Public recordCritical
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 18:35 UTC
adamjstewart / spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
adamjstewart/spack holds a health index of 26 out of 100, placing it in the Critical band. It scores highest on Sustainability & Governance (73/100) and lowest on Community & Adoption (9/100). It was last updated 44 days ago. 11 contributors account for most of its recent work.
26
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
26
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Abandonment Policy applies a 60% multiplier to weighted overall health and gives it a ceiling of 49.
Ownership
Adam J. StewartPersonal account
370 followers101 public repossince Apr 2015Technical University of Munich
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
30
Development activity
18Critical
Abandonment alert
Work has arrived and nobody has attended to it
no human commit in 508 daysautomated commits excludedreleases stalledOpenSSF Scorecard reports it unmaintainedcontinuous integration brokenOverall rating: At risk ceiling
Silence alone is never the finding — a small, finished library may need no commits for years. This alert requires both: no human commit for a long time, and obligations the project is visibly not discharging. Automated commits do not count as maintenance.
How abandonment is assessedHow it's scored
| 18/36 | Push recency — last push 44 days ago |
| 0/36 | Commit cadence — 0/52 weeks with commits |
| 0/18 | Commit volume — 0 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 0 |
| human_commit_share | 0.94 |
| days_since_last_push | 44 |
| active_weeks_last_year | 0 |
Release discipline
48At risk
How it's scored
| 16.2/27 | Ships releases — 6 version tags (no GitHub releases) |
| 0/36 | Release recency — latest release 4,142 days ago |
| 27/27 | Release cadence — a release every ~37.2 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 6 |
| latest_release_tag | v0.8.17 |
| releases_from_tags | yes |
| days_since_latest_release | 4,142 |
| mean_days_between_releases | 37.2 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
9
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 1 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
19Critical
How it's scored
| 0/22.5 | README |
| 16.9/22.5 | License — license file present, not a recognized license |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | no |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
73
Maintainer resilience (bus factor)
98Excellent
How it's scored
| 54/54 | Bus factor — 11 contributor(s) cover half of all commits |
| 20/22.5 | Commit distribution — top contributor authored 11% of commits |
| 13.5/13.5 | Contributor breadth — 99 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 90 contributing companies or organizations |
Inputs used
| bus_factor | 11 |
| contributors_sampled | 99 |
| top_contributor_share | 0.111 |
Issue & PR responsiveness
48At risk
How it's scored
| 46.8/46.8 | Issue resolution — 100% of issues closed |
| 1.3/38.3 | PR acceptance — 4/115 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 4 |
| open_issues | 0 |
| closed_issues | 6 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 111 |
Ownership & stewardship
67Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 18.5/25 | Owner reach — 370 followers of adamjstewart |
| 25/25 | Track record — 101 public repos, account ~11 yr old |
Inputs used
| followers | 370 |
| owner_type | User |
| is_verified | — |
| owner_login | adamjstewart |
| public_repos | 101 |
| account_age_days | 4,116 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Engineering Quality
Are baseline engineering and documentation practices in place?
58
Engineering practices
80Good
How it's scored
| 24/24 | CI workflows — 9 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .flake8 |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
25Critical
How it's scored
| 0/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://spack.io/ |
| 0/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | https://spack.io/ |
| has_readme | no |
| has_docs_dir | no |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
40
Security posture
40At risk
How it's scored
| 6.8/7.5 | Binary-Artifacts — binaries present in source code |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 90 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | License — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — no SAST tool detected |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 10 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 14 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 4 |
| scorecard_aggregate | 4 |
Excluded from scoring (no data or not applicable): ci_tests, packaging, pinned_dependencies, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
70
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 93 of 94 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.989 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
89Excellent
How it's scored
| 18/18 | One-command bootstrap — lib/spack/docs/Makefile, lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile, lib/spack/spack/test/data/make/affirmative/check_test/Makefile, lib/spack/spack/test/data/make/affirmative/expansion/Makefile, lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile, lib/spack/spack/test/data/make/affirmative/include/Makefile, lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile, lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile, lib/spack/spack/test/data/make/affirmative/spaces/Makefile, lib/spack/spack/test/data/make/affirmative/test_check/Makefile, lib/spack/spack/test/data/make/affirmative/three_targets/Makefile, lib/spack/spack/test/data/make/negative/partial_match/Makefile, lib/spack/spack/test/data/make/negative/variable/Makefile, share/spack/templates/depfile/Makefile, var/spack/repos/builtin/packages/alglib/Makefile |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .flake8 |
| 11/11 | Static type checking — lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed, lib/spack/external/_vendoring/ruamel/yaml/py.typed |
| 10/10 | Reproducible environment — devcontainer, Dockerfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 8/8 | Automated maintenance — 6 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | yes |
| typed_language | no |
| bootstrap_files | lib/spack/docs/Makefile, lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile, lib/spack/spack/test/data/make/affirmative/check_test/Makefile, lib/spack/spack/test/data/make/affirmative/expansion/Makefile, lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile, lib/spack/spack/test/data/make/affirmative/include/Makefile, lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile, lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile, lib/spack/spack/test/data/make/affirmative/spaces/Makefile, lib/spack/spack/test/data/make/affirmative/test_check/Makefile, lib/spack/spack/test/data/make/affirmative/three_targets/Makefile, lib/spack/spack/test/data/make/negative/partial_match/Makefile, lib/spack/spack/test/data/make/negative/variable/Makefile, share/spack/templates/depfile/Makefile, var/spack/repos/builtin/packages/alglib/Makefile |
| has_devcontainer | yes |
| has_linter_config | yes |
| typecheck_configs | lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed, lib/spack/external/_vendoring/ruamel/yaml/py.typed |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.06 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
How it's scored
| 27/45 | Type-checkable code — Python with type-check config (lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed, lib/spack/external/_vendoring/ruamel/yaml/py.typed) |
| 54.9/55 | Manageable file sizes — 22/9,560 source files over 60KB |
Inputs used
| primary_language | Python |
| largest_source_bytes | 204,414 |
| source_files_sampled | 9,560 |
| oversized_source_files | 22 |
Key facts
0GitHub stars
99contributors
0commits, last 12 months
44days since last push
6releases
11bus factor
0open issues
PyPIpackage ecosystems
Data collection warnings
- Community profile unavailable
- Could not fetch pypi package 'spack' from its registry
- No resolved dependencies carried a version and a supported ecosystem
More detail
OpenSSF Scorecard 4.0 / 10
4.0aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 9 | Binary-Artifacts | binaries present in source code |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 90 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | internal error: internal error: invalid Dockerfile |
| 0 | SAST | no SAST tool detected |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 10 existing vulnerabilities detected |
Direct dependencies 2
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| PyPI | clingo | — | pyproject.toml |
| PyPI | setuptools | — | pyproject.toml |
All dependencies 2
Full resolved dependency set from the GitHub dependency graph: 2 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| PyPI | clingo | — | direct |
| PyPI | setuptools | — | direct |
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 221976,
"has_wiki": true,
"homepage": "https://spack.io/",
"languages": {
"C": 49894,
"M4": 2111,
"C++": 2816,
"Lua": 3080,
"Tcl": 2844,
"HTML": 2365,
"Perl": 615,
"Ruby": 2492,
"CMake": 13351,
"Shell": 517031,
"Prolog": 109100,
"Python": 25234488,
"BitBake": 4549,
"Fortran": 561,
"Makefile": 11968,
"Batchfile": 9760,
"Dockerfile": 12941,
"PowerShell": 7937,
"Standard ML": 2592,
"RouterOS Script": 37
},
"pushed_at": "2026-06-12T07:14:26Z",
"created_at": "2016-01-11T18:04:18Z",
"owner_type": "User",
"updated_at": "2025-03-05T09:49:03Z",
"description": "A flexible package manager that supports multiple versions, configurations, platforms, and compilers.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "develop",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": null,
"name": "Adam J. Stewart",
"type": "User",
"login": "adamjstewart",
"company": "Technical University of Munich",
"location": "Munich, Germany",
"followers": 370,
"avatar_url": "https://avatars.githubusercontent.com/u/12021217?v=4",
"created_at": "2015-04-19T17:00:05Z",
"is_verified": null,
"public_repos": 101,
"account_age_days": 4116
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v0.8.17",
"kind": "patch",
"published_at": "2015-03-24T17:17:18Z"
},
{
"tag": "v0.8.16",
"kind": "patch",
"published_at": "2015-03-14T03:41:59Z"
},
{
"tag": "v0.8.15",
"kind": "patch",
"published_at": "2015-02-24T18:42:58Z"
},
{
"tag": "v0.8.11",
"kind": "patch",
"published_at": "2014-11-06T21:22:15Z"
},
{
"tag": "v0.8.10",
"kind": "patch",
"published_at": "2014-10-28T06:04:47Z"
},
{
"tag": "v0.8.5",
"kind": "patch",
"published_at": "2014-09-19T16:56:00Z"
}
],
"recent_commits": [
{
"oid": "f015b18230d87ded947481c709248c0080bde2e7",
"body": "Signed-off-by: Massimiliano Culpo <massimiliano.culpo@gmail.com>",
"is_bot": false,
"headline": "hydrogen: update to use oneapi packages (#49293)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2025-03-05T08:06:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa9e610fa6f59a2f54ef0780389e61e0d34386e0",
"body": "This package has not been maintained since 2016.\n\nWe maintain an active fork in the hydrogen\npackage, so remove this one.\n\nSigned-off-by: Massimiliano Culpo <massimiliano.culpo@gmail.com>",
"is_bot": false,
"headline": "elemental: remove deprecated package (#49291)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2025-03-05T07:36:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d62045c30c0c99fbc650c5317b8ce2fda407eee",
"body": "* py-networkx: add new versions up to 3.4.2\n* py-networkx: add more requirements\n* py-networkx: fix typo\n* py-networkx: fix python and py-setuptools dependencies\n\n---------\n\nCo-authored-by: Joseph C Wang <joequant@gmail.com>",
"is_bot": false,
"headline": "py-networkx: add up to v3.4.2 (#49289)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2025-03-05T01:02:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b03173b99f28c32f835c04315474e4edde18eb3",
"body": "* add gettext dependency\n\n* typo\n\n* style",
"is_bot": false,
"headline": "r-packages: add missing gettext dependencies (#48910)",
"author_name": "Chris Marsh",
"author_login": "Chrismarsh",
"committed_at": "2025-03-04T23:07:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36fcdb8cfaef60b2c1602444074868bbedcf52f2",
"body": "The sha256sum for the 2025-02-27 version of SEACAS is incorrect\ndue to the movement of the tagged version.",
"is_bot": false,
"headline": "Update the incorrect sha for the SEACAS package.py (#49292)",
"author_name": "mvlopri",
"author_login": null,
"committed_at": "2025-03-04T23:03:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d5b17fbf20530f4ab67efe7c7f3cacce0f2b7b6",
"body": "* Update rpy2 to newest version and clean up package\n\n* Add me as maintainer\n\n* Update depends section as per review. Add ipython variant. Fix some ranges and add support for python 3.9. Deprecated outdated versions\n\n* refine depends_on and remove redundant version info\n\n* style",
"is_bot": false,
"headline": "py-rpy2: Add 3.5.17 (#48911)",
"author_name": "Chris Marsh",
"author_login": "Chrismarsh",
"committed_at": "2025-03-04T22:58:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6e32929550e0d2d0f49e444656198516651a35f",
"body": "…ild (#49282)",
"is_bot": false,
"headline": "flux-sched: Apply workarounds for oneAPI compiler for problem with bu…",
"author_name": "Piotr Sacharuk",
"author_login": "PiotrSacharuk",
"committed_at": "2025-03-04T22:28:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60f54df964be31e9fa8491ceec924bf14e1b6ce9",
"body": null,
"is_bot": false,
"headline": "Explicitly depend on gettext for libintl (#48908)",
"author_name": "Chris Marsh",
"author_login": "Chrismarsh",
"committed_at": "2025-03-04T22:25:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "487df807cc83e2129f2e1f2e45019fd143d68242",
"body": "* veccore: add typo for clang\n\n* veccore: apply ScalarWrapper.h patch for all compilers\n\n---------\n\nCo-authored-by: Joseph C Wang <joequant@gmail.com>",
"is_bot": false,
"headline": "veccore: add typo fix for clang (#49288)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2025-03-04T21:35:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cacdf84964a3f7e7ab4d6e774fbc42d25d8b0edc",
"body": null,
"is_bot": false,
"headline": "ci: add support for high priority local mirror (#49264)",
"author_name": "Zack Galbreath",
"author_login": "zackgalbreath",
"committed_at": "2025-03-04T20:47:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2293c758f11bcf98db6fbec1442b8b1c49a4f00",
"body": "…n creating an environment. (#49084)\n\n* Adding ability for repo paths from a manifest file to be expanded when creating an environment.\n\nA unit test was added to check that an environment variable will be expanded.\nAlso, a bug was fixed in the expansion of develop paths where if an environment varia\n[…]\n bug was fixed in the expansion of develop paths where if an environment variable\nwas in the path that then produced an absolute path the path would not be extended.\n\n* Messed up resolving last rebase",
"is_bot": false,
"headline": "Adding ability for repo paths from a manifest file to be expanded whe…",
"author_name": "fbrechin",
"author_login": "fbrechin",
"committed_at": "2025-03-04T17:52:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f5a275adf5296eb6360533373d06b360fb6589f2",
"body": null,
"is_bot": false,
"headline": "gitignore: remove *_archive (#49278)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2025-03-04T17:37:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "615ced32cd0f3a869562df1211af060dff73a860",
"body": null,
"is_bot": false,
"headline": "protobuf: add v3.29.3 (#49246)",
"author_name": "Paul",
"author_login": "paulbry",
"committed_at": "2025-03-04T17:29:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc04d963e5cfe37fcf9d14af00aca841ac5eae1d",
"body": "Signed-off-by: Massimiliano Culpo <massimiliano.culpo@gmail.com>",
"is_bot": false,
"headline": "Remove debug print statements in unit-tests (#49280)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2025-03-04T17:29:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11051ce5c77df7ee1bbc69dac461e5880c62aefe",
"body": null,
"is_bot": false,
"headline": "CP2K: Add GRPP support (#49232)",
"author_name": "Taillefumier Mathieu",
"author_login": "mtaillefumier",
"committed_at": "2025-03-04T13:54:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "631bddc52ec1ef292e8afe92fd626546143cc510",
"body": "* py-pyarrow: add v19.0.1\n\n* Environment variables no longer needed either\n\n* Remove py-pyarrow variants",
"is_bot": false,
"headline": "py-pyarrow: add v19.0.1 (#49149)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2025-03-04T12:20:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5f40aa7fb3f6cf9638a7567a96e9c91db88b53b",
"body": null,
"is_bot": false,
"headline": "OpenCV: fix +cuda build (#49146)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2025-03-04T12:19:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57e0798af26a6e761977f3d48265172560d7f62b",
"body": null,
"is_bot": false,
"headline": "py-pip: mark Python 3.12+ support (#49148)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2025-03-04T12:18:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0161b662f73b75d25b31b5422f336eb97c26cdb8",
"body": null,
"is_bot": false,
"headline": "conduit: do not pass link flags to ar (#49263)",
"author_name": "Chris White",
"author_login": "white238",
"committed_at": "2025-03-04T02:53:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa55b196809072456f6b2e185543dcaf200ac1da",
"body": "* fix asan for hsa-rocr-dev\n* add libclang_rt.asan-x86_64.so to LD_LIBRARY_PATH\n* fix +asan for hipsparselt\n* fix rocm-openmp-extras asan and add rccl +asan support\n* add missing comgr build env variables\n* add missing rocm-smi-lib build env variables\n* minor dependency change\n* fix style",
"is_bot": false,
"headline": "fix +asan in ROCm packages (#48745)",
"author_name": "afzpatel",
"author_login": "afzpatel",
"committed_at": "2025-03-04T01:57:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8cfffd88faf6cf7d7b2cdc132435797e546155c7",
"body": "Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.3.4 to 8.3.5.\n- [Release notes](https://github.com/pytest-dev/pytest/releases)\n- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)\n- [Commits](https://github.com/pytest-dev/pytest/compare/8.3.4...8.3.5)\n\n---\nupdated-\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump pytest from 8.3.4 to 8.3.5 in /lib/spack/docs (#49268)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-03-04T01:18:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2f8dcb809775cb2772e9823535179a3e92a21e1d",
"body": "Bumps [python-levenshtein](https://github.com/rapidfuzz/python-Levenshtein) from 0.26.1 to 0.27.1.\n- [Release notes](https://github.com/rapidfuzz/python-Levenshtein/releases)\n- [Changelog](https://github.com/rapidfuzz/python-Levenshtein/blob/main/HISTORY.md)\n- [Commits](https://github.com/rapidfuzz/\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump python-levenshtein in /lib/spack/docs (#49269)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-03-04T01:17:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5b70fa8cc87e78fb64e2580dc59b7d982ef25d2e",
"body": "Bumps [sphinx](https://github.com/sphinx-doc/sphinx) from 8.2.1 to 8.2.3.\n- [Release notes](https://github.com/sphinx-doc/sphinx/releases)\n- [Changelog](https://github.com/sphinx-doc/sphinx/blob/master/CHANGES.rst)\n- [Commits](https://github.com/sphinx-doc/sphinx/compare/v8.2.1...v8.2.3)\n\n---\nupdate\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump sphinx from 8.2.1 to 8.2.3 in /lib/spack/docs (#49270)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-03-04T01:17:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b4025e89ed08cb74e276650607fab68b85353bf4",
"body": null,
"is_bot": false,
"headline": "py-torchmetrics: add v1.6.2 (#49262)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2025-03-04T01:15:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8db74e1b2fd7169378315e8e5e594c87acaef155",
"body": "* tmux: add 3.5a, 3.5, and 3.3\n\n* tmux: patch is in releases from 3.5 onward\n\n* tmux: versions 3.5 and newer can use jemalloc",
"is_bot": false,
"headline": "tmux: add 3.5a, 3.5, and 3.3 (#49259)",
"author_name": "Eric Berquist",
"author_login": "berquist",
"committed_at": "2025-03-04T01:12:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fcfbadba7e332d5c35743fbc75a0f297e1c4462",
"body": "* qwt: support building against Qt6\n\n* qwt: fix style\n\n* qwt: depends_on qt-base+opengl+widgets when +opengl\n\n* visit: patch for missing cmath include\n\n---------\n\nCo-authored-by: Bernhard Kaindl <contact@bernhard.kaindl.dev>",
"is_bot": false,
"headline": "qwt: add v6.2.0, v6.3.0, support Qt6 (#45604)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2025-03-04T00:25:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13ec35873fdc7cae9eb36a782bea10c2b59810bb",
"body": "* pull in new changes from axom project\n\n* add new versions\n\n* convert more conditionals to spec.satisfies\n\n-------------\nCo-authored-by: white238 <white238@users.noreply.github.com>",
"is_bot": false,
"headline": "Axom: Changes from Axom repository (#49183)",
"author_name": "Chris White",
"author_login": "white238",
"committed_at": "2025-03-03T23:47:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f96b6eac2b97d683b03f60907c6623d0d73368f3",
"body": "* Adding xolotl package\n\n* [@spackbot] updating style on behalf of PhilipFackler\n\n* Removing redundant text\n\n* Add blank line\n\n* Update var/spack/repos/builtin/packages/xolotl/package.py\n\nCo-authored-by: Wouter Deconinck <wdconinc@gmail.com>\n\n* Update var/spack/repos/builtin/packages/xolotl/package.\n[…]\nnc@gmail.com>\n\n* Switch to CudaPackage and remove source dir from runtime env\n\n* [@spackbot] updating style on behalf of PhilipFackler\n\n---------\n\nCo-authored-by: Wouter Deconinck <wdconinc@gmail.com>",
"is_bot": false,
"headline": "xolotl: new package (#48876)",
"author_name": "Philip Fackler",
"author_login": "PhilipFackler",
"committed_at": "2025-03-03T21:18:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "933a1a5cd9116539ff38016125bea4560c491cfd",
"body": null,
"is_bot": false,
"headline": "update (#49261)",
"author_name": "Rocco Meli",
"author_login": "RMeli",
"committed_at": "2025-03-03T17:38:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2b9914efc6ba15a4b56341da1515642a5614275",
"body": "This commit adds ACTS version 39.2.0 and detray version 0.89.0.",
"is_bot": false,
"headline": "acts dependencies: new versions as of 2025/03/03 (#49253)",
"author_name": "Stephen Nicholas Swatman",
"author_login": "stephenswat",
"committed_at": "2025-03-03T16:32:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ce9596981d1310c92f52a0de96570d4adefcfc1",
"body": "* multicharge: add v0.3.1\n\n* fix url",
"is_bot": false,
"headline": "multicharge: add v0.3.1 (#49255)",
"author_name": "Rocco Meli",
"author_login": "RMeli",
"committed_at": "2025-03-03T14:32:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc30fe1f6bbd0214e4c0b09c33b8a45bc5cf8d22",
"body": "* librsvg: add v2.56.4, v2.57.3, v2.58.2\n\n---------\n\nCo-authored-by: Harmen Stoppels <me@harmenstoppels.nl>",
"is_bot": false,
"headline": "librsvg: add v2.56.4, v2.57.3, v2.58.2 (#45734)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2025-03-02T22:08:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25a4b983599b36e68c403a9976fc4ddeddbc8a2a",
"body": null,
"is_bot": false,
"headline": "jacamar-ci: add v0.25.0 (#49248)",
"author_name": "Paul",
"author_login": "paulbry",
"committed_at": "2025-03-02T20:50:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05c34b731236d1e4a47473ff963482e8c17ed19e",
"body": null,
"is_bot": false,
"headline": "py-pymc3: not compatible with numpy 2 (#49225)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2025-03-01T19:43:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b22842af567ad59141bc2d500c13d148e7731cea",
"body": "…49241)",
"is_bot": false,
"headline": "globalarrays: Add variant `cxx` which adds the `--enable-cxx` flag (#…",
"author_name": "Tahmid Khan",
"author_login": "ta7mid",
"committed_at": "2025-03-01T19:16:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bef0286926999407e24adb97be186d305dc3ebc",
"body": "Co-authored-by: github-actions <github-actions@users.noreply.github.com>",
"is_bot": false,
"headline": "Automated deployment to update package flux-sched 2025-02-28 (#49229)",
"author_name": "Vanessasaurus",
"author_login": "vsoch",
"committed_at": "2025-03-01T15:48:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "935facd06955401d9052b33498ed51956440d6c7",
"body": "Co-authored-by: github-actions <github-actions@users.noreply.github.com>",
"is_bot": false,
"headline": "Automated deployment to update package flux-security 2025-02-28 (#49230)",
"author_name": "Vanessasaurus",
"author_login": "vsoch",
"committed_at": "2025-03-01T15:47:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87e5255bbc5169c6ed0c42768dda2026a380b2d3",
"body": null,
"is_bot": false,
"headline": "py-matplotlib: add v3.10.1 (#49233)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2025-03-01T15:22:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b42f0d793de3ddfc389db4e8a99795ee43d64d64",
"body": "…212)\n\nBumps [isort](https://github.com/PyCQA/isort) from 6.0.0 to 6.0.1.\r\n- [Release notes](https://github.com/PyCQA/isort/releases)\r\n- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/PyCQA/isort/compare/6.0.0...6.0.1)\r\n\r\n---\r\nupdated-dependencies:\n[…]\n:production\r\n update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump isort in /.github/workflows/requirements/style (#49…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-03-01T15:18:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ccca0d33542e163ed7c2cc7c24ce961cdcb38562",
"body": "Bumps [isort](https://github.com/PyCQA/isort) from 6.0.0 to 6.0.1.\r\n- [Release notes](https://github.com/PyCQA/isort/releases)\r\n- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/PyCQA/isort/compare/6.0.0...6.0.1)\r\n\r\n---\r\nupdated-dependencies:\r\n- dep\n[…]\n:production\r\n update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump isort from 6.0.0 to 6.0.1 in /lib/spack/docs (#49213)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-03-01T15:17:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9699bbc7b9d29371d9b3d868240831e351c20d7f",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": false,
"headline": "helics: Add version 3.6.1 (#49231)",
"author_name": "HELICS-bot",
"author_login": "HELICS-bot",
"committed_at": "2025-03-01T15:16:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7e251de9fbf1d4dc00284cca1ec128f9f8e1718",
"body": null,
"is_bot": false,
"headline": "Add dla-future v0.8.0 (#49235)",
"author_name": "Raffaele Solcà",
"author_login": "rasolca",
"committed_at": "2025-03-01T15:14:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d788b15529ec01361cad030947db4e0401bc1745",
"body": "Release notes can be read at https://archive.hadrons.org/software/libmd/libmd-1.1.0.announce",
"is_bot": false,
"headline": "libmd: add version 1.1.0 (#49239)",
"author_name": "Robert Maaskant",
"author_login": "RobertMaaskant",
"committed_at": "2025-03-01T15:11:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e7489bc172442a49ac03263a3032c6829c96f21",
"body": "…49237)\n\nThis reverts commit fe171a560b4f7b55a4e40feaebaf5c0bc9ff8193.",
"is_bot": false,
"headline": "Revert \"Honor `cmake_prefix_paths` property if available (#42569)\" (#…",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2025-02-28T22:33:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d234df62d71590abbcac53a0dade0d7d1f29ec06",
"body": "Concretizer caching for reusing solver results",
"is_bot": false,
"headline": "Solver: Cache Concretization Results (#48198)",
"author_name": "John W. Parent",
"author_login": "johnwparent",
"committed_at": "2025-02-28T18:42:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a5922a0ec1298d9b98e552a930dd96f447dee62",
"body": "* rct: update packages (RE, RG, RP, RS, RU) with new version 1.90\n\n* radical: added `url_for_version` for older versions\n\n* radical: set latest versions for `radical.pilot` and `radical.utils`\n\n* radical: fixed `url_for_version` setup\n\n* radical: set the latest version for `radical.entk`\n\n* radical:\n[…]\n_for_version`\n\n* Apply suggestions from code review (python version dependency)\n\nCo-authored-by: Wouter Deconinck <wdconinc@gmail.com>\n\n---------\n\nCo-authored-by: Wouter Deconinck <wdconinc@gmail.com>",
"is_bot": false,
"headline": "py-radical-*: new version 1.90 (#48586)",
"author_name": "Mikhail Titov",
"author_login": "mtitov",
"committed_at": "2025-02-28T14:38:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5bd184aaafd94d8dd8601c7c0d924948e636e8f3",
"body": "On Windows, libraries search their directory for dependencies, and\nwe help libraries in Spack-built packages locate their dependencies\nby symlinking them into the dependent's directory (we refer to this\nas simulated RPATHing).\n\nWe extend the convenience functionality here to support base library\ndirectories outside of the package prefix: this is primarily for\nrunning tests in the build directory (which is not located inside\nof the final install prefix chosen by spack).",
"is_bot": false,
"headline": "Windows Rpath: Allow package test rpaths (#47072)",
"author_name": "John W. Parent",
"author_login": "johnwparent",
"committed_at": "2025-02-28T03:16:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "464c3b96faca5a47efef0fac35a779ae4486888a",
"body": null,
"is_bot": false,
"headline": "fmt: Add 11.1.4 (#49218)",
"author_name": "Mikael Simberg",
"author_login": "msimberg",
"committed_at": "2025-02-28T01:12:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60544a4e845ea90fbe886982ca941b5ef345cc77",
"body": null,
"is_bot": false,
"headline": "ci: avoid py-mpi4py tests on darwin (#49227)",
"author_name": "Scott Wittenburg",
"author_login": "scottwittenburg",
"committed_at": "2025-02-28T01:07:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a664d98f37781b547a56901ff057c8bc59ca5872",
"body": "This release contains modifications to most of the SEACAS applications to support ChangeSets to some degree.\r\nSee https://github.com/SandiaLabs/seacas/wiki/Dynamic_Topology for information about Change Sets and\r\nSee https://github.com/SandiaLabs/seacas/wiki/Supporting-Change-Sets for information abo\n[…]\nlications are supporting the use or creation of change sets.\r\n\r\nThe release also includes various other small changes including formatting, portability, intallation, TPL version updates, and spelling.",
"is_bot": false,
"headline": "seacas: new version with change set support (#49224)",
"author_name": "Greg Sjaardema",
"author_login": "gsjaardema",
"committed_at": "2025-02-28T01:02:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e3d7efb0f28a7bc5ec23080d89d39ec89ba879a",
"body": "Co-authored-by: Sinan81 <Sinan@world>\nCo-authored-by: Sinan81 <Sinan81@users.noreply.github.com>",
"is_bot": false,
"headline": "alps: add conflict (#48751)",
"author_name": "Sinan",
"author_login": "Sinan81",
"committed_at": "2025-02-28T00:57:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8cd0b99f34bd305532cb11528105cf00282d25b",
"body": "* new-recipe: plantuml\n* new-recipe: py-sphinxcontrib-plantuml",
"is_bot": false,
"headline": "New recipes for PlantUML and `py-sphinxcontrib-plantuml` (#49204)",
"author_name": "Chris Green",
"author_login": "greenc-FNAL",
"committed_at": "2025-02-28T00:57:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a43df598a1e0c24af9ff32712258bde689651a2a",
"body": null,
"is_bot": false,
"headline": "rust: add v1.85.0 (#49158)",
"author_name": "Alec Scott",
"author_login": "alecbcs",
"committed_at": "2025-02-27T19:18:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7163cd0fa6063e4475f5fc4e98c25ce0fa21064",
"body": null,
"is_bot": false,
"headline": "gnutls: add master, improve styling (#49080)",
"author_name": "Alec Scott",
"author_login": "alecbcs",
"committed_at": "2025-02-27T19:13:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe171a560b4f7b55a4e40feaebaf5c0bc9ff8193",
"body": "* Honor package-specified cmake_prefix_paths at runtime\n\n* Add paths in the correct order and prune duplicates\n\n* Normalize paths for windows' sake",
"is_bot": false,
"headline": "Honor `cmake_prefix_paths` property if available (#42569)",
"author_name": "Kyle Knoepfel",
"author_login": "knoepfel",
"committed_at": "2025-02-27T18:11:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24abc3294a655253c5fe47eb5d652a59fca70813",
"body": "* add sendme package\r\n\r\n* style fix\r\n\r\n* add docstring for test function\r\n\r\n* changed maintainer string, run test after install\r\n\r\n* removed redundant test\r\n\r\n* Follow the common package license header format\r\n\r\nCo-authored-by: Alec Scott <hi@alecbcs.com>\r\n\r\n---------\r\n\r\nCo-authored-by: Alec Scott <hi@alecbcs.com>",
"is_bot": false,
"headline": "sendme: new package (#49133)",
"author_name": "Ritwik Patil",
"author_login": "draguve",
"committed_at": "2025-02-27T16:59:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dea0073b211da3d6e677df53c8dccd5ebe43722",
"body": "* add mvapich-plus 4.0\r\n\r\n* run spack style fix\r\n\r\n* fix license issue\r\n\r\n* change styling of mvapich-plus package based on review\r\n\r\n* using spack style --fix\r\n\r\n* fix more typos\r\n\r\n* Apply suggestions from code review\r\n\r\nCo-authored-by: Alec Scott <hi@alecbcs.com>\r\n\r\n* Adding CudaPackage and RocmPackage Mixins\r\n\r\n---------\r\n\r\nCo-authored-by: Matt Lieber <lieber.31@osu.edu>\r\nCo-authored-by: Alec Scott <hi@alecbcs.com>",
"is_bot": false,
"headline": "mvapich-plus: new package (#48507)",
"author_name": "MatthewLieber",
"author_login": "MatthewLieber",
"committed_at": "2025-02-27T16:36:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31ecefbfd21f2360045a50d6d94a9631ca5f0d61",
"body": "Signed-off-by: Massimiliano Culpo <massimiliano.culpo@gmail.com>",
"is_bot": false,
"headline": "heppdt: add dependency on C (#49219)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2025-02-27T14:10:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7363047b8269f78bb3da3a759765c8801e1045df",
"body": "Currently we validate all keys as specs, but it's meant to validate only additional keys in all cases.",
"is_bot": false,
"headline": "schema: additionalKeysAreSpecs (#49221)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2025-02-27T11:17:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12fe7aef65ecd47267feacd6ed7b9657f272ee0a",
"body": "* Split requirements to get better error messages in case of unsat solves.\n* use list requirements instead of string\n* activate static_analysis in a few pipelines\n\nSigned-off-by: Massimiliano Culpo <massimiliano.culpo@gmail.com>",
"is_bot": false,
"headline": "pipelines: extract changes from compiler as nodes (#49222)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2025-02-27T11:13:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5da4f18188ef6b472684868c7028794b64674bbd",
"body": null,
"is_bot": false,
"headline": "schema/modules.py: remove lmod props from tcl schema (#49220)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2025-02-27T09:48:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61c54ed28b61d0c878334cac7ef4f7f85023d9f4",
"body": "* Remove fsi variant from Nalu-Wind\n\n* fix exawind",
"is_bot": false,
"headline": "Remove FSI variant from Nalu-Wind (#49209)",
"author_name": "Marc T. Henry de Frahan",
"author_login": "marchdf",
"committed_at": "2025-02-26T23:57:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "677caec3c607d56bccc89c76ef503a831a2708f4",
"body": "* ci: darwin stacks: update tags following system updates\n\n* disable SPACK_CI_DISABLE_STACKS; only enable *darwin* stacks for testing\n\n* manually chmod u+w tmp/ before cleanup due to issue#49147\n\n* comment out failing specs for now\n\n* re-enable logic for disabling stacks\n\n* add explanatory comment f\n[…]\ne more darwin-only targetting\n\n* restore build_stage to default location\n\n* move build-job-remove out of individual darwin stacks into darwin top level config\n\n* keep build_stage in $spack/tmp for now",
"is_bot": false,
"headline": "Ci reactivate darwin pipelines (#48453)",
"author_name": "eugeneswalker",
"author_login": "eugeneswalker",
"committed_at": "2025-02-26T23:34:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b914bd6638db47d8e00223a098afbfb802adca83",
"body": "* e4s oneapi ci stack: mpi: require intel-oneapi-mpi\n\n* nrm ^py-scipy cflags=\"-Wno-error=incompatible-function-pointer-types\"\n\n* add explanatory comment",
"is_bot": false,
"headline": "e4s oneapi ci stack: mpi: require intel-oneapi-mpi (#49043)",
"author_name": "eugeneswalker",
"author_login": "eugeneswalker",
"committed_at": "2025-02-26T23:07:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3caa3132aa5a663df4a8106d49945ac7cca94294",
"body": "Python was removed from being a build tool in #46980, due to issues\nwhen reusing specs. This PR adds a new rule to match the interpreter\namong different Python packages, in clingo.\n\nIt also adds a bunch of new \"build-tools\", so that specs like:\n```\npy-matplotlib backend=tkagg\n```\ncan be concretized \n[…]\n[x] Make `py-matplotlib backend=tkagg` concretizable\n- [x] Add unit-tests to ensure situations like in #46980 do not happen\n\n---------\n\nSigned-off-by: Massimiliano Culpo <massimiliano.culpo@gmail.com>",
"is_bot": false,
"headline": "python: allow it as a build-tool again (#49201)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2025-02-26T23:04:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dbd531112ce0d836eb15b3078be35732be378d6f",
"body": "Currently, the custom config scopes are pushed at the top when constructing\nconfiguration, and are demoted whenever a context manager activating an\nenvironment is used - see #48414 for details. Workflows that rely on the order\nin the [docs](https://spack.readthedocs.io/en/latest/configuration.html#c\n[…]\nix a bug, and\n add a regression test\n- [x] Simplify `Configuration` constructor\n- [x] Remove `Configuration.pop_scope`\n\n---------\n\nSigned-off-by: Massimiliano Culpo <massimiliano.culpo@gmail.com>",
"is_bot": false,
"headline": "Assign priorities to configuration scopes (take 2) (#49187)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2025-02-26T18:52:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ae5e121502cea43f173e8070fa05fe77244a1c05",
"body": "This does not propagate in parsing. Open to other ideas.",
"is_bot": false,
"headline": "Preserve `--lines` (#49194)",
"author_name": "psakievich",
"author_login": "psakievich",
"committed_at": "2025-02-26T17:48:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "929cfc8e5a2b8b0d7d93de5c338f182ec76756b0",
"body": "Signed-off-by: Shane Nehring <snehring@iastate.edu>",
"is_bot": false,
"headline": "relion: add v5.0.0 (#49174)",
"author_name": "snehring",
"author_login": "snehring",
"committed_at": "2025-02-26T17:17:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bad28e7f9f1264ac5861a1cd7d058f49d08fa1c7",
"body": "* Add new package py-pyicu to support new py-natsort variant +icu\n\n* note version req location\n\nCo-authored-by: Wouter Deconinck <wdconinc@gmail.com>\n\n* bound icu variant\n\nCo-authored-by: Wouter Deconinck <wdconinc@gmail.com>\n\n---------\n\nCo-authored-by: Wouter Deconinck <wdconinc@gmail.com>",
"is_bot": false,
"headline": "py-natsort: add new variant +icu and dependent package (#48907)",
"author_name": "Chris Marsh",
"author_login": "Chrismarsh",
"committed_at": "2025-02-26T16:42:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d63fe91b062eeea8908ac2b601115aef70c2e26",
"body": null,
"is_bot": false,
"headline": "sst-elements: add support for --enable-ariel-mpi flag (#49135)",
"author_name": "Patrick Lavin",
"author_login": "plavin",
"committed_at": "2025-02-26T14:30:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95af020310b132c5a3154ecbd646aae3db751f84",
"body": "* py-psij-python: new version 0.9.9\n\n* Update var/spack/repos/builtin/packages/py-psij-python/package.py\n\nCo-authored-by: Wouter Deconinck <wdconinc@gmail.com>\n\n* fixed py3.8 dependency\n\n---------\n\nCo-authored-by: Wouter Deconinck <wdconinc@gmail.com>",
"is_bot": false,
"headline": "py-psij-python: new version 0.9.9 (#48610)",
"author_name": "Mikhail Titov",
"author_login": "mtitov",
"committed_at": "2025-02-26T14:13:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2147b9d95e68799bb4eb775807788bb587b44ead",
"body": null,
"is_bot": false,
"headline": "g4vg: new version 1.0.3 (#49195)",
"author_name": "Seth R. Johnson",
"author_login": "sethrj",
"committed_at": "2025-02-25T22:27:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68636e7c19535914672629d1aa63197fe2f7bb56",
"body": "The parent class function doesn't return the path to the config file. This is one potential fix, or we can add the return back to base builder.",
"is_bot": false,
"headline": "lua-lpeg inheritance fix (#49065)",
"author_name": "psakievich",
"author_login": "psakievich",
"committed_at": "2025-02-25T22:14:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f56675648ac479e1878a679440c5ff09b35c4966",
"body": "* mpifileutils: update for v0.12 release\n\n* removed @adammoody from maintainers",
"is_bot": false,
"headline": "mpifileutils: add v0.12 (#49132)",
"author_name": "Elsa Gonsiorowski, PhD",
"author_login": "gonsie",
"committed_at": "2025-02-25T20:39:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a219d114d31a6d164dfab7808958aa3fe363084",
"body": null,
"is_bot": false,
"headline": "Petsc: add in hipblas dependency on hipblas-common (#49017)",
"author_name": "Tara Drwenski",
"author_login": "tdrwenski",
"committed_at": "2025-02-25T16:35:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3cefa7047c27e4018331b5044e28bb588c5309af",
"body": "* davix: add v0.8.8, v0.8.9, v0.8.10\n\n* davix: url_for_version\n\n* davix: depends on googletest when @0.8.8: (type test, maybe build)\n\n* davix: define DAVIX_TESTS",
"is_bot": false,
"headline": "davix: add v0.8.8, v0.8.9, v0.8.10 (#49057)",
"author_name": "Wouter Deconinck",
"author_login": "wdconinc",
"committed_at": "2025-02-25T16:05:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35013773ba8d32340e97c1ac4d1bacaea8e6e4bd",
"body": "* Fix setup.fish syntax\n\n* Simplify conditional in share/spack/setup-env.fish\n\nCo-authored-by: Wouter Deconinck <wdconinc@gmail.com>\n\n---------\n\nCo-authored-by: Wouter Deconinck <wdconinc@gmail.com>",
"is_bot": false,
"headline": "Fix setup.fish syntax (#49176)",
"author_name": "Cédric Chevalier",
"author_login": "cedricchevalier19",
"committed_at": "2025-02-25T13:11:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e28379e98b11be967343f02f4a1ae3964508b9dc",
"body": null,
"is_bot": false,
"headline": "python: limit parallellism in compileall (#48441)",
"author_name": "AMD Toolchain Support",
"author_login": "amd-toolchain-support",
"committed_at": "2025-02-25T12:54:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93329d7f9946c0f372fbbb5d51c9572bb692a5de",
"body": null,
"is_bot": false,
"headline": "add ck variant to miopen-hip (#49143)",
"author_name": "afzpatel",
"author_login": "afzpatel",
"committed_at": "2025-02-25T12:48:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e508b0321357ddb9b01a6a7da42ecff385402b3",
"body": "All the build jobs in pipelines are apparently relying on the bug that was fixed.\n\nThe issue was not caught in the PR because generation jobs were fine, and\nthere was nothing to rebuild.\n\nReverting to fix pipelines in a new PR.\n\nThis reverts commit 3ad99d75f99fe926f434049f5d507bfe6a7f2331.",
"is_bot": false,
"headline": "Revert \"Assign priorities to configuration scopes (#48420)\" (#49185)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2025-02-25T10:33:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c26c429a7a1e087820f460001faf16bcfd585a9",
"body": null,
"is_bot": false,
"headline": "py-sphinx: add v8.2.0 (#49107)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2025-02-25T09:44:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cc63e2b7c404b627df451a778115be25c9815f2",
"body": "Bumps [sphinx](https://github.com/sphinx-doc/sphinx) from 8.2.0 to 8.2.1.\n- [Release notes](https://github.com/sphinx-doc/sphinx/releases)\n- [Changelog](https://github.com/sphinx-doc/sphinx/blob/v8.2.1/CHANGES.rst)\n- [Commits](https://github.com/sphinx-doc/sphinx/compare/v8.2.0...v8.2.1)\n\n---\nupdate\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump sphinx from 8.2.0 to 8.2.1 in /lib/spack/docs (#49180)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-02-25T09:33:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4e311a22d07225e8decb8845f44a9cdbac4c561c",
"body": "VariantMap.concrete is unused, and would be incorrect if it were used\ndue to conditional variants.\n\nJust let the Spec dictate what is concrete and what is not.",
"is_bot": false,
"headline": "spec.py: remove VariantMap.concrete (#49170)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2025-02-25T09:18:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ad99d75f99fe926f434049f5d507bfe6a7f2331",
"body": "Currently, environments can end up with higher priority than `-C` custom\nconfig scopes and `-c` command line arguments sometimes. This shouldn't\nhappen -- those explicit CLI scopes should override active environments.\n\nUp to now configuration behaved like a stack, where scopes could be only be\npushe\n[…]\nneed to be\nexplicit about the unification strategy in each stack, and remove the blanket\n`unify:false` from the highest priority scope\n\nSigned-off-by: Massimiliano Culpo <massimiliano.culpo@gmail.com>",
"is_bot": false,
"headline": "Assign priorities to configuration scopes (#48420)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2025-02-25T08:58:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b79c01077dc020e9a0325651c14a18bd93d71b8a",
"body": "* py-sympy: add v1.13.1",
"is_bot": false,
"headline": "py-sympy: add v1.13.1 (#48951)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2025-02-24T23:09:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4385f36b8dedacb93a0b5cccd546016f92f0aaea",
"body": "…h autoload none. Ref issue: 42535 (#48050)\n\n* Update survey package file with latest releases and python path settings for building with autoload none.\n* Submitting reformatted file.\n* update survey package file with libmonitor dependency changes, take out py-gpustat, and minor comment change.\n* Trigger build.",
"is_bot": false,
"headline": "survey: add latest releases and python path settings for building wit…",
"author_name": "Jim Galarowicz",
"author_login": "jgalarowicz",
"committed_at": "2025-02-24T23:04:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a85f1cfa4b2c84637a421a99a5d6ccb3cc58999b",
"body": "* pyAMReX: 25.02\n* PICMI: 0.33.0\n* WarpX: 25.02\n* `amrex +fft` depends on `pkgconfig`\n* Updated CMake logic uses `pkgconfig`",
"is_bot": false,
"headline": "WarpX 25.02 (#48917)",
"author_name": "Axel Huebl",
"author_login": "ax3l",
"committed_at": "2025-02-24T22:48:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13524fa8ed7b35fab6751910c42717f1b613abda",
"body": null,
"is_bot": false,
"headline": "gcc: fix package.py for gcc@:9 (#49173)",
"author_name": "Melven Roehrig-Zoellner",
"author_login": "melven",
"committed_at": "2025-02-24T22:44:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "738c73975ef65ff0c569d3cf8b2dc4661eeb9c58",
"body": null,
"is_bot": false,
"headline": "mimalloc: Add new versions (#49168)",
"author_name": "Mikael Simberg",
"author_login": "msimberg",
"committed_at": "2025-02-24T20:04:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf9d72f87b53c20e0a721665cfc4e6eed054ae45",
"body": null,
"is_bot": false,
"headline": "ut: Add 2.3.0 (#49169)",
"author_name": "Mikael Simberg",
"author_login": "msimberg",
"committed_at": "2025-02-24T19:59:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "674cca3c4a4b5b57eee38e44d3f4490ffe0934aa",
"body": null,
"is_bot": false,
"headline": "asio: add 1.32.0 (#49167)",
"author_name": "Mikael Simberg",
"author_login": "msimberg",
"committed_at": "2025-02-24T19:39:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a95e2beb5ebfa029e2de179a0de247c8c6eae9e",
"body": "ParaView 5.12.0 through 5.13.2 do not compile. See\nhttps://gitlab.kitware.com/vtk/vtk/-/issues/19620.",
"is_bot": false,
"headline": "paraview: add patch for Intel Classic compilers (#49116)",
"author_name": "Cory Quammen",
"author_login": "cquammen",
"committed_at": "2025-02-24T17:27:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ab71814a935bdcd3f8d8298709643d5e61abea9",
"body": null,
"is_bot": false,
"headline": "py-torchgeo: correct pyvista dep (#49140)",
"author_name": "Adam J. Stewart",
"author_login": "adamjstewart",
"committed_at": "2025-02-24T17:06:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e783a2851d1ec079c3013ee9c9c34613965cd6fe",
"body": "…es (#49141)\" (#49172)\n\nThis reverts commit 0da5bafaf2d03fc9fb16821a2865db03e9aa9ef5.",
"is_bot": false,
"headline": "Revert \"Repo.packages_with_tags: do not construct a set of all packag…",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2025-02-24T15:46:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29e3a28071e72396f5b5c223ea270a8e43cfe594",
"body": "This commit adds version 1.14.0 of the vecmem package.",
"is_bot": false,
"headline": "vecmem: add v1.14.0 (#49166)",
"author_name": "Stephen Nicholas Swatman",
"author_login": "stephenswat",
"committed_at": "2025-02-24T14:08:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e7a5e9362790bc9d8e9c5c853ab434ca77368f9",
"body": "… be resolved (#49124)\n\nCurrently, we have `config:shared_linking:missing_library_policy` to error\nor warn when shared libraries cannot be resolved upon install.\n\nThe new `spack verify libraries` command allows users to run this post\ninstall hook at any point in time to check whether their current\ninstallations can resolve shared libs in rpaths.",
"is_bot": false,
"headline": "spack verify libraries: verify dependencies of installed packages can…",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2025-02-24T10:28:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89d1dfa3403f5d84acd52cd5cb0e0064725c9b53",
"body": "…y (#48958)",
"is_bot": false,
"headline": "python: deprecate old patch versions, remove patches that do not appl…",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2025-02-24T10:23:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "974abc806725e800f611af098d098a5d0a7f2017",
"body": null,
"is_bot": false,
"headline": "Add typehints for directory_layout / Spec.prefix (#48652)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2025-02-24T09:47:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f9ad5f34d32c434fb867c953b572eed9ddec96a",
"body": "Co-authored-by: Harmen Stoppels <me@harmenstoppels.nl>",
"is_bot": false,
"headline": "spec.py: fix virtual reconstruction for old specs (#49103)",
"author_name": "Massimiliano Culpo",
"author_login": "alalazo",
"committed_at": "2025-02-24T08:23:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9555ceeb8a3546a80a4db4abfa8047dccf3770b8",
"body": "* remove preferred to allow seamless python@3.12 usage\n\n* glib: remove deprecated versions\n\n* glib: use extends because python-venv is pulled in from build deps and put into path\n\n* dont patch patch versions, use new patch releases containing the fix instead\n\n* restrict patch of shebangs, group relevant bits together\n\n* simplify lowerbound\n\n* fix pinned glib version\n\n---------\n\nCo-authored-by: Chris Marsh <chrismarsh.c2@gmail.com>",
"is_bot": false,
"headline": "glib: various fixes (#48840)",
"author_name": "Harmen Stoppels",
"author_login": "haampie",
"committed_at": "2025-02-24T08:17:45Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 6,
"commits_last_year": 0,
"latest_release_at": "2015-03-24T17:17:18Z",
"latest_release_tag": "v0.8.17",
"releases_from_tags": true,
"days_since_last_push": 44,
"active_weeks_last_year": 0,
"days_since_latest_release": 4142,
"mean_days_between_releases": 37.2
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 1,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"lib/spack/docs/Makefile",
"lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile",
"lib/spack/spack/test/data/make/affirmative/check_test/Makefile",
"lib/spack/spack/test/data/make/affirmative/expansion/Makefile",
"lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile",
"lib/spack/spack/test/data/make/affirmative/include/Makefile",
"lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile",
"lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile",
"lib/spack/spack/test/data/make/affirmative/spaces/Makefile",
"lib/spack/spack/test/data/make/affirmative/test_check/Makefile",
"lib/spack/spack/test/data/make/affirmative/three_targets/Makefile",
"lib/spack/spack/test/data/make/negative/partial_match/Makefile",
"lib/spack/spack/test/data/make/negative/variable/Makefile",
"share/spack/templates/depfile/Makefile",
"var/spack/repos/builtin/packages/alglib/Makefile"
],
"api_schema_files": [],
"has_devcontainer": true,
"typecheck_configs": [
"lib/spack/external/_vendoring/attr/py.typed",
"lib/spack/external/_vendoring/attrs/py.typed",
"lib/spack/external/_vendoring/distro/py.typed",
"lib/spack/external/_vendoring/jinja2/py.typed",
"lib/spack/external/_vendoring/markupsafe/py.typed",
"lib/spack/external/_vendoring/pyrsistent/py.typed",
"lib/spack/external/_vendoring/ruamel/yaml/py.typed"
],
"toolchain_manifests": [],
"largest_source_bytes": 204414,
"source_files_sampled": 9560,
"oversized_source_files": 22,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pyproject.toml"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 2,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "clingo",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": null
},
{
"name": "setuptools",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": null
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "clingo",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "setuptools",
"direct": true,
"version": null,
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 2,
"direct_count": 2,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 4,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 6,
"closed_unmerged_prs": 111
},
"bus_factor": 11,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "adamjstewart",
"commits": 3180,
"avatar_url": "https://avatars.githubusercontent.com/u/12021217?v=4"
},
{
"type": "User",
"login": "tgamblin",
"commits": 2884,
"avatar_url": "https://avatars.githubusercontent.com/u/299842?v=4"
},
{
"type": "User",
"login": "alalazo",
"commits": 2005,
"avatar_url": "https://avatars.githubusercontent.com/u/4199709?v=4"
},
{
"type": "User",
"login": "haampie",
"commits": 1638,
"avatar_url": "https://avatars.githubusercontent.com/u/194764?v=4"
},
{
"type": "User",
"login": "alecbcs",
"commits": 908,
"avatar_url": "https://avatars.githubusercontent.com/u/19558067?v=4"
},
{
"type": "User",
"login": "glennpj",
"commits": 811,
"avatar_url": "https://avatars.githubusercontent.com/u/16138574?v=4"
},
{
"type": "User",
"login": "wdconinc",
"commits": 809,
"avatar_url": "https://avatars.githubusercontent.com/u/4656391?v=4"
},
{
"type": "User",
"login": "manuelakuhn",
"commits": 707,
"avatar_url": "https://avatars.githubusercontent.com/u/36827019?v=4"
},
{
"type": "User",
"login": "michaelkuhn",
"commits": 686,
"avatar_url": "https://avatars.githubusercontent.com/u/4062614?v=4"
},
{
"type": "User",
"login": "becker33",
"commits": 677,
"avatar_url": "https://avatars.githubusercontent.com/u/13971568?v=4"
}
],
"contributors_sampled": 99,
"top_contributor_share": 0.111
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"audit.yaml",
"bootstrap.yml",
"build-containers.yml",
"ci.yaml",
"coverage.yml",
"import-check.yaml",
"nightly-win-builds.yml",
"unit_tests.yaml",
"valid-style.yml"
],
"has_docs_dir": false,
"linter_configs": [
".flake8"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 90 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "internal error: internal error: invalid Dockerfile",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "10 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f015b18230d87ded947481c709248c0080bde2e7",
"ran_at": "2026-07-26T18:34:53Z",
"aggregate_score": 4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2025-10-21T03:27:29Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2022-12-23T01:14:41Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/adamjstewart/spack",
"host": "github.com",
"name": "spack",
"owner": "adamjstewart"
},
"metrics": {
"overall": {
"key": "overall",
"band": "critical",
"name": "Overall health",
"note": "Abandonment Policy applies a 60% multiplier to weighted overall health and gives it a ceiling of 49.",
"notes": [
{
"code": "abandonment_overall_adjustment",
"params": {
"cap": 49,
"pct": 60
}
}
],
"value": 26,
"inputs": {
"security": 40,
"vitality": 30,
"community": 9,
"governance": 73,
"engineering": 58,
"abandonment_cap": 49,
"abandonment_state": "likely_abandoned",
"abandonment_multiplier": 60,
"weighted_overall_before_abandonment": 44,
"overall_after_abandonment_multiplier": 26
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 30,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 18,
"inputs": {
"commits_last_year": 0,
"human_commit_share": 0.94,
"days_since_last_push": 44,
"active_weeks_last_year": 0
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 44 days ago",
"points": 18,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 44
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "0/52 weeks with commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 0
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "0 commits in the last year",
"points": 0,
"status": "missed",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 0
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"releases_count": 6,
"latest_release_tag": "v0.8.17",
"releases_from_tags": true,
"days_since_latest_release": 4142,
"mean_days_between_releases": 37.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "6 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 6
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4142 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 4142
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~37.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 37.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "moderate",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"cap": 49,
"state": "likely_abandoned",
"guards": [
"no_open_demand"
],
"signals": [
"release_stall",
"scorecard_unmaintained",
"broken_ci"
],
"red_flag": true,
"multiplier_pct": 60,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 0,
"unanswered_open_issues": 0,
"days_since_last_merged_pr": 1311,
"days_since_last_human_commit": 508,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 508 days; 3 unmet obligation(s): releases stalled, Scorecard reports it unmaintained, CI broken",
"points": 60,
"status": "partial",
"details": [
{
"code": "abandonment_flagged",
"params": {
"days": 508,
"count": 3,
"signals": "releases stalled, Scorecard reports it unmaintained, CI broken"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 9,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 19,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 73,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "excellent",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"bus_factor": 11,
"contributors_sampled": 99,
"top_contributor_share": 0.111
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "11 contributor(s) cover half of all commits",
"points": 54,
"status": "met",
"details": [
{
"code": "bus_factor",
"params": {
"count": 11
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 11% of commits",
"points": 20,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 11
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "99 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 99
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 90 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "at_risk",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"merged_prs": 4,
"open_issues": 0,
"closed_issues": 6,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 111
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "4/115 decided PRs merged",
"points": 1.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 4,
"decided": 115
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 67,
"inputs": {
"followers": 370,
"owner_type": "User",
"is_verified": null,
"owner_login": "adamjstewart",
"public_repos": 101,
"account_age_days": 4116
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "370 followers of adamjstewart",
"points": 18.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 370,
"login": "adamjstewart"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "101 public repos, account ~11 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 101
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 58,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "9 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 9
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".flake8",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".flake8"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "critical",
"name": "Documentation",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://spack.io/",
"has_readme": false,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://spack.io/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Pinned-Dependencies, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"pinned_dependencies",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 14,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 4,
"scorecard_aggregate": 4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 90 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "internal error: internal error: invalid Dockerfile",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "10 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 15
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 70,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.989,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "93 of 94 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 93,
"sampled": 94
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 89,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [
"lib/spack/docs/Makefile",
"lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile",
"lib/spack/spack/test/data/make/affirmative/check_test/Makefile",
"lib/spack/spack/test/data/make/affirmative/expansion/Makefile",
"lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile",
"lib/spack/spack/test/data/make/affirmative/include/Makefile",
"lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile",
"lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile",
"lib/spack/spack/test/data/make/affirmative/spaces/Makefile",
"lib/spack/spack/test/data/make/affirmative/test_check/Makefile",
"lib/spack/spack/test/data/make/affirmative/three_targets/Makefile",
"lib/spack/spack/test/data/make/negative/partial_match/Makefile",
"lib/spack/spack/test/data/make/negative/variable/Makefile",
"share/spack/templates/depfile/Makefile",
"var/spack/repos/builtin/packages/alglib/Makefile"
],
"has_devcontainer": true,
"has_linter_config": true,
"typecheck_configs": [
"lib/spack/external/_vendoring/attr/py.typed",
"lib/spack/external/_vendoring/attrs/py.typed",
"lib/spack/external/_vendoring/distro/py.typed",
"lib/spack/external/_vendoring/jinja2/py.typed",
"lib/spack/external/_vendoring/markupsafe/py.typed",
"lib/spack/external/_vendoring/pyrsistent/py.typed",
"lib/spack/external/_vendoring/ruamel/yaml/py.typed"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.06
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "lib/spack/docs/Makefile, lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile, lib/spack/spack/test/data/make/affirmative/check_test/Makefile, lib/spack/spack/test/data/make/affirmative/expansion/Makefile, lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile, lib/spack/spack/test/data/make/affirmative/include/Makefile, lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile, lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile, lib/spack/spack/test/data/make/affirmative/spaces/Makefile, lib/spack/spack/test/data/make/affirmative/test_check/Makefile, lib/spack/spack/test/data/make/affirmative/three_targets/Makefile, lib/spack/spack/test/data/make/negative/partial_match/Makefile, lib/spack/spack/test/data/make/negative/variable/Makefile, share/spack/templates/depfile/Makefile, var/spack/repos/builtin/packages/alglib/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lib/spack/docs/Makefile, lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile, lib/spack/spack/test/data/make/affirmative/check_test/Makefile, lib/spack/spack/test/data/make/affirmative/expansion/Makefile, lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile, lib/spack/spack/test/data/make/affirmative/include/Makefile, lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile, lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile, lib/spack/spack/test/data/make/affirmative/spaces/Makefile, lib/spack/spack/test/data/make/affirmative/test_check/Makefile, lib/spack/spack/test/data/make/affirmative/three_targets/Makefile, lib/spack/spack/test/data/make/negative/partial_match/Makefile, lib/spack/spack/test/data/make/negative/variable/Makefile, share/spack/templates/depfile/Makefile, var/spack/repos/builtin/packages/alglib/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".flake8",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".flake8"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed, lib/spack/external/_vendoring/ruamel/yaml/py.typed",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed, lib/spack/external/_vendoring/ruamel/yaml/py.typed"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "devcontainer, Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "devcontainer, Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "6 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 6,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "internal error: internal error: invalid Dockerfile",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 204414,
"source_files_sampled": 9560,
"oversized_source_files": 22
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed, lib/spack/external/_vendoring/ruamel/yaml/py.typed)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "lib/spack/external/_vendoring/attr/py.typed, lib/spack/external/_vendoring/attrs/py.typed, lib/spack/external/_vendoring/distro/py.typed, lib/spack/external/_vendoring/jinja2/py.typed, lib/spack/external/_vendoring/markupsafe/py.typed, lib/spack/external/_vendoring/pyrsistent/py.typed, lib/spack/external/_vendoring/ruamel/yaml/py.typed",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "22/9560 source files over 60KB",
"points": 54.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 9560,
"oversized": 22
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Community profile unavailable",
"Could not fetch pypi package 'spack' from its registry",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-26T18:35:25.270441Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/adamjstewart/spack.svg",
"full_name": "adamjstewart/spack",
"license_state": "custom",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.