go
github.com/azure/go-ansiterm
0.0.0-20230124172434-306776ec8161
indirect
Go
github.com/cenkalti/backoff/v4
4.1.3
indirect
Go
github.com/containerd/continuity
0.3.0
indirect
Go
github.com/docker/cli
28.4.0+incompatible
indirect
Go
github.com/docker/docker
28.4.0+incompatible
indirect
Go
github.com/docker/go-connections
0.4.0
indirect
Go
github.com/docker/go-units
0.4.0
indirect
Go
github.com/eapache/go-resiliency
1.4.0
indirect
Go
github.com/eapache/go-xerial-snappy
0.0.0-20230731223053-c322873962e3
indirect
Go
github.com/eapache/queue
1.1.0
indirect
Go
github.com/fsnotify/fsnotify
1.4.9
indirect
Go
github.com/go-viper/mapstructure/v2
2.4.0
indirect
Go
github.com/gobwas/httphead
0.0.0-20180130184737-2c6c146eadee
indirect
Go
github.com/gobwas/pool
0.2.0
indirect
Go
github.com/golang/snappy
0.0.4
indirect
Go
github.com/google/shlex
0.0.0-20191202100458-e7afc7fbc510
indirect
Go
github.com/hashicorp/errwrap
1.0.0
indirect
Go
github.com/hashicorp/go-uuid
1.0.3
indirect
Go
github.com/hashicorp/hcl
1.0.0
indirect
Go
github.com/huandu/xstrings
1.2.1
indirect
Go
github.com/imdario/mergo
0.3.12
indirect
Go
github.com/inconshreveable/mousetrap
1.0.0
indirect
Go
github.com/jcmturner/aescts/v2
2.0.0
indirect
Go
github.com/jcmturner/dnsutils/v2
2.0.0
indirect
Go
github.com/jcmturner/gofork
1.7.6
indirect
Go
github.com/jcmturner/gokrb5/v8
8.4.4
indirect
Go
github.com/jcmturner/rpc/v2
2.0.3
indirect
Go
github.com/klauspost/compress
1.16.7
indirect
Go
github.com/lib/pq
1.10.6
indirect
Go
github.com/logrusorgru/aurora/v3
3.0.0
indirect
Go
github.com/magiconair/properties
1.8.0
indirect
Go
github.com/masterminds/goutils
1.1.1
indirect
Go
github.com/masterminds/semver
1.5.0
indirect
Go
github.com/masterminds/sprig
2.22.0+incompatible
indirect
Go
github.com/mattn/go-colorable
0.1.13
indirect
Go
github.com/mattn/go-isatty
0.0.16
indirect
Go
github.com/microsoft/go-winio
0.6.0
indirect
Go
github.com/mitchellh/copystructure
1.0.0
indirect
Go
github.com/mitchellh/mapstructure
1.3.1
indirect
Go
github.com/mitchellh/mapstructure
1.5.0
indirect
Go
github.com/mitchellh/reflectwalk
1.0.0
indirect
Go
github.com/moby/docker-image-spec
1.3.1
indirect
Go
github.com/moby/term
0.0.0-20201216013528-df9cb8a40635
indirect
Go
github.com/nvveen/gotty
0.0.0-20120604004816-cd527374f1e5
indirect
Go
github.com/opencontainers/go-digest
1.0.0
indirect
Go
github.com/opencontainers/image-spec
1.0.2
indirect
Go
github.com/opencontainers/runc
1.1.5
indirect
Go
github.com/pelletier/go-toml
1.6.0
indirect
Go
github.com/pierrec/lz4/v4
4.1.18
indirect
Go
github.com/pmezard/go-difflib
1.0.0
indirect
Go
github.com/rcrowley/go-metrics
0.0.0-20201227073835-cf1acfcdf475
indirect
Go
github.com/rogpeppe/go-internal
1.11.0
indirect
Go
github.com/rs/cors
1.7.0
indirect
Go
github.com/sergi/go-diff
1.1.0
indirect
Go
github.com/sirupsen/logrus
1.8.1
indirect
Go
github.com/spf13/afero
1.1.2
indirect
Go
github.com/spf13/cast
1.3.0
indirect
Go
github.com/spf13/jwalterweatherman
1.0.0
indirect
Go
github.com/spf13/pflag
1.0.3
indirect
Go
github.com/tidwall/match
1.1.1
indirect
Go
github.com/tidwall/pretty
1.2.0
indirect
Go
github.com/xeipuuv/gojsonpointer
0.0.0-20190809123943-df4f5c81cb3b
indirect
Go
github.com/xeipuuv/gojsonreference
0.0.0-20180127040603-bd5ef7bd5415
indirect
Go
github.com/xeipuuv/gojsonschema
1.2.0
indirect
Go
go.uber.org/multierr
1.6.0
indirect
Go
golang.org/x/crypto
0.18.0
indirect
Go
golang.org/x/mod
0.9.0
indirect
Go
golang.org/x/net
0.17.0
indirect
Go
golang.org/x/sys
0.16.0
indirect
Go
golang.org/x/text
0.14.0
indirect
Go
golang.org/x/tools
0.7.0
indirect
Go
gopkg.in/cenkalti/backoff.v1
1.1.0
indirect
Go
gopkg.in/yaml.v3
3.0.1
indirect
Dependency advisories 12
This repository publishes no package the index resolves, so its own dependency graph was assessed — 116 packages, which also include development and test pins that never ship: 12 carry known advisories, of which 3 are direct.
Package
Version
Relation
Severity
Advisories
Fixed in
golang.org/x/crypto
0.18.0
indirect
critical
36
0.52.0
github.com/buger/jsonparser
1.1.1
direct
high
2
1.1.2
github.com/docker/cli
28.4.0+incompatible
indirect
high
2
29.2.0+incompatible
github.com/docker/docker
28.4.0+incompatible
indirect
high
10
29.3.1
github.com/opencontainers/runc
1.1.5
indirect
high
12
1.13.0
github.com/sirupsen/logrus
1.8.1
indirect
high
2
1.9.3
github.com/eclipse/paho.mqtt.golang
1.2.0
direct
moderate
2
1.5.1
github.com/vektah/gqlparser/v2
2.5.1
direct
moderate
2
2.5.14
golang.org/x/net
0.17.0
indirect
moderate
18
1.26.3
github.com/klauspost/compress
1.16.7
indirect
unknown
1
1.18.7
golang.org/x/sys
0.16.0
indirect
unknown
1
0.44.0
golang.org/x/text
0.14.0
indirect
unknown
1
0.39.0
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 23016,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 8310927,
"HTML": 3358,
"Shell": 3050,
"Makefile": 1780,
"JavaScript": 480714
},
"pushed_at": "2026-06-24T14:13:11Z",
"created_at": "2019-04-16T10:52:56Z",
"owner_type": "Organization",
"updated_at": "2026-07-29T15:06:27Z",
"description": "graphql golang go parser lexer linter proxy",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://tyk.io",
"name": "Tyk Technologies",
"type": "Organization",
"login": "TykTechnologies",
"company": null,
"location": "London",
"followers": 229,
"avatar_url": "https://avatars.githubusercontent.com/u/16121529?v=4",
"created_at": "2015-12-02T16:44:37Z",
"is_verified": null,
"public_repos": 250,
"account_age_days": 3897
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2019-04-08T06:53:10Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2019-04-07T16:03:33Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2019-04-01T19:04:02Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2019-03-24T17:37:44Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2019-03-18T07:58:41Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2019-03-06T07:41:48Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2019-03-06T07:41:48Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2019-03-06T07:37:20Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2019-03-06T06:43:17Z"
},
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2019-03-02T13:29:09Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2019-03-02T12:09:55Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2019-03-02T13:29:09Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2019-02-20T08:29:27Z"
}
],
"recent_commits": [
{
"oid": "dae0d8d8d0389e10f42476f31d0840835ed125e7",
"body": "… (#447)\n\n## Description\n\nFixes a regression introduced by #446 ([TT-17442] *Upstream WebSocket\nconnection reuse ignores per-request auth headers*).\n\nThat change wrapped the subscription executor's execution context in a\n`mergedContext` whose `Value()` resolved from the original\nwebsocket-upgrade re\n[…]\nyet; paired with the Tyk gateway go.mod bump PR.\n\n[TT-17442]:\nhttps://tyktech.atlassian.net/browse/TT-17442?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-17578] Stop leaking websocket request context into engine fetches…",
"author_name": "Matias",
"author_login": "mativm02",
"committed_at": "2026-06-24T14:13:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c7048b604e166b59b6da4f05a163d2f95e0e9949",
"body": "…th headers (#446)",
"is_bot": false,
"headline": "[TT-17442] Upstream WebSocket connection reuse ignores per-request au…",
"author_name": "Maciej Miś",
"author_login": "MaciekMis",
"committed_at": "2026-06-10T09:34:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abfe5c458f3b73a324ce1ba3c4b4c8bb489ae5d1",
"body": "This PR fixes validation and resolution issues with custom scalars in\nGraphQL operations. Previously, custom scalars were incorrectly treated\nas built-in String scalars during validation, requiring\nstring values and throwing validation errors for other types. The\nchanges allow custom scalars to acce\n[…]\nm scalar arguments can be provided\nas both integers and strings, ensuring flexibility in how\n custom scalars are used across the codebase.\n\n---------\n\nCo-authored-by: Amit Inbar <inamit323@gmail.com>",
"is_bot": false,
"headline": "Fix/allow custom scalars extended (#443)",
"author_name": "andrei-tyk",
"author_login": "andrei-tyk",
"committed_at": "2025-11-04T07:47:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7bece90c2529f4dec1f222617669756e2caadfe2",
"body": "<!---TykTechnologies/jira-linter starts here-->\n\n### Ticket Details\n\n<details>\n<summary>\n<a href=\"https://tyktech.atlassian.net/browse/TT-15867\" title=\"TT-15867\"\ntarget=\"_blank\">TT-15867</a>\n</summary>\n\n| | |\n|---------|----|\n| Status | In Code Review |\n| Summary | Rollout the tool across repositories |\n\nGenerated at: 2025-10-20 11:40:09\n\n</details>\n\n<!---TykTechnologies/jira-linter ends here-->",
"is_bot": false,
"headline": "[TT-15867] rollout new Jira linter (#442)",
"author_name": "bsten-tyk",
"author_login": "bsten-tyk",
"committed_at": "2025-10-21T11:31:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c54e73aae17d143de6659472a1fcbf371b4a0770",
"body": null,
"is_bot": false,
"headline": "[TT-15718] [5.10.0] Review and address GW & Dash CVEs (#441)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2025-09-26T10:20:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ede4890a639ce2efdc761400529119299590f44",
"body": null,
"is_bot": false,
"headline": "[TT-15111] Added visor code review (#440)",
"author_name": "Laurentiu",
"author_login": "lghiur",
"committed_at": "2025-09-23T09:43:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c376584786dbe3eca70cdcedc15ecad0e7a4058d",
"body": null,
"is_bot": false,
"headline": "fix examples and pipeline (#438)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2025-06-16T09:00:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8e1ade2da8ecd5b85065c3e8c9364057d6b173c",
"body": "[TT-13740](https://tyktech.atlassian.net/browse/TT-13740)\n\n[TT-13740]:\nhttps://tyktech.atlassian.net/browse/TT-13740?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-13740]: exposed field to enable post graphql-sse in proxy (#437)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2025-06-06T09:13:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f5c911898967034f85a341f98113f2ea53b4866",
"body": "…es (#436)\n\n[TT-14582](https://tyktech.atlassian.net/browse/TT-14582)\n\n[TT-14582]:\nhttps://tyktech.atlassian.net/browse/TT-14582?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-14582]: Fix issue with arguments not being extracted for interfac…",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2025-05-27T12:13:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "331bc08d14809399615c40eab9477ba9046e696c",
"body": "[TT-13924](https://tyktech.atlassian.net/browse/TT-13924)\n\n[TT-13924]:\nhttps://tyktech.atlassian.net/browse/TT-13924?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-13924]: fix issue where kafka datasource expects data (#435)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2025-05-15T12:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7724a3b64bb27a4b59f92cab92698ee9bc2340c9",
"body": "PR for https://tyktech.atlassian.net/browse/TT-13608 \r\n\r\nAn analysis can be found here:\r\nhttps://tyktech.atlassian.net/browse/TT-13608?focusedCommentId=90515\r\n\r\nBasically, input coercion for list visitor has been failing to infer the\r\ntype of a node in the GQL operation and leaves the variable as-is\n[…]\ne type in the `variables` JSON was an `object`.\r\n\r\nInferring variable definition by its name not the value fixes the\r\nproblem.\r\n\r\nI didn't copied the fix to `v2` folder because it already has the fix.",
"is_bot": false,
"headline": "[TT-13608] Issues with custom scalar in query variable (#434)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-12-12T11:02:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6eca9f4b5e302f1c7181dbab6ab1e8b05920b2bc",
"body": "nhooyr.io/websocket has changed to github.com/coder/websocket and this\r\ncan cause dependency issues.",
"is_bot": false,
"headline": "change nhooyr.io/websocket to github.com/coder/websocket (#433)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2024-09-26T10:30:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae6008677a48dec3444d7bc7097bda05542f0d80",
"body": "See https://tyktech.atlassian.net/browse/TT-12503 and\r\nhttps://tyktech.atlassian.net/browse/TT-12313 for detailed description\r\nof the problem.\r\n\r\nNow, we render the following variables as a String.\r\n* String\r\n* NotExist\r\n* Unknown\r\n\r\ngraphql-go-tools assigns `NotExists` type to `ID` type. ID type should\r\nbe rendered as String.\r\n\r\nRelated part of the spec: https://spec.graphql.org/October2021/#sec-ID",
"is_bot": false,
"headline": "[TT-12503] Render ID type as a String (#432)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-07-05T06:59:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "107208df747e5a4b31bfe9a2d2848ef277ed5a5b",
"body": "PR for [TT-9864](https://tyktech.atlassian.net/browse/TT-9864).\r\n\r\nAfter reading a lot of code, trying different solutions and measuring\r\nthem, I decided to go with the simplest solution.\r\n\r\nI used `sync.Pool` for reusing `ast.Document` instances and added a\r\n`Cleanup` method to `Request` struct to \n[…]\ntion code leads to bugs and breaks the tests.\r\n\r\n\r\n[TT-9864]:\r\nhttps://tyktech.atlassian.net/browse/TT-9864?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-9864] Optimize the creation usage of AST documents (#431)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-06-14T11:12:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "59aa3f44f12eb0a621152fdaf2c0847174b3e2b5",
"body": "…to one big string by engine (#430)\n\nThis PR fixes [TT-12313](https://tyktech.atlassian.net/browse/TT-12313)\r\nand [TT-12222](https://tyktech.atlassian.net/browse/TT-12222).\r\n\r\n**TT-12313:**\r\n\r\nVariables in an input template were evaluating as strings by default. It\r\nmay produce invalid JSON as rende\n[…]\n5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ\r\n[TT-12222]:\r\nhttps://tyktech.atlassian.net/browse/TT-12222?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-12313] UDG APIs - Array of strings in variables gets transformed …",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-06-07T10:48:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f9fa4a18e042f8f7da244bca7ed2ae6ac2ec4f19",
"body": "This PR fixes an issue when a nested data source is lonely.\r\n\r\nIt is built on top of @buraksezer 's research.\r\n\r\nHow does it work?\r\n\r\nThe GraphQL data source planner has been slightly modified and will\r\nbefore printing the upstream query check for fields that require\r\nselections.\r\n\r\nExample:\r\n```\r\n{\n[…]\nhe\r\nselections and will therefore add the `__typename` selection field. This\r\nwill result in following upstream query:\r\n```\r\n{ countries { __typename } }\r\n```\r\n\r\nWith that the upstream is valid again.",
"is_bot": false,
"headline": "should resolve with a nested lonely data source (TT-9884) (#429)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2024-05-14T11:01:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e95cdc317e1d2dc7cdcd9b93d960c5ceecb5b0f8",
"body": "This PR adds the rest datasource to the v2/ of the engine, it also\r\nincludes some changes to ensure it works with the new v2 engine, these\r\nchanges will need to be reflected in the apidef being passed to the\r\nengine\r\n\r\n[TT-10292](https://tyktech.atlassian.net/browse/TT-10291)\r\n\r\n[TT-10292]:\r\nhttps://tyktech.atlassian.net/browse/TT-10292?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-10292]: Add rest datasource (#427)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2024-05-09T08:56:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27642576e0c2ba026ea787ddc043da00d8d847b8",
"body": "See the ticket: https://tyktech.atlassian.net/browse/TT-11684",
"is_bot": false,
"headline": "[TT-11684] Remove OpenAPI and AsyncAPI from the library (#426)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-03-25T09:51:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b464dd4dc1cea3c715c15d574f6ab039c9ca898e",
"body": "- https://github.com/wundergraph/graphql-go-tools/pull/667\r\n - https://github.com/wundergraph/graphql-go-tools/pull/671\r\n - https://github.com/wundergraph/graphql-go-tools/pull/675\r\n - https://github.com/wundergraph/graphql-go-tools/pull/672\r\n - https://github.com/wundergraph/graphql-go-tools/pull/6\n[…]\ny <818351+devsergiy@users.noreply.github.com>\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>\r\nCo-authored-by: Nithin Kumar B <nithinkumar5353@gmail.com>\r\nCo-authored-by: spetrunin <neyasut@gmail.com>",
"is_bot": false,
"headline": "sync changes from wg (#422)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2024-03-15T09:53:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c97832a5054b8be3b438b2b9eeeffd6ae53fc8ce",
"body": "… section (#425)\n\nThis PR fixes TT-11295. The problem was not related to the Persist GQL\r\nfeature. The library fails to validate a specifically crafted query in\r\nwhich variables are not defined in the operation.\r\n\r\nAn example query: \r\n\r\n```graphql\r\nquery Analytics ($startMonth: String, $startYear: S\n[…]\n\"Variable \\\"$startDay\\\" is not defined by operation \\\"Analytics\\\"\",\r\n \"locations\": [\r\n {\r\n \"line\": 6,\r\n \"column\": 15\r\n }\r\n ],\r\n \"path\": [\r\n \"query\",\r\n \"analytics\"\r\n ]\r\n}\r\n```",
"is_bot": false,
"headline": "[TT-11295] Gateway Panics when arguments are not defined in operation…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-03-07T09:42:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "47bc0f5043b5070a9655247953ac2aea8927c540",
"body": "See https://github.com/TykTechnologies/graphql-go-tools/pull/423 for\r\ndetails.",
"is_bot": false,
"headline": "[TT-11249] Copy changes to v2 folder (#424)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-02-16T09:33:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e686bd5a564d9061f9d2e7dec744fee14749e226",
"body": "This PR fixes bad handling of responses if an HTTP status code range and\r\nexplicit code definition are used at the same time. The OpenAPI\r\nspecification is clear about this:\r\n\r\n> To define a range of response codes, you may use the following range\r\ndefinitions: 1XX, 2XX, 3XX, 4XX, and 5XX. If a resp\n[…]\n. This behavior is borrowed from IBM/openapi-to-graphql tool.\r\n\r\nThis PR also removes redundant and useless code in response handling. \r\n\r\nThe changes will be copied to the `v2` folder after approval.",
"is_bot": false,
"headline": "[TT-11249] OAS-to-GQL translator adds the same field many times (#423)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-02-16T08:42:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1cf3310b87c4708b62f53428cf6ed8f3e22dd856",
"body": "PR for https://tyktech.atlassian.net/browse/TT-11069\r\n\r\nThis update extends the handling of status codes in OpenAPI testing by\r\nincluding support for status code ranges. The implementation converts\r\nranges to status codes in integer type and can also convert a status\r\ncode to a range.\r\n\r\nThe changes will be copied to the `v2` folder after approval.",
"is_bot": false,
"headline": "[TT-11069] Add support for status code ranges in OpenAPI (#421)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-02-09T08:57:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40a1ee2bbfc3375d0ce5817daed408ff2ba225c1",
"body": "This PR adds brotli encoding/decoding support",
"is_bot": false,
"headline": "add brotli support (#418)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2024-01-31T15:15:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22ed2790bcf86ef326dcbf85b457b5a40414e92f",
"body": null,
"is_bot": false,
"headline": "upgrade to go 1.21 (TT-11072) (#417)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2024-01-30T09:06:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "303ac77492c518c3e611149d7a6485cb4e583834",
"body": "Tyk GW uses `github.com/iancoleman/strcase v0.3.0` but graphql-go-tools\r\nuses version `v0.2.0`. The OpenAPI translator uses the `strcase.ToCamel`\r\nmethod to process type names. This method in the newer version converts\r\n`JSON` to `Json`, while the older version doesn't do that. It simply\r\nreturns th\n[…]\neman/strcase` to `v0.3.0` from `v0.2.0` for\r\ncompatibility. I do not prefer to do that in this PR because different\r\ncomponents of the library depend on it. It should be handled in a\r\ndifferent story.",
"is_bot": false,
"headline": "[TT-11071] OAS converter fails when return type is JSON (#416)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-01-25T12:26:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "385ba43daaa4f16200cb3746318ce8dd234a560b",
"body": "OAS converter now handles `allOf`, `anyOf`, and `oneOf` keywords.\r\nDocumentation can be found here:\r\nhttps://swagger.io/docs/specification/data-models/oneof-anyof-allof-not/\r\n\r\n- Related test fixtures start with `allOf`, `anyOf`, and `oneOf`\r\nprefixes.\r\n- IBM/openapi-to-graphql tool has been used to\n[…]\n\r\n- A bug in field name generation has also been fixed. We can now convert\r\nthis to a field name: `/pets/{id}/foobar` -> `petsFoobar(id: Int!):\r\nPetsFoobar`. See `anyOf-query-response-type.yaml` file.",
"is_bot": false,
"headline": "[TT-10908] OAS Converter to handle allOf/anyOf/oneOf keywords (#415)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-01-19T12:14:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "64014317f1158d86c8a0103adf08d84eb01d49f8",
"body": "refactoring work and adding testing from this PR \r\n\r\nhttps://github.com/TykTechnologies/graphql-go-tools/pull/413",
"is_bot": false,
"headline": "Add testing is validated (#414)",
"author_name": "Shakira Salazar",
"author_login": "rhianeKobar",
"committed_at": "2024-01-15T15:45:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a93c64d8b8be8ae7b945b8bfef3e434625762e2",
"body": "In this PR we're modifying IsValidate to check validation using the\r\nvalidForSchema attribute",
"is_bot": false,
"headline": "Modify IsValidated (#413)",
"author_name": "Shakira Salazar",
"author_login": "rhianeKobar",
"committed_at": "2024-01-12T13:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57c14ff89cf16e1ca6705ad231ead842e3030c57",
"body": "This PR\r\n\r\n modifies the Request.go file to:\r\n add isValidated boolean attribute to the request struct\r\n add the IsValidated method to return the value of isValidated\r\n \r\nmodifies the validation.go file to: \r\nset isValidated to true\r\n\r\n\r\n\r\nThis is being done to simplify removing normalization and validation\r\nfrom the graphql engine in the gateway.",
"is_bot": false,
"headline": "add is validated attribute and method to request (#412)",
"author_name": "Shakira Salazar",
"author_login": "rhianeKobar",
"committed_at": "2024-01-10T09:12:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92655e8c2e963252c0e5a742925d0bc0d536e763",
"body": "…roperty (#411)\n\nFixes a bug if an enum field is defined as a component's property. See\r\nhttps://tyktech.atlassian.net/browse/TT-10697?focusedCommentId=48290 for\r\nthe details.",
"is_bot": false,
"headline": "[TT-10697] Handle enum definition if the enum field is defined as a p…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-01-08T12:25:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b817d9b16581d41570bb6de26b514b4f424ccd79",
"body": "…xtures (#410)\n\nThis PR adds a placeholder Query type if there is no query definition in\r\nthe source OpenAPI document. The behavior, including the\r\n`QueryPlaceholder` type name, is borrowed from IBM's openapi-to-graphql\r\ntool.",
"is_bot": false,
"headline": "[TT-10697] Add placeholder Schema and Query to OpenAPI and graphql fi…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-01-05T10:22:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "164871c3da3f7b943b61497bab3f0aca9a6dd3f8",
"body": "See [TT-10697](https://tyktech.atlassian.net/browse/TT-10697) for\r\ndetails.\r\n\r\n[TT-10697]:\r\nhttps://tyktech.atlassian.net/browse/TT-10697?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-10697]OAS converter does not handle enums (#408)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2024-01-03T08:36:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c84f8a68ea178e657ae9a34e173486a3990de6d4",
"body": "This PR splits openapi.go into multiple files.",
"is_bot": false,
"headline": "[TT-10781] Improve code organization in OAS converter (#407)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-12-21T11:34:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f39055b110a14b21ee9cec7e70696bf73062d12",
"body": "PR for [TT-10696](https://tyktech.atlassian.net/browse/TT-10696). \r\n\r\n[TT-10696]:\r\nhttps://tyktech.atlassian.net/browse/TT-10696?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-10696] Handling of objects that do not have any properties (#406)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-12-14T09:09:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7f6f9d1489a6265c27fbd36811e921c856cb7c9",
"body": "…v2 (#405)\n\nThis PR copies the latest OAS converter changes to the `v2` folder. See\r\nhttps://github.com/TykTechnologies/graphql-go-tools/pull/404",
"is_bot": false,
"headline": "[TT-10604] Handling arrays of objects in endpoint responses - engine …",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-30T11:58:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "caa78717a51e0de0c9b2ef29fec61db2702bfa7b",
"body": null,
"is_bot": false,
"headline": "[TT-10604] Handling arrays of objects in endpoint responses (#404)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-30T10:37:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70500778ba665f0b513ab362053b736cc8569d01",
"body": "PR for [TT-10565](https://tyktech.atlassian.net/browse/TT-10565)\r\n\r\n[TT-10565]:\r\nhttps://tyktech.atlassian.net/browse/TT-10565?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-10565] Handle unnamed object definitions in OpenAPI documents (#403)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-21T12:38:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90b772abd0d95c68849c07cd7f45cf3a7ede6b9c",
"body": "…… (#402)\n\nThis pull request copies changes in #401 to v2",
"is_bot": false,
"headline": "[TT-10483] V2 - Handle arrays of objects in OpenAPI documents - compo…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-20T11:35:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d80db1df8c80a6f3945311a2feecab880c8efe37",
"body": "PR for [TT-10483](https://tyktech.atlassian.net/browse/TT-10483)\r\n\r\nOpenAPI-to-GraphQL converter can now create a GraphQL type from an\r\nunnamed object and create an array of that type.\r\n\r\n```yaml\r\ncomponents:\r\n schemas:\r\n Cart:\r\n type: object\r\n properties:\r\n id:\r\n type:\n[…]\n//github.com/IBM/openapi-to-graphql)\r\ntool.\r\n\r\n\r\n[TT-10483]:\r\nhttps://tyktech.atlassian.net/browse/TT-10483?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-10483] Handle arrays of objects in OpenAPI documents (#401)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-20T11:05:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fb1b9df08ae173a302f6585defca1096435ac293",
"body": "Co-authored-by: Sergiy <818351+devsergiy@users.noreply.github.com>\r\nCo-authored-by: Masanori Uehara <jack16.m.u@gmail.com>\r\nCo-authored-by: spetrunin <neyasut@gmail.com>\r\nCo-authored-by: Alberto García Hierro <alberto@garciahierro.com>\r\nCo-authored-by: Aenimus <47415099+Aenimus@users.noreply.github.\n[…]\n<darren.nr.west@gmail.com>\r\nCo-authored-by: Adrian Ancona Novelo <soonick5@yahoo.com.mx>\r\nCo-authored-by: Dustin Deus <deusdustin@gmail.com>\r\nCo-authored-by: Nithin Kumar B <nithinkumar5353@gmail.com>",
"is_bot": false,
"headline": "sync v2 engine (#390)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-11-15T09:30:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed6088c3a98b8c8a54550ffde99cb6d15b1ad6c6",
"body": null,
"is_bot": false,
"headline": "[TT-10375] Cleanup (#400)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-10T13:24:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd43acc477c43a04f7c03d284822076a165b754b",
"body": "… (#399)\n\nPR for [TT-10375](https://tyktech.atlassian.net/browse/TT-10375)\r\n\r\n* Upgrade IBM/Sarama to v.1.42.1. This upgrade eliminates one data race.\r\n* Upgrade Kafka to 3.6 and Java to 17, ZooKeeper has been removed from\r\nthe setup. This may eliminate inconsistent behavior of JVM/Kafka on the\r\nDoc\n[…]\nngine.\r\n* Upgrade github.com/ory/dockertest\r\n\r\n\r\n[TT-10375]:\r\nhttps://tyktech.atlassian.net/browse/TT-10375?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-10375] Upgrade Kafka and remove ZooKeeper from integration tests.…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-11-09T12:09:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b73f6691650b54c4637a3aea55aaf6e260b9eaa2",
"body": "This PR fixes an issue where races were occurring in the subscription\r\nbackoff tests.\r\nAlso an issues was fixed where context canceling was not propagated to\r\nthe backoff loop.",
"is_bot": false,
"headline": "fix race issues in subscription backoff (#397)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-11-08T09:18:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27618ae672d3a5604b137802f42be4a08eb17eac",
"body": "[TT-9467](https://tyktech.atlassian.net/browse/TT-9476)\r\n\r\n[TT-9467]:\r\nhttps://tyktech.atlassian.net/browse/TT-9467?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-9467]: added limit for operation in graphql extractor (#396)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-11-06T10:07:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "232e030e051b34606f3776f4e45e10ce00961c6b",
"body": "This PR fixes an issue where it could happen that the OAS converter\r\npicks up a full type without all the details before reaching the full\r\ndefinition. This caused the converter to not pick up descriptions.\r\n\r\nTo fix this I introduced an details cache that only tracks if a detail\r\nis already stored or not.",
"is_bot": false,
"headline": "fix full type details not being able to be updated (#395)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-11-02T13:20:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70819d7e4c9b1b15aebef5bb6d4257a44ba07c05",
"body": "Co-authored-by: Tit Petric <tit@tyk.io>",
"is_bot": false,
"headline": "Replace x/errors with stdlib errors (#393)",
"author_name": "Tit Petric",
"author_login": "titpetric",
"committed_at": "2023-10-17T08:29:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af7119801f712078cf2864ee31b4aab35a6b917f",
"body": "[TT-9882](https://tyktech.atlassian.net/browse/TT-9882)\r\n\r\n[TT-9882]:\r\nhttps://tyktech.atlassian.net/browse/TT-9882?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-9882]: fix typo with subscription error (#392)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-10-12T10:02:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b89bc52fbdca7aae60c82eb8cb9ceaf0c2d2fd91",
"body": "…391)\n\nThis PR closes the connection in the graphql-ws protocol implementation\r\nif the backoff threshold for the subscription execution has been hit",
"is_bot": false,
"headline": "[TT-9882]: close graphql-ws protocol coonnections on error timeout (#…",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-10-12T09:23:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25935825a26a79442bec0d897482a47766ea22cf",
"body": "…… (#389)\n\n…ma (#577)\r\n\r\nSupport it, but require the caller to declare it themselves if they want\r\nto use it.\r\n\r\nReferences https://github.com/wundergraph/wundergraph/issues/985\r\n\r\nAlso, remove a couple of deprecated usages of ioutil\r\n\r\nCo-authored-by: Alberto García Hierro <alberto@garciahierro.com>",
"is_bot": false,
"headline": "fix: don't define the @removeNullVariables directive in the base sche…",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-10-06T12:19:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d449375ae418e6c8dd539c488dbc08886364830",
"body": "This PR updates goutils to 1.1.1 to remove some CVEs",
"is_bot": false,
"headline": "update deps (#388)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-10-05T09:07:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92a3f1d63aeed7e76c80150fbc94084beaf10ebb",
"body": "…case of a dead connection (#387)\n\n[TT-9882](https://tyktech.atlassian.net/browse/TT-9882)\r\n\r\n[TT-9882]:\r\nhttps://tyktech.atlassian.net/browse/TT-9882?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-9882]: added an exponential backoff to the subscription retry in …",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-10-02T08:30:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dacf487168564ffdaffd1766057c135a1991b20",
"body": "This PR upgrades the library to go 1.19 \r\n[TT-8739](https://tyktech.atlassian.net/browse/TT-8739)\r\n\r\n[TT-8739]:\r\nhttps://tyktech.atlassian.net/browse/TT-8739?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-8739]: Chore: upgrade to go 1.19 (#385)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-09-04T13:12:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "212f2d526061c45cfa888a26a67f3fd7d13b8e62",
"body": "[TT-9913](https://tyktech.atlassian.net/browse/TT-9913)\r\n\r\n[TT-9913]:\r\nhttps://tyktech.atlassian.net/browse/TT-9913?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-9913]: Chore: upgrade sarama (#386)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-08-31T14:50:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e529190ac7f339b26432a653c410b58294f1b2e1",
"body": "This PRs removes some race conditions and optimizes subscription tests",
"is_bot": false,
"headline": "optimize subscription tests (#384)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-24T11:38:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8693715386a6b86c016dfbe1755ff03fd71560e0",
"body": "This PR syncs following wg changes:\r\n- https://github.com/wundergraph/graphql-go-tools/pull/547\r\n- https://github.com/wundergraph/graphql-go-tools/pull/554\r\n- https://github.com/wundergraph/graphql-go-tools/pull/555\r\n- https://github.com/wundergraph/graphql-go-tools/pull/556\r\n- https://github.com/wu\n[…]\neuse@gmx.de>\r\nCo-authored-by: Alberto García Hierro <alberto@garciahierro.com>\r\nCo-authored-by: Aenimus <47415099+Aenimus@users.noreply.github.com>\r\nCo-authored-by: David Stutt <david@wundergraph.com>",
"is_bot": false,
"headline": "sync wg changes (#383)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-22T12:03:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e336e7b71d6071efa9217f087fcba998ac48bfcd",
"body": "This PR adds a header modifier post processor.",
"is_bot": false,
"headline": "add header modifier post processor (#379)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-17T12:43:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72a7dd46b805e83282f0d68a286e16560406a690",
"body": "…#378)\n\nThis PR makes changes to the VariableValidation package and supports\r\nnested errors as well as validationErrors that make use of $defs and\r\n$refs. It also refactors the format of error messages.\r\n\r\n[TT-8710](https://tyktech.atlassian.net/browse/TT-8710)\r\n\r\n[TT-8710]:\r\nhttps://tyktech.atlassian.net/browse/TT-8710?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-8710]: refactor: better error messages from variable validation (…",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-08-16T14:42:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14e9bde9e643a0a2a35a923e6a2357c902294f83",
"body": "This PR fixes an issue where not all subscriber ids where checked for\r\nduplication.",
"is_bot": false,
"headline": "always check for duplicate subscriber ids (#377)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-10T13:09:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ccf45cc4d11808d92e57ca91fa1bd3d05456ed89",
"body": "This PR allows `pong` as birectional message.",
"is_bot": false,
"headline": "allow pong as bidirectional message (#376)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-10T12:56:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "690b3ba0cef11e470f584055a754859b006e1a82",
"body": "this PR fixes a panic on broken subscription input",
"is_bot": false,
"headline": "fix panic on broken subscription input (#375)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-10T11:33:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "801d4374ae260387af51ab07e250fbe4c5ad627e",
"body": "This PR adds a missing error handling for OnbeforeStart hooks.",
"is_bot": false,
"headline": "add OnBeforeStartHook error handling (#374)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-09T13:12:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "464c6a726a7bf8db864340dbd0983f0b3e6446d2",
"body": "This PR adds the `graphql-transport-ws` websocket protocol.",
"is_bot": false,
"headline": "implement graphql-transport-ws protocol (TT-8005) (#373)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-09T10:32:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e64e52f35eac61419e8f705939c7617897920c56",
"body": "This PR refactors the subscription package. This means:\r\n- current implementation has been `deprecated`. But they are still\r\nusable.\r\n - moved current subscription handler to `legacy_handler.go`\r\n - introduced some interfaces to decouple transport from protocol\r\n- this also means that e.g. a websock\n[…]\nafka transport.\r\n- added a `websocket` package inside the subscription package that takes\r\ncare of the websocket implementation\r\n- also moved the `graphql-ws` implementation to the `websocket` package",
"is_bot": false,
"headline": "refactor subscription package (#367)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-08-09T07:44:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f787e7ab594eb2453ead26053489f23a0d2fc2b3",
"body": "…s fork (#368)\n\nSee [TT-9257](https://tyktech.atlassian.net/browse/TT-9257)\r\n\r\n\r\n\r\n[TT-9257]:\r\nhttps://tyktech.atlassian.net/browse/TT-9257?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ\r\n\r\n---------\r\n\r\nCo-authored-by: Alberto García Hierro <alberto@garciahierro.com>",
"is_bot": false,
"headline": "[TT-9257] Sync WG commits with context changes to our graphql-go-tool…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-08-07T14:26:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfd88c57714afcd5faa37a69e486dfa2d11e9e15",
"body": "- sync wg commit:\r\nhttps://github.com/wundergraph/graphql-go-tools/pull/406\r\n\r\n---------\r\n\r\nCo-authored-by: chedom <domanchukits@gmail.com>\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>\r\nCo-authored-by: Sergey Petrunin <spetrunin@users.noreply.github.com>",
"is_bot": false,
"headline": "add ws init func (TT-9257) (#366)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-07-03T08:38:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7adc3c0fdfaca9b879a98301322018ed7f86efcd",
"body": "This PR updates direct and indirect dependencies\r\n\r\n - updated `github.com/opencontainers/runc` to `1.1.5`\r\n- replaced `nhooyr.io/websocket` with a fork that doesn't include\r\n`github.com/gin-gonic/gin`\r\n - removed `nats-server` entirely",
"is_bot": false,
"headline": "update direct and indirect deps (#362)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-06-29T08:34:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6b3e7666852da298c5f171916102a2927eca5a9",
"body": "This PR adds the following changes from wundergraph:\r\n- https://github.com/wundergraph/graphql-go-tools/pull/534\r\n- https://github.com/wundergraph/graphql-go-tools/pull/538\r\n- https://github.com/wundergraph/graphql-go-tools/pull/540\r\n- https://github.com/wundergraph/graphql-go-tools/pull/543\r\n- http\n[…]\ngo-tools/pull/541\r\n\r\n---------\r\n\r\nCo-authored-by: Sergiy <818351+devsergiy@users.noreply.github.com>\r\nCo-authored-by: David Stutt <david@wundergraph.com>\r\nCo-authored-by: spetrunin <neyasut@gmail.com>",
"is_bot": false,
"headline": "sync wg changes (#360)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-06-26T09:25:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b3563aa241bbe1e1e0e91a1d57f3011ee21d0cb4",
"body": "…ped with quotes (#355)\n\nTHis ticket fixes an issue where the input generated for the rest\r\ndatasource wraps query params that are fetched from arguments with\r\nquotes, thereby breaking the URL generated down the execution pipeline",
"is_bot": false,
"headline": "[TT-8526] fix issue where query params of type int and array are wrap…",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-06-21T07:54:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4495dbf28d74d5eafa07ab45079a8163fadb376",
"body": "This PR fixes an introspection issue when custom root operation types\r\nare defined, e.g.\r\n```\r\nschema {\r\n\tquery: CustomQuery\r\n\tmutation: CustomMutation\r\n\tsubscription: CustomSubscription\r\n}\r\n\r\ntype CustomQuery {\r\n\tfriend: String\r\n}\r\n\r\ntype CustomMutation {\r\n\taddFriend: Boolean\r\n}\r\n\r\ntype CustomSubscription {\r\n\tlastAddedFriend: String\r\n}\r\n```",
"is_bot": false,
"headline": "fix introspection not working for custom root operation types (#356)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-06-16T11:41:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5563fa7a90b35e59bcafd39a275cb3d94c6f668",
"body": "This fixes an edge case where the variables passed is either unsanitized\r\njson or invalid json.",
"is_bot": false,
"headline": "[TT-8944]: added and fix case where variable is unsanitized json (#354)",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-06-15T11:50:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4bad888468ec9f0361d7dc89fdec487554c77a08",
"body": "…#352)\n\nThis PR adds a separate module called variable validation, this module\r\nwill be added as a separate stage in the graphql execution\r\n\r\n[TT-8944](https://tyktech.atlassian.net/browse/TT-8944)\r\n\r\n\r\n[TT-8944]:\r\nhttps://tyktech.atlassian.net/browse/TT-8944?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-8944] Refactor: move variable validation logic to separate step (…",
"author_name": "Kofo Okesola",
"author_login": "kofoworola",
"committed_at": "2023-06-07T06:28:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40d3318e20b16cb7892a1ca2e9ac3ea096a15ec9",
"body": "PR for [TT-8528](https://tyktech.atlassian.net/browse/TT-8528)\r\n\r\nNow, we can handle non-nullable fields properly. There was also a minor\r\nbug in a function that generates mutation type. It was swallowing the\r\nparameters if a request body defined for the same operation id. This bug\r\nhas also been fixed.\r\n\r\n[TT-8528]:\r\nhttps://tyktech.atlassian.net/browse/TT-8528?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-8528] Improper handling of non-nullable fields in OpenAPI (#350)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-05-11T06:08:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8383e403b64fbecc27582e397479da3e4d56c7b7",
"body": "This PR adds a `MarshalRequest` and a `MarshalRequestString` function to\r\nthe `graphql` package.\r\nIt also adds `omitempty` to `OperationName` and `Variables` fields.",
"is_bot": false,
"headline": "add MarshalRequest functions and omit empties (#349)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-05-02T08:54:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec128b38cef269d8945e397e04f18e69f41f277b",
"body": "…(#348)\n\n- https://github.com/wundergraph/graphql-go-tools/pull/520\r\n\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>",
"is_bot": false,
"headline": "fix: avoid panic if client immediately disconnects on request (#520) …",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-04-27T10:41:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d8ec196a42ecdd5ce2c87710f4ee6b5c5497712",
"body": "Changes in this PR are based on @buraksezer 's awesome research in this\r\ncommit:\r\nhttps://github.com/TykTechnologies/graphql-go-tools/commit/23f7686189d155642aaf2678e0e3a28db37b57c5\r\n\r\nThis PR introduces interfaces for a `CustomExecutionEngineV2` including\r\nexecution stages.\r\nBy introducing those ch\n[…]\nutionEngineV2` as\r\nit is an implementation detail\r\n- `ExecutionOptionsV2` are now decoupled from `internalExecutionContext`\r\nso that implementing them outside of the `graphql` package is now\r\npossible",
"is_bot": false,
"headline": "introduce CustomExecutionEngineV2 (#346)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-04-26T14:26:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4dff07f237f306677007692c7ce2604471b500f7",
"body": "Reverts TykTechnologies/graphql-go-tools#345",
"is_bot": false,
"headline": "Revert \"update graphql-go-tools to go 1.19\" (#347)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-04-26T13:18:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3f46142fc08d9fb846cbdc6a773f0f2ab885eb8",
"body": "This PR updates `graphql-go-tools` to `go 1.19`.",
"is_bot": false,
"headline": "update graphql-go-tools to go 1.19 (#345)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-04-19T10:12:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbca67472c4150ed94b1b44fa4167f3a01ca7ee8",
"body": "PR from WG: https://github.com/wundergraph/graphql-go-tools/pull/518\r\n\r\nCo-authored-by: Yuri Buerov <yuribuerov@gmail.com>",
"is_bot": false,
"headline": "fix: resolve, do not resolve fetch if ctx is cancelled (#518) (#344)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-04-14T13:06:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "738c1d218c03b11d8353903331426602eb27aee6",
"body": "This PR fixes an inconsistent behavior when using `null` in a variable\r\nfor a required type (e.g. `String!`)",
"is_bot": false,
"headline": "fix validation skipping for null on scalars (#342)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-04-12T10:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8921a0eef8847ddb99314b68763aef3da4ea1af5",
"body": "…341)\n\nThis PR includes preliminary work for\r\n[TT-7767](https://tyktech.atlassian.net/jira/software/c/projects/TT/boards/26?modal=detail&selectedIssue=TT-7767).\r\n\r\n* Added a new public method to parse the OpenAPI document only one time:\r\n`ParseOpenAPIDocument`\r\n* Make some private functions public t\n[…]\nakeFieldNameFromEndpoint`, `MakeParameterName`.\r\n\r\n[TT-7767]:\r\nhttps://tyktech.atlassian.net/browse/TT-7767?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-7767] UDG datasource config based on info parsed from OAS spec (#…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-04-03T09:24:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2ac96aace06061f6c08fb8c8f318ebf4d1a9ceb4",
"body": "This PR contains changes from WG, including:\r\n - https://github.com/wundergraph/graphql-go-tools/pull/503\r\n - https://github.com/wundergraph/graphql-go-tools/pull/504\r\n - https://github.com/wundergraph/graphql-go-tools/pull/514\r\n - https://github.com/wundergraph/graphql-go-tools/pull/515\r\n\r\n--------\n[…]\nsers.noreply.github.com>\r\nCo-authored-by: ikawaha <ikawaha@users.noreply.github.com>\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>\r\nCo-authored-by: Sergiy <818351+devsergiy@users.noreply.github.com>",
"is_bot": false,
"headline": "cherry-pick wg changes (#340)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-03-24T14:03:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "af1740bd861bf9569135dc293c066b9e0d14514c",
"body": "…ec (#337)\n\nThis PR implements an OpenAPI to GraphQL converter. Currently, it only\r\nsupports OpenAPI v3.0.0 `getkin/kin-openapi` provides a different parser\r\nfor OpenAPI 2.0.0 but it is based on OpenAPI 3.0.0. v2.0.0 support\r\nshould be planned and tested separately.\r\n\r\nKnown issues and missing featu\n[…]\n` or `text/plain`.\r\n\r\nExample documents and their GraphQL counterparts can be found under\r\n`openapi/fixtures/v3.0.0`. We can successfully parse the `petstore.yaml`\r\nand `petstore-expanded.yaml` files.",
"is_bot": false,
"headline": "[TT-7465] Parsing information needed for UDG config from OpenAPI-3 sp…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-03-21T09:32:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7a16078ce5171935786a4b672774aa470c0d3dcb",
"body": "This PR upgrades Masterminds/goutils to `v1.1.1` from `v1.1.0`\r\n\r\n- https://tyktech.atlassian.net/browse/TT-8349\r\n- https://dso.docker.com/cve/CVE-2021-4238",
"is_bot": false,
"headline": "[TT-8349] Upgrade github.com/Masterminds/goutils to v1.1.1 (#339)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-03-20T14:31:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee4225ff80086ae8cbf73da4402cc84b710ed41c",
"body": "This PR adds tests for single-value array field-mappings. It documents\r\nthe way how to overcome a situation, where an API always returns an\r\narray with a single value in it.",
"is_bot": false,
"headline": "add tests for single-value array field-mappings (#336)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-02-16T10:00:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa076c16772f29785c60eaf1943662eb1f1391c7",
"body": "…ec (#335)\n\nThis PR includes a few improvements for\r\n[TT-7684](https://tyktech.atlassian.net/jira/software/c/projects/TT/boards/26?modal=detail&selectedIssue=TT-7684).\r\n\r\n[TT-7684]:\r\nhttps://tyktech.atlassian.net/browse/TT-7684?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-7684] UDG datasource config based on info parsed from AsyncAPI sp…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-02-14T13:07:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58f2a2e8c1810e4001b22cfa56ee485a3050d7fe",
"body": "This PR contains changes from wundergraph:\r\n - https://github.com/wundergraph/graphql-go-tools/pull/492\r\n - https://github.com/wundergraph/graphql-go-tools/pull/493\r\n - https://github.com/wundergraph/graphql-go-tools/pull/494\r\n\r\n---------\r\n\r\nCo-authored-by: Sergiy Petrunin <spetrunin@users.noreply.github.com>",
"is_bot": false,
"headline": "cherry-pick changes from WG (#334)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-02-13T14:13:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1513bf584e5ce5a81d59432f1303d6cf4ead478f",
"body": "Added an additional test case for nested field-mapping for increasing\r\nconfidence.",
"is_bot": false,
"headline": "add test case for nested field mappings (#333)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-02-10T09:36:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2236fa13578152c6b9e0670eee1fbe4d8648247a",
"body": "This PR adds Query root type to the schemas produced from AsyncAPI\r\ndocuments. It's a mandatory field. It also has a dummy field because\r\nempty types are not allowed.\r\n\r\n\r\n```graphql\r\nschema {\r\n query: Query\r\n subscription: Subscription\r\n}\r\n\r\ntype Query {\r\n _: Boolean\r\n}\r\n```\r\n\r\nThis PR also includes small code organization improvements.",
"is_bot": false,
"headline": "[TT-7826] Add Query root type (#332)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-02-03T11:14:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c74739c7a15a797650ceaff145295b86c9cb55ee",
"body": null,
"is_bot": false,
"headline": "[TT-7826] Add Info object to AsyncAPI struct (#331)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-02-01T13:00:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0685de90efe2abef451da4818b397c7900741cfb",
"body": "…pec (#329)\n\nPR for\r\n[TT-7468](https://tyktech.atlassian.net/jira/software/c/projects/TT/boards/26?modal=detail&selectedIssue=TT-7468)\r\n\r\n`ImportAsyncAPIDocumentByte` has been added to produce a GraphQL schema\r\nfrom a parsed AsyncAPI document. The implementation uses\r\n`introspection.JsonConverter` t\n[…]\n userUnsubscribedSub: UserUnsubscribed\r\n}\r\n```\r\n\r\n[TT-7468]:\r\nhttps://tyktech.atlassian.net/browse/TT-7468?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ",
"is_bot": false,
"headline": "[TT-7468] Configuring UDG Schema based on info parsed from AsyncAPI s…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-01-31T13:21:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5355f68b46693b0e12d37796ffe2f5976d96e75a",
"body": "This PR contains following PRs:\r\n - https://github.com/wundergraph/graphql-go-tools/pull/487\r\n - https://github.com/wundergraph/graphql-go-tools/pull/486\r\n - https://github.com/wundergraph/graphql-go-tools/pull/477\r\n\r\nCo-authored-by: Aenimus <47415099+Aenimus@users.noreply.github.com>\r\nCo-authored-b\n[…]\nwundergraph.com>\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>\r\nCo-authored-by: Sergiy Petrunin <spetrunin@users.noreply.github.com>\r\nCo-authored-by: Alberto García Hierro <alberto@garciahierro.com>",
"is_bot": false,
"headline": "cherry-pick wundergraph changes (#330)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-01-23T11:18:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e1ac1a15aa7bc0ae3a2e44cbb7995e9c6bd87d61",
"body": "…c (#328)",
"is_bot": false,
"headline": "[TT-7466] Parsing information needed for UDG config from AsyncAPI Spe…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-01-16T14:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "272a19f717d0278a3fd5b4b7711dd8359ec3a972",
"body": "PRs that have been cherry-picked:\r\n - https://github.com/wundergraph/graphql-go-tools/pull/469\r\n - https://github.com/wundergraph/graphql-go-tools/pull/463\r\n - https://github.com/wundergraph/graphql-go-tools/pull/472\r\n - https://github.com/wundergraph/graphql-go-tools/pull/476\r\n - https://github.com\n[…]\nraphql-go-tools/pull/481\r\n\r\nCo-authored-by: Misato <misato@takahashi.name>\r\nCo-authored-by: Misato Takahashi <mistat@mistat.local>\r\nCo-authored-by: Sergiy Petrunin <spetrunin@users.noreply.github.com>",
"is_bot": false,
"headline": "cherry-pick wundergraph changes (#327)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2023-01-09T14:14:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7ea9495452723577f28f9191559ff067adae5e96",
"body": "… (#325)\n\nPR for\r\n[TT-6137](https://tyktech.atlassian.net/jira/software/c/projects/TT/boards/26?modal=detail&selectedIssue=TT-6137).\r\n\r\nCurrently, we implement `graphql-ws` protocol for the communication\r\nbetween GW and the clients. This protocol supports running many\r\nsubscriptions on a single WebS\n[…]\ne playground app in Tyk Dashboard. It opens a\r\nnew connection for every subscription request. The problem arises when\r\nyou want to run more than one subscriptions using a single WebSocket\r\nconnection.",
"is_bot": false,
"headline": "[TT-6137] Can't close all subscriptions when more than one are opened…",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2023-01-02T11:19:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f01b55cbe440b55f5e411e38403398e5aae8fe1d",
"body": "This PR contains changes from:\r\n\r\n- Custom Scalar Replacement:\r\nhttps://github.com/wundergraph/graphql-go-tools/pull/456\r\n- Add support for requests in SSE Subscriptions:\r\nhttps://github.com/wundergraph/graphql-go-tools/pull/449\r\n- Fix planning variable path:\r\nhttps://github.com/wundergraph/graphql-\n[…]\ne@gmx.de>\r\nCo-authored-by: Oscar Lingard <oscar.lingard@thehutgroup.com>\r\nCo-authored-by: Jonathan Lee <jonathan.lee@coinbase.com>\r\nCo-authored-by: Sergiy Petrunin <spetrunin@users.noreply.github.com>",
"is_bot": false,
"headline": "cherry pick changes from wundergraph (#324)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2022-12-09T13:19:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "acdd20d63048608f2c95febd17333b9637c72da1",
"body": "Currently, when you send the following query for both proxy-only and UDG\r\nAPIs, the GW panics and the user gets 502 for the query.\r\n\r\n```graphql\r\nquery {\r\n __typename\r\n}\r\n```\r\n\r\nThe actual error message is the following:\r\n\r\n```json\r\n{\r\n \"errors\": [\r\n {\r\n \"message\": \"unable to\n[…]\n\r\n temp\r\n }\r\n}\r\n```\r\n\r\n```json\r\n{\r\n \"data\": {\r\n \"__typename\": \"Query\",\r\n \"weather\": {\r\n \"__typename\": \"Weather\",\r\n \"temp\": 44\r\n }\r\n }\r\n}\r\n```",
"is_bot": false,
"headline": "[TT-6419] Querying for __typename in any graph causes a 502 error (#323)",
"author_name": "Burak Sezer",
"author_login": "buraksezer",
"committed_at": "2022-12-07T09:23:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c2dd74b524578d0653cf7652efba56a19304ebae",
"body": "* allow integer to be used in place of ID type\r\n\r\n* reduce responsibility of valid arguments rule use testify require\r\ninstead of panic\r\nupdate test to use proper rules\r\nmove some tests in more proper sections\r\n\r\n* add position to values\r\n\r\n* make variable errors messages compatible with reference t\n[…]\n valid input\r\n\r\nCo-authored-by: Alasdair Tran <alasdair.tran@gmail.com>\r\nCo-authored-by: Sergiy Petrunin <spetrunin@users.noreply.github.com>\r\n\r\nCo-authored-by: Alasdair Tran <alasdair.tran@gmail.com>",
"is_bot": false,
"headline": "improve values validation to reflect reference implementation (#319)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2022-11-18T12:07:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "98968f5f90d528b4e4841244a7243b97405abd3f",
"body": "* feat: planner, support custom scalar fields\r\n\r\n* chore: fix test\r\n\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>\r\n\r\nCo-authored-by: Yuri Buerov <yuribuerov@gmail.com>\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>",
"is_bot": false,
"headline": "feat: planner, support custom scalar fields (#450) (#318)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2022-11-18T08:27:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5f47427f73388cce55dfe29938e077153152019",
"body": "return meaningful error message when an int/float is provided to the\r\nresolveString func\r\n\r\nCo-authored-by: Jens Neuse <jens.neuse@gmx.de>",
"is_bot": false,
"headline": "meaningful errors for resolveString func (#317)",
"author_name": "Patric Vormstein",
"author_login": "pvormste",
"committed_at": "2022-11-17T12:39:55Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 13,
"commits_last_year": 6,
"latest_release_at": "2019-04-08T06:53:10Z",
"latest_release_tag": "v1.6.1",
"releases_from_tags": true,
"days_since_last_push": 40,
"active_weeks_last_year": 5,
"days_since_latest_release": 2674,
"mean_days_between_releases": 4.1
},
"artifacts": {
"collected": true,
"structure": [
"tree.go_main"
],
"declarations": []
},
"community": {
"has_readme": false,
"has_license": false,
"readme_badges": {
"hosts": [
"github.com"
],
"total": 1,
"header": 1,
"collected": true,
"has_inspect_badge": false
},
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/TykTechnologies/graphql-go-tools",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"categories": [],
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/TykTechnologies/graphql-go-tools",
"declared_type": null,
"is_deprecated": false,
"latest_version": "v1.6.1",
"repository_url": "https://github.com/TykTechnologies/graphql-go-tools",
"versions_count": 13,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2019-04-08T06:53:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2674
}
]
},
"popularity": {
"forks": 5,
"stars": 21,
"watchers": 6,
"fork_history": {
"days": [
{
"date": "2021-09-16",
"count": 1
},
{
"date": "2022-02-09",
"count": 1
},
{
"date": "2022-06-27",
"count": 1
},
{
"date": "2023-02-04",
"count": 1
},
{
"date": "2025-07-26",
"count": 1
}
],
"complete": true,
"collected": 5,
"total_forks": 5
},
"star_history": null,
"open_issues_and_prs": 11
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"v2/Makefile"
],
"api_schema_files": [
"examples/chat/schema.graphql",
"examples/federation/accounts/graph/schema.graphqls",
"examples/federation/products/graph/schema.graphqls",
"examples/federation/reviews/graph/schema.graphqls",
"pkg/astparser/testdata/big_schema.graphql",
"pkg/astparser/testdata/github.schema.graphql",
"pkg/astparser/testdata/introspection_normalized.graphql",
"pkg/astparser/testdata/introspectionquery.graphql",
"pkg/astparser/testdata/starwars.schema.graphql",
"pkg/astparser/testdata/todo.graphql",
"pkg/astprinter/testdata/introspectionquery.graphql",
"pkg/astprinter/testdata/starwars.schema.graphql",
"pkg/astvalidation/reference/testsgo/test_schema.graphql",
"pkg/codegen/testdata/schema.graphql",
"pkg/execution/graphql_definitions/directives/graphql_datasource.graphql",
"pkg/execution/graphql_definitions/directives/http_json_datasource.graphql",
"pkg/execution/graphql_definitions/directives/http_polling_stream_datasource.graphql",
"pkg/execution/graphql_definitions/directives/mapping.graphql",
"pkg/execution/graphql_definitions/directives/mqtt_datasource.graphql",
"pkg/execution/graphql_definitions/directives/nats_datasource.graphql",
"pkg/execution/graphql_definitions/directives/pipeline_datasource.graphql",
"pkg/execution/graphql_definitions/directives/static_datasource.graphql",
"pkg/execution/graphql_definitions/directives/transformation.graphql",
"pkg/execution/graphql_definitions/directives/wasm_datasource.graphql",
"pkg/execution/graphql_definitions/enums/http_method.graphql",
"pkg/execution/graphql_definitions/enums/mapping_mode.graphql",
"pkg/execution/graphql_definitions/enums/parameter_source.graphql",
"pkg/execution/graphql_definitions/enums/transformation_mode.graphql",
"pkg/execution/graphql_definitions/inputs/header.graphql",
"pkg/execution/graphql_definitions/inputs/parameter.graphql",
"pkg/execution/graphql_definitions/inputs/statuscode_typename_mapping.graphql",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls",
"pkg/imports/testdata/cycle/a/a.graphql",
"pkg/imports/testdata/cycle/b/b.graphql",
"pkg/imports/testdata/deep/deeper/custom_types.graphql",
"pkg/imports/testdata/import_cycle.graphql",
"pkg/imports/testdata/nested/nested.graphql",
"pkg/imports/testdata/nested2/nested2.graphql",
"pkg/imports/testdata/regexonly/flat.graphql",
"pkg/imports/testdata/regexonly/mutation.graphql",
"pkg/imports/testdata/regexonly/query.graphql",
"pkg/imports/testdata/scalars/json.graphql",
"pkg/imports/testdata/schema.graphql",
"pkg/imports/testdata/types/mutation.graphql",
"pkg/imports/testdata/types/query.graphql",
"pkg/introspection/testdata/interfaces_implementing_interfaces.graphql",
"pkg/introspection/testdata/starwars.schema.graphql",
"pkg/starwars/testdata/queries/interface_fragments_on_union.graphql",
"pkg/starwars/testdata/star_wars.graphql",
"pkg/testing/federationtesting/accounts/graph/schema.graphqls",
"pkg/testing/federationtesting/products/graph/schema.graphqls",
"pkg/testing/federationtesting/reviews/graph/schema.graphqls",
"pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql",
"pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql",
"pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql",
"pkg/testing/federationtesting/testdata/queries/merged_field.graphql",
"pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql",
"pkg/testing/subscriptiontesting/schema.graphql",
"v2/examples/chat/schema.graphql",
"v2/examples/federation/accounts/graph/schema.graphqls",
"v2/examples/federation/products/graph/schema.graphqls",
"v2/examples/federation/reviews/graph/schema.graphqls",
"v2/examples/kafka_pubsub/schema.graphql",
"v2/pkg/astparser/testdata/big_schema.graphql",
"v2/pkg/astparser/testdata/github.schema.graphql",
"v2/pkg/astparser/testdata/introspection_normalized.graphql",
"v2/pkg/astparser/testdata/introspectionquery.graphql",
"v2/pkg/astparser/testdata/starwars.schema.graphql",
"v2/pkg/astparser/testdata/todo.graphql",
"v2/pkg/astprinter/testdata/introspectionquery.graphql",
"v2/pkg/astprinter/testdata/starwars.schema.graphql",
"v2/pkg/astvalidation/reference/testsgo/test_schema.graphql",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls",
"v2/pkg/imports/testdata/cycle/a/a.graphql",
"v2/pkg/imports/testdata/cycle/b/b.graphql",
"v2/pkg/imports/testdata/deep/deeper/custom_types.graphql",
"v2/pkg/imports/testdata/import_cycle.graphql",
"v2/pkg/imports/testdata/nested/nested.graphql",
"v2/pkg/imports/testdata/nested2/nested2.graphql",
"v2/pkg/imports/testdata/regexonly/flat.graphql",
"v2/pkg/imports/testdata/regexonly/mutation.graphql",
"v2/pkg/imports/testdata/regexonly/query.graphql",
"v2/pkg/imports/testdata/scalars/json.graphql",
"v2/pkg/imports/testdata/schema.graphql",
"v2/pkg/imports/testdata/types/mutation.graphql",
"v2/pkg/imports/testdata/types/query.graphql",
"v2/pkg/introspection/testdata/interfaces_implementing_interfaces.graphql",
"v2/pkg/introspection/testdata/starwars.schema.graphql",
"v2/pkg/starwars/testdata/queries/interface_fragments_on_union.graphql",
"v2/pkg/starwars/testdata/star_wars.graphql",
"v2/pkg/testing/federationtesting/accounts/graph/schema.graphqls",
"v2/pkg/testing/federationtesting/products/graph/schema.graphqls",
"v2/pkg/testing/federationtesting/reviews/graph/schema.graphqls",
"v2/pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/merged_field.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql",
"v2/pkg/testing/subscriptiontesting/schema.graphql"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"examples/chat/go.mod",
"examples/federation/go.mod",
"examples/kafka_pubsub/go.mod",
"examples/kafka_pubsub/transactional_producer/go.mod",
"go.mod",
"v2/examples/chat/go.mod",
"v2/examples/federation/go.mod",
"v2/examples/kafka_pubsub/go.mod",
"v2/examples/kafka_pubsub/transactional_producer/go.mod",
"v2/go.mod"
],
"largest_source_bytes": 2144248,
"source_files_sampled": 1198,
"oversized_source_files": 24,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod",
"v2/go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "0.18.0",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 10,
"advisory_ids": [
"GHSA-45gg-vh54-h5m9",
"GHSA-5cgq-3rg8-m6cv",
"GHSA-78mq-xcr3-xm33",
"GHSA-89gr-r52h-f8rx",
"GHSA-9m57-25v3-79x9",
"GHSA-f5wc-c3c7-36mc",
"GHSA-f6x5-jh6r-wrfv",
"GHSA-hcg3-q754-cr77",
"GHSA-j5w8-q4qc-rx2x",
"GHSA-jppx-rxg9-jmrx"
],
"fixed_version": "0.52.0",
"advisory_count": 36,
"oldest_advisory_days": 600
},
{
"name": "github.com/buger/jsonparser",
"direct": true,
"version": "1.1.1",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-6g7g-w4f8-9c9x",
"GO-2026-4514"
],
"fixed_version": "1.1.2",
"advisory_count": 2,
"oldest_advisory_days": 140
},
{
"name": "github.com/docker/cli",
"direct": false,
"version": "28.4.0+incompatible",
"severity": "high",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GHSA-p436-gjf2-799p",
"GO-2026-4610"
],
"fixed_version": "29.2.0+incompatible",
"advisory_count": 2,
"oldest_advisory_days": 152
},
{
"name": "github.com/docker/docker",
"direct": false,
"version": "28.4.0+incompatible",
"severity": "high",
"ecosystem": "go",
"cvss_score": 8.8,
"advisory_ids": [
"GHSA-pxq6-2prw-chj9",
"GHSA-rg2x-37c3-w2rh",
"GHSA-vp62-88p7-qqf5",
"GHSA-x744-4wpc-v9h2",
"GHSA-x86f-5xw2-fm2r",
"GO-2026-4883",
"GO-2026-4887",
"GO-2026-5617",
"GO-2026-5668",
"GO-2026-5746"
],
"fixed_version": "29.3.1",
"advisory_count": 10,
"oldest_advisory_days": 129
},
{
"name": "github.com/opencontainers/runc",
"direct": false,
"version": "1.1.5",
"severity": "high",
"ecosystem": "go",
"cvss_score": 8.6,
"advisory_ids": [
"GHSA-9493-h29p-rfm2",
"GHSA-cgrx-mc8f-2prm",
"GHSA-jfvp-7x6p-h2pv",
"GHSA-qw9x-cqr3-wc7r",
"GHSA-xjvp-4fhw-gc47",
"GHSA-xr7r-f8xq-vfvv",
"GO-2024-2491",
"GO-2024-3110",
"GO-2025-4096",
"GO-2025-4097"
],
"fixed_version": "1.13.0",
"advisory_count": 12,
"oldest_advisory_days": 915
},
{
"name": "github.com/sirupsen/logrus",
"direct": false,
"version": "1.8.1",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-4f99-4q7p-p3gh",
"GO-2025-4188"
],
"fixed_version": "1.9.3",
"advisory_count": 2,
"oldest_advisory_days": 242
},
{
"name": "github.com/eclipse/paho.mqtt.golang",
"direct": true,
"version": "1.2.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-32fw-gq77-f2f2",
"GO-2025-4173"
],
"fixed_version": "1.5.1",
"advisory_count": 2,
"oldest_advisory_days": 244
},
{
"name": "github.com/vektah/gqlparser/v2",
"direct": true,
"version": "2.5.1",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-2hmf-46v7-v6fx",
"GO-2024-2920"
],
"fixed_version": "2.5.14",
"advisory_count": 2,
"oldest_advisory_days": 782
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "0.17.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-4v7x-pqxf-cx7m",
"GHSA-5cv4-jp36-h3mw",
"GHSA-qxp5-gwg8-xv66",
"GHSA-vvgc-356p-c3xw",
"GO-2024-2687",
"GO-2024-3333",
"GO-2025-3503",
"GO-2025-3595",
"GO-2026-4440",
"GO-2026-4441"
],
"fixed_version": "1.26.3",
"advisory_count": 18,
"oldest_advisory_days": 852
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "1.16.7",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5841"
],
"fixed_version": "1.18.7",
"advisory_count": 1,
"oldest_advisory_days": 7
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "0.16.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 73
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "0.14.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 20
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 5,
"unknown": 3,
"critical": 1,
"moderate": 3
},
"advisory_count": 89,
"affected_count": 12,
"assessed_count": 116,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 3
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/99designs/gqlgen",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.17.22"
},
{
"name": "github.com/IBM/sarama",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.42.1"
},
{
"name": "github.com/andybalholm/brotli",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/buger/jsonparser",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/cespare/xxhash/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.1.2"
},
{
"name": "github.com/coder/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.12"
},
{
"name": "github.com/dave/jennifer",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/davecgh/go-spew",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/eclipse/paho.mqtt.golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
},
{
"name": "github.com/evanphx/json-patch/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.1.0"
},
{
"name": "github.com/go-test/deep",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.8"
},
{
"name": "github.com/gobwas/ws",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.4"
},
{
"name": "github.com/golang/mock",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/google/go-cmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.8"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/hashicorp/golang-lru",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.4"
},
{
"name": "github.com/iancoleman/strcase",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.0"
},
{
"name": "github.com/jensneuse/abstractlogger",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.4"
},
{
"name": "github.com/jensneuse/byte-template",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20200214152254-4f3cf06e5c68"
},
{
"name": "github.com/jensneuse/diffview",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/jensneuse/pipeline",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20200117120358-9fb4de085cd6"
},
{
"name": "github.com/mitchellh/go-homedir",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/ory/dockertest/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.10.0"
},
{
"name": "github.com/r3labs/sse/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.8.1"
},
{
"name": "github.com/santhosh-tekuri/jsonschema/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.3.0"
},
{
"name": "github.com/sebdah/goldie",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20180424091453-8784dd1ab561"
},
{
"name": "github.com/sebdah/goldie/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.3"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.5"
},
{
"name": "github.com/spf13/viper",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.2"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.4"
},
{
"name": "github.com/tidwall/gjson",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "github.com/tidwall/sjson",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.4"
},
{
"name": "github.com/vektah/gqlparser/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.1"
},
{
"name": "go.uber.org/atomic",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.0"
},
{
"name": "go.uber.org/zap",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.18.1"
},
{
"name": "gopkg.in/yaml.v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.4.0"
},
{
"name": "github.com/99designs/gqlgen",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.17.22"
},
{
"name": "github.com/IBM/sarama",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.42.1"
},
{
"name": "github.com/alitto/pond",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.3"
},
{
"name": "github.com/andybalholm/brotli",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/buger/jsonparser",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/cespare/xxhash/v2",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v2.1.2"
},
{
"name": "github.com/coder/websocket",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.12"
},
{
"name": "github.com/davecgh/go-spew",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/gobwas/ws",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.4"
},
{
"name": "github.com/golang/mock",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/google/go-cmp",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.9"
},
{
"name": "github.com/google/uuid",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/hashicorp/go-multierror",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/hashicorp/golang-lru",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.4"
},
{
"name": "github.com/jensneuse/abstractlogger",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.4"
},
{
"name": "github.com/jensneuse/byte-template",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20200214152254-4f3cf06e5c68"
},
{
"name": "github.com/jensneuse/diffview",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/ory/dockertest/v3",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v3.10.0"
},
{
"name": "github.com/pkg/errors",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.1"
},
{
"name": "github.com/r3labs/sse/v2",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v2.8.1"
},
{
"name": "github.com/santhosh-tekuri/jsonschema/v5",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v5.3.0"
},
{
"name": "github.com/sebdah/goldie/v2",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.3"
},
{
"name": "github.com/stretchr/testify",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.4"
},
{
"name": "github.com/tidwall/gjson",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "github.com/tidwall/sjson",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.4"
},
{
"name": "github.com/vektah/gqlparser/v2",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.1"
},
{
"name": "go.uber.org/atomic",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.0"
},
{
"name": "go.uber.org/zap",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v1.18.1"
},
{
"name": "golang.org/x/sync",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.0"
},
{
"name": "gonum.org/v1/gonum",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v0.14.0"
},
{
"name": "gopkg.in/yaml.v2",
"manifest": "v2/go.mod",
"ecosystem": "go",
"version_constraint": "v2.4.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/99designs/gqlgen",
"direct": true,
"version": "0.17.20",
"ecosystem": "go"
},
{
"name": "github.com/99designs/gqlgen",
"direct": true,
"version": "0.17.22",
"ecosystem": "go"
},
{
"name": "github.com/andybalholm/brotli",
"direct": true,
"version": "1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/buger/jsonparser",
"direct": true,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": true,
"version": "2.1.2",
"ecosystem": "go"
},
{
"name": "github.com/coder/websocket",
"direct": true,
"version": "1.8.12",
"ecosystem": "go"
},
{
"name": "github.com/dave/jennifer",
"direct": true,
"version": "1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": true,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/eclipse/paho.mqtt.golang",
"direct": true,
"version": "1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/evanphx/json-patch/v5",
"direct": true,
"version": "5.1.0",
"ecosystem": "go"
},
{
"name": "github.com/go-test/deep",
"direct": true,
"version": "1.0.8",
"ecosystem": "go"
},
{
"name": "github.com/gobwas/ws",
"direct": true,
"version": "1.0.4",
"ecosystem": "go"
},
{
"name": "github.com/golang/mock",
"direct": true,
"version": "1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/google/go-cmp",
"direct": true,
"version": "0.5.8",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": true,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/gorilla/websocket",
"direct": true,
"version": "1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-multierror",
"direct": true,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/golang-lru",
"direct": true,
"version": "0.5.4",
"ecosystem": "go"
},
{
"name": "github.com/iancoleman/strcase",
"direct": true,
"version": "0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/ibm/sarama",
"direct": true,
"version": "1.42.1",
"ecosystem": "go"
},
{
"name": "github.com/jensneuse/abstractlogger",
"direct": true,
"version": "0.0.4",
"ecosystem": "go"
},
{
"name": "github.com/jensneuse/byte-template",
"direct": true,
"version": "0.0.0-20200214152254-4f3cf06e5c68",
"ecosystem": "go"
},
{
"name": "github.com/jensneuse/diffview",
"direct": true,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/jensneuse/pipeline",
"direct": true,
"version": "0.0.0-20200117120358-9fb4de085cd6",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/go-homedir",
"direct": true,
"version": "1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/ory/dockertest/v3",
"direct": true,
"version": "3.10.0",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": true,
"version": "0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/r3labs/sse/v2",
"direct": true,
"version": "2.8.1",
"ecosystem": "go"
},
{
"name": "github.com/santhosh-tekuri/jsonschema/v5",
"direct": true,
"version": "5.3.0",
"ecosystem": "go"
},
{
"name": "github.com/sebdah/goldie",
"direct": true,
"version": "0.0.0-20180424091453-8784dd1ab561",
"ecosystem": "go"
},
{
"name": "github.com/sebdah/goldie/v2",
"direct": true,
"version": "2.5.3",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": true,
"version": "0.0.5",
"ecosystem": "go"
},
{
"name": "github.com/spf13/viper",
"direct": true,
"version": "1.3.2",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "1.7.1",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "1.8.4",
"ecosystem": "go"
},
{
"name": "github.com/tidwall/gjson",
"direct": true,
"version": "1.11.0",
"ecosystem": "go"
},
{
"name": "github.com/tidwall/sjson",
"direct": true,
"version": "1.0.4",
"ecosystem": "go"
},
{
"name": "github.com/vektah/gqlparser/v2",
"direct": true,
"version": "2.5.1",
"ecosystem": "go"
},
{
"name": "go.uber.org/atomic",
"direct": true,
"version": "1.9.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap",
"direct": true,
"version": "1.18.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v2",
"direct": true,
"version": "2.4.0",
"ecosystem": "go"
},
{
"name": "dario.cat/mergo",
"direct": false,
"version": "1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/agnivade/levenshtein",
"direct": false,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-ansiterm",
"direct": false,
"version": "0.0.0-20230124172434-306776ec8161",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v4",
"direct": false,
"version": "4.1.3",
"ecosystem": "go"
},
{
"name": "github.com/containerd/continuity",
"direct": false,
"version": "0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/docker/cli",
"direct": false,
"version": "28.4.0+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/docker/docker",
"direct": false,
"version": "28.4.0+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/docker/go-connections",
"direct": false,
"version": "0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/docker/go-units",
"direct": false,
"version": "0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/eapache/go-resiliency",
"direct": false,
"version": "1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/eapache/go-xerial-snappy",
"direct": false,
"version": "0.0.0-20230731223053-c322873962e3",
"ecosystem": "go"
},
{
"name": "github.com/eapache/queue",
"direct": false,
"version": "1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/fsnotify/fsnotify",
"direct": false,
"version": "1.4.9",
"ecosystem": "go"
},
{
"name": "github.com/go-viper/mapstructure/v2",
"direct": false,
"version": "2.4.0",
"ecosystem": "go"
},
{
"name": "github.com/gobwas/httphead",
"direct": false,
"version": "0.0.0-20180130184737-2c6c146eadee",
"ecosystem": "go"
},
{
"name": "github.com/gobwas/pool",
"direct": false,
"version": "0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/golang/snappy",
"direct": false,
"version": "0.0.4",
"ecosystem": "go"
},
{
"name": "github.com/google/shlex",
"direct": false,
"version": "0.0.0-20191202100458-e7afc7fbc510",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/errwrap",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-uuid",
"direct": false,
"version": "1.0.3",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/hcl",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/huandu/xstrings",
"direct": false,
"version": "1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/imdario/mergo",
"direct": false,
"version": "0.3.12",
"ecosystem": "go"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/jcmturner/aescts/v2",
"direct": false,
"version": "2.0.0",
"ecosystem": "go"
},
{
"name": "github.com/jcmturner/dnsutils/v2",
"direct": false,
"version": "2.0.0",
"ecosystem": "go"
},
{
"name": "github.com/jcmturner/gofork",
"direct": false,
"version": "1.7.6",
"ecosystem": "go"
},
{
"name": "github.com/jcmturner/gokrb5/v8",
"direct": false,
"version": "8.4.4",
"ecosystem": "go"
},
{
"name": "github.com/jcmturner/rpc/v2",
"direct": false,
"version": "2.0.3",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "1.16.7",
"ecosystem": "go"
},
{
"name": "github.com/lib/pq",
"direct": false,
"version": "1.10.6",
"ecosystem": "go"
},
{
"name": "github.com/logrusorgru/aurora/v3",
"direct": false,
"version": "3.0.0",
"ecosystem": "go"
},
{
"name": "github.com/magiconair/properties",
"direct": false,
"version": "1.8.0",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/goutils",
"direct": false,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/semver",
"direct": false,
"version": "1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/sprig",
"direct": false,
"version": "2.22.0+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "0.1.13",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "0.0.16",
"ecosystem": "go"
},
{
"name": "github.com/microsoft/go-winio",
"direct": false,
"version": "0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/copystructure",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/mapstructure",
"direct": false,
"version": "1.3.1",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/mapstructure",
"direct": false,
"version": "1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/reflectwalk",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/moby/docker-image-spec",
"direct": false,
"version": "1.3.1",
"ecosystem": "go"
},
{
"name": "github.com/moby/term",
"direct": false,
"version": "0.0.0-20201216013528-df9cb8a40635",
"ecosystem": "go"
},
{
"name": "github.com/nvveen/gotty",
"direct": false,
"version": "0.0.0-20120604004816-cd527374f1e5",
"ecosystem": "go"
},
{
"name": "github.com/opencontainers/go-digest",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/opencontainers/image-spec",
"direct": false,
"version": "1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/opencontainers/runc",
"direct": false,
"version": "1.1.5",
"ecosystem": "go"
},
{
"name": "github.com/pelletier/go-toml",
"direct": false,
"version": "1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/pierrec/lz4/v4",
"direct": false,
"version": "4.1.18",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/rcrowley/go-metrics",
"direct": false,
"version": "0.0.0-20201227073835-cf1acfcdf475",
"ecosystem": "go"
},
{
"name": "github.com/rogpeppe/go-internal",
"direct": false,
"version": "1.11.0",
"ecosystem": "go"
},
{
"name": "github.com/rs/cors",
"direct": false,
"version": "1.7.0",
"ecosystem": "go"
},
{
"name": "github.com/sergi/go-diff",
"direct": false,
"version": "1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/sirupsen/logrus",
"direct": false,
"version": "1.8.1",
"ecosystem": "go"
},
{
"name": "github.com/spf13/afero",
"direct": false,
"version": "1.1.2",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cast",
"direct": false,
"version": "1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/jwalterweatherman",
"direct": false,
"version": "1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": false,
"version": "1.0.3",
"ecosystem": "go"
},
{
"name": "github.com/tidwall/match",
"direct": false,
"version": "1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/tidwall/pretty",
"direct": false,
"version": "1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/xeipuuv/gojsonpointer",
"direct": false,
"version": "0.0.0-20190809123943-df4f5c81cb3b",
"ecosystem": "go"
},
{
"name": "github.com/xeipuuv/gojsonreference",
"direct": false,
"version": "0.0.0-20180127040603-bd5ef7bd5415",
"ecosystem": "go"
},
{
"name": "github.com/xeipuuv/gojsonschema",
"direct": false,
"version": "1.2.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/multierr",
"direct": false,
"version": "1.6.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "0.18.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "0.9.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "0.17.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "0.16.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "0.14.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "0.7.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/cenkalti/backoff.v1",
"direct": false,
"version": "1.1.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "3.0.1",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 116,
"direct_count": 41,
"indirect_count": 75
}
},
"maintainership": {
"issues": {
"open_prs": 9,
"merged_prs": 385,
"open_issues": 2,
"closed_ratio": 0.8,
"closed_issues": 8,
"closed_unmerged_prs": 43
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "jensneuse",
"commits": 1318,
"avatar_url": "https://avatars.githubusercontent.com/u/11737109?v=4"
},
{
"type": "User",
"login": "devsergiy",
"commits": 227,
"avatar_url": "https://avatars.githubusercontent.com/u/818351?v=4"
},
{
"type": "User",
"login": "pvormste",
"commits": 193,
"avatar_url": "https://avatars.githubusercontent.com/u/4503955?v=4"
},
{
"type": "User",
"login": "buraksezer",
"commits": 176,
"avatar_url": "https://avatars.githubusercontent.com/u/33702537?v=4"
},
{
"type": "User",
"login": "chedom",
"commits": 72,
"avatar_url": "https://avatars.githubusercontent.com/u/12982070?v=4"
},
{
"type": "User",
"login": "kofoworola",
"commits": 24,
"avatar_url": "https://avatars.githubusercontent.com/u/15363616?v=4"
},
{
"type": "User",
"login": "mvid",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/74642?v=4"
},
{
"type": "User",
"login": "csilvers",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/1445223?v=4"
},
{
"type": "User",
"login": "jobergner",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/20546887?v=4"
},
{
"type": "User",
"login": "dnerdy",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/82307?v=4"
}
],
"contributors_sampled": 24,
"top_contributor_share": 0.631
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"codeql-analysis.yml",
"jira-pr-validator.yaml",
"v1.yml",
"v2.yml",
"visor.yaml"
],
"has_docs_dir": false,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 1,
"reason": "4 out of 30 merged PRs checked by a CI test -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 5 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 1,
"reason": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 7,
"reason": "SAST tool detected but not run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "236 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "dae0d8d8d0389e10f42476f31d0840835ed125e7",
"ran_at": "2026-08-04T05:55:07Z",
"aggregate_score": 4.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 0,
"decided_7d": 0,
"merged_30d": 0,
"authors_30d": 0,
"decided_30d": 0,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 0,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 0,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2026-06-24T14:13:11Z",
"oldest_open_prs": [
{
"number": 190,
"created_at": "2021-12-14T18:15:17Z",
"last_comment_at": "2021-12-14T18:15:56Z",
"last_comment_author": "sonarqubecloud"
},
{
"number": 292,
"created_at": "2022-07-29T10:27:11Z",
"last_comment_at": "2022-07-29T10:27:55Z",
"last_comment_author": "sonarqubecloud"
},
{
"number": 338,
"created_at": "2023-03-20T09:22:08Z",
"last_comment_at": "2023-03-21T09:23:52Z",
"last_comment_author": "sonarqubecloud"
},
{
"number": 370,
"created_at": "2023-08-07T11:45:12Z",
"last_comment_at": "2023-08-22T12:04:52Z",
"last_comment_author": "sonarqubecloud"
},
{
"number": 372,
"created_at": "2023-08-07T20:46:04Z",
"last_comment_at": "2023-08-16T15:15:02Z",
"last_comment_author": "sweep-ai-deprecated"
},
{
"number": 409,
"created_at": "2024-01-03T08:49:38Z",
"last_comment_at": "2024-01-31T15:15:54Z",
"last_comment_author": "sonarqubecloud"
},
{
"number": 420,
"created_at": "2024-02-06T08:58:17Z",
"last_comment_at": "2024-04-17T12:36:03Z",
"last_comment_author": "jeffy-mathew"
},
{
"number": 428,
"created_at": "2024-04-12T12:41:26Z",
"last_comment_at": "2024-04-12T12:41:52Z",
"last_comment_author": "sonarqubecloud"
},
{
"number": 444,
"created_at": "2026-05-08T19:40:18Z",
"last_comment_at": "2026-05-08T19:41:23Z",
"last_comment_author": "sonarqubecloud"
}
],
"last_merged_pr_at": "2026-06-24T14:13:09Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 298,
"created_at": "2022-09-28T11:36:32Z",
"last_comment_at": "2022-10-20T14:32:45Z",
"last_comment_author": "Aenimus"
},
{
"number": 369,
"created_at": "2023-08-07T11:43:13Z",
"last_comment_at": "2023-08-08T22:16:05Z",
"last_comment_author": "kevinlu1248"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/TykTechnologies/graphql-go-tools",
"host": "github.com",
"name": "graphql-go-tools",
"owner": "TykTechnologies"
},
"metrics": {
"overall": {
"key": "overall",
"band": "weak",
"name": "Overall health",
"note": "The weighted overall 46 is calibrated to 44 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 46,
"calibrated": 44,
"calibration": "2026-08-02"
}
}
],
"value": 44,
"inputs": {
"security": 43,
"vitality": 37,
"community": 28,
"governance": 66,
"calibration": "2026-08-02",
"engineering": 44,
"ai_readiness": 68,
"weighted_overall_raw": 46
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 37,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"commits_last_year": 6,
"human_commit_share": 1,
"days_since_last_push": 40,
"active_weeks_last_year": 5
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 40 days ago",
"points": 18,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 40
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "5/52 weeks with commits",
"points": 3.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 5
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "6 commits in the last year",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 6
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "weak",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"releases_count": 13,
"latest_release_tag": "v1.6.1",
"releases_from_tags": true,
"days_since_latest_release": 2674,
"mean_days_between_releases": 4.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "13 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 13
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2674 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 2674
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~4.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 4.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 40,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 40 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 40
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 28,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"forks": 5,
"stars": 21,
"watchers": 6,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "21 stars",
"points": 21.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 21
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "5 forks",
"points": 5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 5
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "6 watchers",
"points": 3.9,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 6
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"readme_badges": 1,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [
"github.com"
],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 66,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "weak",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 24,
"top_contributor_share": 0.631
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 63% of commits",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 63
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "24 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 24
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 87,
"inputs": {
"merged_prs": 385,
"open_issues": 2,
"closed_issues": 8,
"prs_merged_7d": 0,
"prs_decided_7d": 0,
"prs_merged_30d": 0,
"prs_decided_30d": 0,
"issue_closed_ratio": 0.8,
"closed_unmerged_prs": 43,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "80% of issues closed",
"points": 33.6,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 80
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "385/428 decided PRs merged",
"points": 27,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 385,
"decided": 428
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"followers": 229,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "TykTechnologies",
"public_repos": 250,
"account_age_days": 3897
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "229 followers of TykTechnologies",
"points": 17,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 229,
"login": "TykTechnologies"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "250 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 250
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"packages": [
"github.com/TykTechnologies/graphql-go-tools"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 2674
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 2674 days ago",
"points": 4,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 2674
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "13 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 13
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "weak",
"name": "Engineering Quality",
"value": 44,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "4 out of 30 merged PRs checked by a CI test -- score normalized to 1",
"points": 2,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "critical",
"name": "Documentation",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": false,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 43,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 4.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "4 out of 30 merged PRs checked by a CI test -- score normalized to 1",
"points": 0.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected but not run on all commits",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "236 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 116 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 116
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 51,
"inputs": {
"source": "osv",
"advisories": 89,
"affected_packages": 12,
"assessed_packages": 116,
"unassessed_packages": 0,
"affected_by_severity": "critical 1, high 5, moderate 3, unknown 3",
"direct_affected_packages": 3
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "3 affected: github.com/buger/jsonparser 1.1.1 (high 7.5), github.com/eclipse/paho.mqtt.golang 1.2.0 (moderate 5.3), github.com/vektah/gqlparser/v2 2.5.1 (moderate 5.3)",
"points": 11.1,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 3,
"packages": "github.com/buger/jsonparser 1.1.1 (high 7.5), github.com/eclipse/paho.mqtt.golang 1.2.0 (moderate 5.3), github.com/vektah/gqlparser/v2 2.5.1 (moderate 5.3)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "3 advisory-carrying package(s) unaddressed past 90 days; oldest published 782 days ago",
"points": 27.5,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 3,
"oldest": 782
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 116,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 10
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 68,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.97,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "97 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 97,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"v2/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"examples/chat/go.mod",
"examples/federation/go.mod",
"examples/kafka_pubsub/go.mod",
"examples/kafka_pubsub/transactional_producer/go.mod",
"go.mod",
"v2/examples/chat/go.mod",
"v2/examples/federation/go.mod",
"v2/examples/kafka_pubsub/go.mod",
"v2/examples/kafka_pubsub/transactional_producer/go.mod",
"v2/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, v2/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, v2/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 2144248,
"source_files_sampled": 1198,
"oversized_source_files": 24
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "24/1198 source files over 60KB",
"points": 53.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 1198,
"oversized": 24
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "excellent",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": [
"examples/chat/schema.graphql",
"examples/federation/accounts/graph/schema.graphqls",
"examples/federation/products/graph/schema.graphqls",
"examples/federation/reviews/graph/schema.graphqls",
"pkg/astparser/testdata/big_schema.graphql",
"pkg/astparser/testdata/github.schema.graphql",
"pkg/astparser/testdata/introspection_normalized.graphql",
"pkg/astparser/testdata/introspectionquery.graphql",
"pkg/astparser/testdata/starwars.schema.graphql",
"pkg/astparser/testdata/todo.graphql",
"pkg/astprinter/testdata/introspectionquery.graphql",
"pkg/astprinter/testdata/starwars.schema.graphql",
"pkg/astvalidation/reference/testsgo/test_schema.graphql",
"pkg/codegen/testdata/schema.graphql",
"pkg/execution/graphql_definitions/directives/graphql_datasource.graphql",
"pkg/execution/graphql_definitions/directives/http_json_datasource.graphql",
"pkg/execution/graphql_definitions/directives/http_polling_stream_datasource.graphql",
"pkg/execution/graphql_definitions/directives/mapping.graphql",
"pkg/execution/graphql_definitions/directives/mqtt_datasource.graphql",
"pkg/execution/graphql_definitions/directives/nats_datasource.graphql",
"pkg/execution/graphql_definitions/directives/pipeline_datasource.graphql",
"pkg/execution/graphql_definitions/directives/static_datasource.graphql",
"pkg/execution/graphql_definitions/directives/transformation.graphql",
"pkg/execution/graphql_definitions/directives/wasm_datasource.graphql",
"pkg/execution/graphql_definitions/enums/http_method.graphql",
"pkg/execution/graphql_definitions/enums/mapping_mode.graphql",
"pkg/execution/graphql_definitions/enums/parameter_source.graphql",
"pkg/execution/graphql_definitions/enums/transformation_mode.graphql",
"pkg/execution/graphql_definitions/inputs/header.graphql",
"pkg/execution/graphql_definitions/inputs/parameter.graphql",
"pkg/execution/graphql_definitions/inputs/statuscode_typename_mapping.graphql",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls",
"pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls",
"pkg/imports/testdata/cycle/a/a.graphql",
"pkg/imports/testdata/cycle/b/b.graphql",
"pkg/imports/testdata/deep/deeper/custom_types.graphql",
"pkg/imports/testdata/import_cycle.graphql",
"pkg/imports/testdata/nested/nested.graphql",
"pkg/imports/testdata/nested2/nested2.graphql",
"pkg/imports/testdata/regexonly/flat.graphql",
"pkg/imports/testdata/regexonly/mutation.graphql",
"pkg/imports/testdata/regexonly/query.graphql",
"pkg/imports/testdata/scalars/json.graphql",
"pkg/imports/testdata/schema.graphql",
"pkg/imports/testdata/types/mutation.graphql",
"pkg/imports/testdata/types/query.graphql",
"pkg/introspection/testdata/interfaces_implementing_interfaces.graphql",
"pkg/introspection/testdata/starwars.schema.graphql",
"pkg/starwars/testdata/queries/interface_fragments_on_union.graphql",
"pkg/starwars/testdata/star_wars.graphql",
"pkg/testing/federationtesting/accounts/graph/schema.graphqls",
"pkg/testing/federationtesting/products/graph/schema.graphqls",
"pkg/testing/federationtesting/reviews/graph/schema.graphqls",
"pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql",
"pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql",
"pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql",
"pkg/testing/federationtesting/testdata/queries/merged_field.graphql",
"pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql",
"pkg/testing/subscriptiontesting/schema.graphql",
"v2/examples/chat/schema.graphql",
"v2/examples/federation/accounts/graph/schema.graphqls",
"v2/examples/federation/products/graph/schema.graphqls",
"v2/examples/federation/reviews/graph/schema.graphqls",
"v2/examples/kafka_pubsub/schema.graphql",
"v2/pkg/astparser/testdata/big_schema.graphql",
"v2/pkg/astparser/testdata/github.schema.graphql",
"v2/pkg/astparser/testdata/introspection_normalized.graphql",
"v2/pkg/astparser/testdata/introspectionquery.graphql",
"v2/pkg/astparser/testdata/starwars.schema.graphql",
"v2/pkg/astparser/testdata/todo.graphql",
"v2/pkg/astprinter/testdata/introspectionquery.graphql",
"v2/pkg/astprinter/testdata/starwars.schema.graphql",
"v2/pkg/astvalidation/reference/testsgo/test_schema.graphql",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls",
"v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls",
"v2/pkg/imports/testdata/cycle/a/a.graphql",
"v2/pkg/imports/testdata/cycle/b/b.graphql",
"v2/pkg/imports/testdata/deep/deeper/custom_types.graphql",
"v2/pkg/imports/testdata/import_cycle.graphql",
"v2/pkg/imports/testdata/nested/nested.graphql",
"v2/pkg/imports/testdata/nested2/nested2.graphql",
"v2/pkg/imports/testdata/regexonly/flat.graphql",
"v2/pkg/imports/testdata/regexonly/mutation.graphql",
"v2/pkg/imports/testdata/regexonly/query.graphql",
"v2/pkg/imports/testdata/scalars/json.graphql",
"v2/pkg/imports/testdata/schema.graphql",
"v2/pkg/imports/testdata/types/mutation.graphql",
"v2/pkg/imports/testdata/types/query.graphql",
"v2/pkg/introspection/testdata/interfaces_implementing_interfaces.graphql",
"v2/pkg/introspection/testdata/starwars.schema.graphql",
"v2/pkg/starwars/testdata/queries/interface_fragments_on_union.graphql",
"v2/pkg/starwars/testdata/star_wars.graphql",
"v2/pkg/testing/federationtesting/accounts/graph/schema.graphqls",
"v2/pkg/testing/federationtesting/products/graph/schema.graphqls",
"v2/pkg/testing/federationtesting/reviews/graph/schema.graphqls",
"v2/pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/merged_field.graphql",
"v2/pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql",
"v2/pkg/testing/subscriptiontesting/schema.graphql"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "examples/chat/schema.graphql, examples/federation/accounts/graph/schema.graphqls, examples/federation/products/graph/schema.graphqls, examples/federation/reviews/graph/schema.graphqls, pkg/astparser/testdata/big_schema.graphql, pkg/astparser/testdata/github.schema.graphql, pkg/astparser/testdata/introspection_normalized.graphql, pkg/astparser/testdata/introspectionquery.graphql, pkg/astparser/testdata/starwars.schema.graphql, pkg/astparser/testdata/todo.graphql, pkg/astprinter/testdata/introspectionquery.graphql, pkg/astprinter/testdata/starwars.schema.graphql, pkg/astvalidation/reference/testsgo/test_schema.graphql, pkg/codegen/testdata/schema.graphql, pkg/execution/graphql_definitions/directives/graphql_datasource.graphql, pkg/execution/graphql_definitions/directives/http_json_datasource.graphql, pkg/execution/graphql_definitions/directives/http_polling_stream_datasource.graphql, pkg/execution/graphql_definitions/directives/mapping.graphql, pkg/execution/graphql_definitions/directives/mqtt_datasource.graphql, pkg/execution/graphql_definitions/directives/nats_datasource.graphql, pkg/execution/graphql_definitions/directives/pipeline_datasource.graphql, pkg/execution/graphql_definitions/directives/static_datasource.graphql, pkg/execution/graphql_definitions/directives/transformation.graphql, pkg/execution/graphql_definitions/directives/wasm_datasource.graphql, pkg/execution/graphql_definitions/enums/http_method.graphql, pkg/execution/graphql_definitions/enums/mapping_mode.graphql, pkg/execution/graphql_definitions/enums/parameter_source.graphql, pkg/execution/graphql_definitions/enums/transformation_mode.graphql, pkg/execution/graphql_definitions/inputs/header.graphql, pkg/execution/graphql_definitions/inputs/parameter.graphql, pkg/execution/graphql_definitions/inputs/statuscode_typename_mapping.graphql, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls, pkg/imports/testdata/cycle/a/a.graphql, pkg/imports/testdata/cycle/b/b.graphql, pkg/imports/testdata/deep/deeper/custom_types.graphql, pkg/imports/testdata/import_cycle.graphql, pkg/imports/testdata/nested/nested.graphql, pkg/imports/testdata/nested2/nested2.graphql, pkg/imports/testdata/regexonly/flat.graphql, pkg/imports/testdata/regexonly/mutation.graphql, pkg/imports/testdata/regexonly/query.graphql, pkg/imports/testdata/scalars/json.graphql, pkg/imports/testdata/schema.graphql, pkg/imports/testdata/types/mutation.graphql, pkg/imports/testdata/types/query.graphql, pkg/introspection/testdata/interfaces_implementing_interfaces.graphql, pkg/introspection/testdata/starwars.schema.graphql, pkg/starwars/testdata/queries/interface_fragments_on_union.graphql, pkg/starwars/testdata/star_wars.graphql, pkg/testing/federationtesting/accounts/graph/schema.graphqls, pkg/testing/federationtesting/products/graph/schema.graphqls, pkg/testing/federationtesting/reviews/graph/schema.graphqls, pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql, pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql, pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql, pkg/testing/federationtesting/testdata/queries/merged_field.graphql, pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql, pkg/testing/subscriptiontesting/schema.graphql, v2/examples/chat/schema.graphql, v2/examples/federation/accounts/graph/schema.graphqls, v2/examples/federation/products/graph/schema.graphqls, v2/examples/federation/reviews/graph/schema.graphqls, v2/examples/kafka_pubsub/schema.graphql, v2/pkg/astparser/testdata/big_schema.graphql, v2/pkg/astparser/testdata/github.schema.graphql, v2/pkg/astparser/testdata/introspection_normalized.graphql, v2/pkg/astparser/testdata/introspectionquery.graphql, v2/pkg/astparser/testdata/starwars.schema.graphql, v2/pkg/astparser/testdata/todo.graphql, v2/pkg/astprinter/testdata/introspectionquery.graphql, v2/pkg/astprinter/testdata/starwars.schema.graphql, v2/pkg/astvalidation/reference/testsgo/test_schema.graphql, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls, v2/pkg/imports/testdata/cycle/a/a.graphql, v2/pkg/imports/testdata/cycle/b/b.graphql, v2/pkg/imports/testdata/deep/deeper/custom_types.graphql, v2/pkg/imports/testdata/import_cycle.graphql, v2/pkg/imports/testdata/nested/nested.graphql, v2/pkg/imports/testdata/nested2/nested2.graphql, v2/pkg/imports/testdata/regexonly/flat.graphql, v2/pkg/imports/testdata/regexonly/mutation.graphql, v2/pkg/imports/testdata/regexonly/query.graphql, v2/pkg/imports/testdata/scalars/json.graphql, v2/pkg/imports/testdata/schema.graphql, v2/pkg/imports/testdata/types/mutation.graphql, v2/pkg/imports/testdata/types/query.graphql, v2/pkg/introspection/testdata/interfaces_implementing_interfaces.graphql, v2/pkg/introspection/testdata/starwars.schema.graphql, v2/pkg/starwars/testdata/queries/interface_fragments_on_union.graphql, v2/pkg/starwars/testdata/star_wars.graphql, v2/pkg/testing/federationtesting/accounts/graph/schema.graphqls, v2/pkg/testing/federationtesting/products/graph/schema.graphqls, v2/pkg/testing/federationtesting/reviews/graph/schema.graphqls, v2/pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql, v2/pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql, v2/pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql, v2/pkg/testing/federationtesting/testdata/queries/merged_field.graphql, v2/pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql, v2/pkg/testing/subscriptiontesting/schema.graphql",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples/chat/schema.graphql, examples/federation/accounts/graph/schema.graphqls, examples/federation/products/graph/schema.graphqls, examples/federation/reviews/graph/schema.graphqls, pkg/astparser/testdata/big_schema.graphql, pkg/astparser/testdata/github.schema.graphql, pkg/astparser/testdata/introspection_normalized.graphql, pkg/astparser/testdata/introspectionquery.graphql, pkg/astparser/testdata/starwars.schema.graphql, pkg/astparser/testdata/todo.graphql, pkg/astprinter/testdata/introspectionquery.graphql, pkg/astprinter/testdata/starwars.schema.graphql, pkg/astvalidation/reference/testsgo/test_schema.graphql, pkg/codegen/testdata/schema.graphql, pkg/execution/graphql_definitions/directives/graphql_datasource.graphql, pkg/execution/graphql_definitions/directives/http_json_datasource.graphql, pkg/execution/graphql_definitions/directives/http_polling_stream_datasource.graphql, pkg/execution/graphql_definitions/directives/mapping.graphql, pkg/execution/graphql_definitions/directives/mqtt_datasource.graphql, pkg/execution/graphql_definitions/directives/nats_datasource.graphql, pkg/execution/graphql_definitions/directives/pipeline_datasource.graphql, pkg/execution/graphql_definitions/directives/static_datasource.graphql, pkg/execution/graphql_definitions/directives/transformation.graphql, pkg/execution/graphql_definitions/directives/wasm_datasource.graphql, pkg/execution/graphql_definitions/enums/http_method.graphql, pkg/execution/graphql_definitions/enums/mapping_mode.graphql, pkg/execution/graphql_definitions/enums/parameter_source.graphql, pkg/execution/graphql_definitions/enums/transformation_mode.graphql, pkg/execution/graphql_definitions/inputs/header.graphql, pkg/execution/graphql_definitions/inputs/parameter.graphql, pkg/execution/graphql_definitions/inputs/statuscode_typename_mapping.graphql, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls, pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls, pkg/imports/testdata/cycle/a/a.graphql, pkg/imports/testdata/cycle/b/b.graphql, pkg/imports/testdata/deep/deeper/custom_types.graphql, pkg/imports/testdata/import_cycle.graphql, pkg/imports/testdata/nested/nested.graphql, pkg/imports/testdata/nested2/nested2.graphql, pkg/imports/testdata/regexonly/flat.graphql, pkg/imports/testdata/regexonly/mutation.graphql, pkg/imports/testdata/regexonly/query.graphql, pkg/imports/testdata/scalars/json.graphql, pkg/imports/testdata/schema.graphql, pkg/imports/testdata/types/mutation.graphql, pkg/imports/testdata/types/query.graphql, pkg/introspection/testdata/interfaces_implementing_interfaces.graphql, pkg/introspection/testdata/starwars.schema.graphql, pkg/starwars/testdata/queries/interface_fragments_on_union.graphql, pkg/starwars/testdata/star_wars.graphql, pkg/testing/federationtesting/accounts/graph/schema.graphqls, pkg/testing/federationtesting/products/graph/schema.graphqls, pkg/testing/federationtesting/reviews/graph/schema.graphqls, pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql, pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql, pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql, pkg/testing/federationtesting/testdata/queries/merged_field.graphql, pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql, pkg/testing/subscriptiontesting/schema.graphql, v2/examples/chat/schema.graphql, v2/examples/federation/accounts/graph/schema.graphqls, v2/examples/federation/products/graph/schema.graphqls, v2/examples/federation/reviews/graph/schema.graphqls, v2/examples/kafka_pubsub/schema.graphql, v2/pkg/astparser/testdata/big_schema.graphql, v2/pkg/astparser/testdata/github.schema.graphql, v2/pkg/astparser/testdata/introspection_normalized.graphql, v2/pkg/astparser/testdata/introspectionquery.graphql, v2/pkg/astparser/testdata/starwars.schema.graphql, v2/pkg/astparser/testdata/todo.graphql, v2/pkg/astprinter/testdata/introspectionquery.graphql, v2/pkg/astprinter/testdata/starwars.schema.graphql, v2/pkg/astvalidation/reference/testsgo/test_schema.graphql, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition-non-null.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-definition.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition-non-null.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/lack-extend-definition.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined-non-null.graphqls, v2/pkg/federation/sdlmerge/testdata/validate-subgraph/well-defined.graphqls, v2/pkg/imports/testdata/cycle/a/a.graphql, v2/pkg/imports/testdata/cycle/b/b.graphql, v2/pkg/imports/testdata/deep/deeper/custom_types.graphql, v2/pkg/imports/testdata/import_cycle.graphql, v2/pkg/imports/testdata/nested/nested.graphql, v2/pkg/imports/testdata/nested2/nested2.graphql, v2/pkg/imports/testdata/regexonly/flat.graphql, v2/pkg/imports/testdata/regexonly/mutation.graphql, v2/pkg/imports/testdata/regexonly/query.graphql, v2/pkg/imports/testdata/scalars/json.graphql, v2/pkg/imports/testdata/schema.graphql, v2/pkg/imports/testdata/types/mutation.graphql, v2/pkg/imports/testdata/types/query.graphql, v2/pkg/introspection/testdata/interfaces_implementing_interfaces.graphql, v2/pkg/introspection/testdata/starwars.schema.graphql, v2/pkg/starwars/testdata/queries/interface_fragments_on_union.graphql, v2/pkg/starwars/testdata/star_wars.graphql, v2/pkg/testing/federationtesting/accounts/graph/schema.graphqls, v2/pkg/testing/federationtesting/products/graph/schema.graphqls, v2/pkg/testing/federationtesting/reviews/graph/schema.graphqls, v2/pkg/testing/federationtesting/testdata/queries/complex_nesting.graphql, v2/pkg/testing/federationtesting/testdata/queries/interface_fragment_on_object.graphql, v2/pkg/testing/federationtesting/testdata/queries/interface_fragments_on_union.graphql, v2/pkg/testing/federationtesting/testdata/queries/merged_field.graphql, v2/pkg/testing/federationtesting/testdata/queries/object_fragment_on_interface.graphql, v2/pkg/testing/subscriptiontesting/schema.graphql"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"cli",
"library"
],
"scores": {
"cli": 7,
"library": 6,
"network-service": 3
},
"primary": "cli",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 6
},
{
"tier": "dependencies",
"label": "cli",
"source": "dep:github.com/spf13/cobra",
"weight": 4
},
{
"tier": "structure",
"label": "cli",
"source": "tree.go_main",
"weight": 3
},
{
"tier": "structure",
"label": "network-service",
"source": "api_schema",
"weight": 3
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Community profile unavailable"
],
"report_type": "repository",
"generated_at": "2026-08-04T05:55:35.059236Z",
"schema_version": "0.30.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/TykTechnologies/graphql-go-tools.svg",
"full_name": "TykTechnologies/graphql-go-tools",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with TykTechnologies/graphql-go-tools. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.3.1, schema v0.30.0 — full methodology · metrics wiki.
