Public recordAt risk
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-24 18:52 UTC
adamwg / crossplane
The Cloud Native Control Plane
adamwg/crossplane holds a health index of 35 out of 100, placing it in the At risk band. It scores highest on AI Readiness (68/100) and lowest on Community & Adoption (12/100). It was last updated 2 days ago. 2 contributors account for most of its recent work.
35
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
35
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Abandonment Policy applies a 85% multiplier to weighted overall health.
Ownership
Adam Wolfe GordonPersonal account
67 followers84 public repossince Sep 2010@upbound
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/crossplane/crossplanepoints to another repo — not scored | v1.20.11 | - | 175 | 1 day ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
44
Development activity
36At risk
Abandonment alert
Work has arrived and nobody has attended to it
no human commit in 661 daysautomated commits excludedreleases stalledOpenSSF Scorecard reports it unmaintained
Silence alone is never the finding — a small, finished library may need no commits for years. This alert requires both: no human commit for a long time, and obligations the project is visibly not discharging. Automated commits do not count as maintenance.
How abandonment is assessedHow it's scored
| 36/36 | Push recency — last push 2 days ago |
| 0/36 | Commit cadence — 0/52 weeks with commits |
| 0/18 | Commit volume — 0 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 0 |
| human_commit_share | 0.98 |
| days_since_last_push | 2 |
| active_weeks_last_year | 0 |
Release discipline
56Moderate
How it's scored
| 16.2/27 | Ships releases — 100 version tags (no GitHub releases) |
| 7.2/36 | Release recency — latest release 675 days ago |
| 27/27 | Release cadence — a release every ~24.8 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 100 |
| latest_release_tag | v1.16.2 |
| releases_from_tags | yes |
| days_since_latest_release | 675 |
| mean_days_between_releases | 24.8 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
12
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 1 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 1 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
25Critical
How it's scored
| 0/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | no |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
43
Maintainer resilience (bus factor)
64Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 15.7/22.5 | Commit distribution — top contributor authored 30% of commits |
| 13.5/13.5 | Contributor breadth — 98 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 28 contributing companies or organizations |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 98 |
| top_contributor_share | 0.301 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
60Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 13.2/25 | Owner reach — 67 followers of adamwg |
| 25/25 | Track record — 84 public repos, account ~15 yr old |
Inputs used
| followers | 67 |
| owner_type | User |
| is_verified | — |
| owner_login | adamwg |
| public_repos | 84 |
| account_age_days | 5,782 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Engineering Quality
Are baseline engineering and documentation practices in place?
54
Engineering practices
80Good
How it's scored
| 24/24 | CI workflows — 9 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yml |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
15Critical
How it's scored
| 0/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://crossplane.io |
| 0/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | https://crossplane.io |
| has_readme | no |
| has_docs_dir | no |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
48
Security posture
48At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 28 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — no data |
| 3.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 7 |
| 0/5 | SAST — no SAST tool detected |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 80 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 4.8 |
Excluded from scoring (no data or not applicable): ci_tests, packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
68
Agent context & guidance
39At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 39.2/40 | Legible commit history — 72 of 98 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.735 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 12.6/18 | One-command bootstrap — design/assets/design-doc-provider-strategy/dcl/go.mod, go.mod (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yml |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 7/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 7 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | design/assets/design-doc-provider-strategy/dcl/go.mod, go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 54.5/55 | Manageable file sizes — 4/401 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 107,957 |
| source_files_sampled | 401 |
| oversized_source_files | 4 |
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — apis/apiextensions/fn/proto/v1/run_function.proto, apis/apiextensions/fn/proto/v1beta1/zz_generated_run_function.proto |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | apis/apiextensions/fn/proto/v1/run_function.proto, apis/apiextensions/fn/proto/v1beta1/zz_generated_run_function.proto |
Key facts
0GitHub stars
98contributors
0commits, last 12 months
2days since last push
100releases
2bus factor
0open issues
Gopackage ecosystems
Data collection warnings
- Community profile unavailable
- go package 'github.com/crossplane/crossplane' points at a different repository (https://github.com/crossplane/crossplane); excluded from ecosystem scoring
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 4.8 / 10
4.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 28 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| n/a | Packaging | packaging workflow not detected |
| 7 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 7 |
| 0 | SAST | no SAST tool detected |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 80 existing vulnerabilities detected |
Direct dependencies 43
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | dario.cat/mergo | v1.0.0 | go.mod |
| Go | github.com/AdaLogics/go-fuzz-headers | v0.0.0-20230811130428-ced1acdcaa24 | go.mod |
| Go | github.com/Masterminds/semver | v1.5.0 | go.mod |
| Go | github.com/alecthomas/kong | v0.9.0 | go.mod |
| Go | github.com/crossplane/crossplane-runtime | v1.18.0-rc.0 | go.mod |
| Go | github.com/docker/docker | v25.0.6+incompatible | go.mod |
| Go | github.com/docker/go-connections | v0.5.0 | go.mod |
| Go | github.com/emicklei/dot | v1.6.2 | go.mod |
| Go | github.com/go-git/go-billy/v5 | v5.5.0 | go.mod |
| Go | github.com/go-git/go-git/v5 | v5.12.0 | go.mod |
| Go | github.com/golang-jwt/jwt/v5 | v5.2.1 | go.mod |
| Go | github.com/google/go-cmp | v0.6.0 | go.mod |
| Go | github.com/google/go-containerregistry | v0.19.1 | go.mod |
| Go | github.com/google/go-containerregistry/pkg/authn/k8schain | v0.0.0-20230919002926-dbcd01c402b2 | go.mod |
| Go | github.com/jmattheis/goverter | v1.3.2 | go.mod |
| Go | github.com/pkg/errors | v0.9.1 | go.mod |
| Go | github.com/sirupsen/logrus | v1.9.3 | go.mod |
| Go | github.com/spf13/afero | v1.11.0 | go.mod |
| Go | github.com/upbound/up-sdk-go | v0.1.1-0.20240122203953-2d00664aab8e | go.mod |
| Go | golang.org/x/sync | v0.7.0 | go.mod |
| Go | google.golang.org/grpc | v1.63.2 | go.mod |
| Go | google.golang.org/grpc/cmd/protoc-gen-go-grpc | v1.3.0 | go.mod |
| Go | google.golang.org/protobuf | v1.34.2 | go.mod |
| Go | k8s.io/api | v0.30.1 | go.mod |
| Go | k8s.io/apiextensions-apiserver | v0.30.0 | go.mod |
| Go | k8s.io/apimachinery | v0.30.1 | go.mod |
| Go | k8s.io/apiserver | v0.30.0 | go.mod |
| Go | k8s.io/cli-runtime | v0.29.1 | go.mod |
| Go | k8s.io/client-go | v0.30.1 | go.mod |
| Go | k8s.io/code-generator | v0.30.0 | go.mod |
| Go | k8s.io/kubectl | v0.29.1 | go.mod |
| Go | k8s.io/metrics | v0.29.1 | go.mod |
| Go | k8s.io/utils | v0.0.0-20230726121419-3b25d923346b | go.mod |
| Go | sigs.k8s.io/controller-runtime | v0.18.2 | go.mod |
| Go | sigs.k8s.io/controller-tools | v0.14.0 | go.mod |
| Go | sigs.k8s.io/e2e-framework | v0.4.0 | go.mod |
| Go | sigs.k8s.io/kind | v0.20.0 | go.mod |
| Go | sigs.k8s.io/yaml | v1.4.0 | go.mod |
| Go | github.com/docker/docker-credential-helpers | v0.8.2 | go.mod |
| Go | github.com/prometheus/client_golang | v1.19.1 | go.mod |
| Go | golang.org/x/net | v0.24.0 | go.mod |
| Go | golang.org/x/term | v0.19.0 | go.mod |
| Go | k8s.io/klog/v2 | v2.120.1 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 48626,
"has_wiki": false,
"homepage": "https://crossplane.io",
"languages": {
"Go": 3165408,
"Shell": 7542,
"Earthly": 19130,
"Mustache": 1219
},
"pushed_at": "2026-07-21T21:56:14Z",
"created_at": "2024-10-02T22:51:39Z",
"owner_type": "User",
"updated_at": "2024-10-02T22:51:39Z",
"description": "The Cloud Native Control Plane",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://xvx.ca",
"name": "Adam Wolfe Gordon",
"type": "User",
"login": "adamwg",
"company": "@upbound",
"location": "Edmonton, AB",
"followers": 67,
"avatar_url": "https://avatars.githubusercontent.com/u/414574?v=4",
"created_at": "2010-09-24T15:55:20Z",
"is_verified": null,
"public_repos": 84,
"account_age_days": 5782
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v1.18.0-rc.0",
"kind": "prerelease",
"published_at": "2024-08-20T08:03:29Z"
},
{
"tag": "v1.17.1",
"kind": "patch",
"published_at": "2024-09-12T08:22:52Z"
},
{
"tag": "v1.17.0",
"kind": "minor",
"published_at": "2024-08-28T15:28:02Z"
},
{
"tag": "v1.17.0-rc.1",
"kind": "prerelease",
"published_at": "2024-08-20T08:29:54Z"
},
{
"tag": "v1.17.0-rc.0",
"kind": "prerelease",
"published_at": "2024-05-07T14:16:23Z"
},
{
"tag": "v1.16.2",
"kind": "patch",
"published_at": "2024-09-16T20:35:31Z"
},
{
"tag": "v1.16.1",
"kind": "patch",
"published_at": "2024-08-20T14:27:21Z"
},
{
"tag": "v1.16.0",
"kind": "minor",
"published_at": "2024-05-16T00:04:25Z"
},
{
"tag": "v1.16.0-rc.1",
"kind": "prerelease",
"published_at": "2024-05-07T14:17:13Z"
},
{
"tag": "v1.16.0-rc.0",
"kind": "prerelease",
"published_at": "2024-02-06T10:57:17Z"
},
{
"tag": "v1.15.5",
"kind": "patch",
"published_at": "2024-09-16T20:34:45Z"
},
{
"tag": "v1.15.4",
"kind": "patch",
"published_at": "2024-08-20T14:27:03Z"
},
{
"tag": "v1.15.3",
"kind": "patch",
"published_at": "2024-05-14T20:51:14Z"
},
{
"tag": "v1.15.2",
"kind": "patch",
"published_at": "2024-04-09T14:03:20Z"
},
{
"tag": "v1.15.1",
"kind": "patch",
"published_at": "2024-03-14T12:50:54Z"
},
{
"tag": "v1.15.0",
"kind": "minor",
"published_at": "2024-02-15T08:54:46Z"
},
{
"tag": "v1.15.0-rc.1",
"kind": "prerelease",
"published_at": "2024-02-07T10:08:55Z"
},
{
"tag": "v1.15.0-rc.0",
"kind": "prerelease",
"published_at": "2023-10-26T07:47:11Z"
},
{
"tag": "v1.14.9",
"kind": "patch",
"published_at": "2024-05-15T02:10:07Z"
},
{
"tag": "v1.14.8",
"kind": "patch",
"published_at": "2024-04-10T15:25:27Z"
},
{
"tag": "v1.14.7",
"kind": "patch",
"published_at": "2024-03-14T13:01:47Z"
},
{
"tag": "v1.14.6",
"kind": "patch",
"published_at": "2024-02-13T17:15:01Z"
},
{
"tag": "v1.14.5",
"kind": "patch",
"published_at": "2023-12-21T10:05:57Z"
},
{
"tag": "v1.14.4",
"kind": "patch",
"published_at": "2023-12-11T16:54:03Z"
},
{
"tag": "v1.14.3",
"kind": "patch",
"published_at": "2023-11-22T19:18:57Z"
},
{
"tag": "v1.14.2",
"kind": "patch",
"published_at": "2023-11-21T12:21:48Z"
},
{
"tag": "v1.14.1",
"kind": "patch",
"published_at": "2023-11-14T08:29:58Z"
},
{
"tag": "v1.14.0",
"kind": "minor",
"published_at": "2023-11-01T08:39:31Z"
},
{
"tag": "v1.14.0-rc.1",
"kind": "prerelease",
"published_at": "2023-10-26T08:20:43Z"
},
{
"tag": "v1.14.0-rc.0",
"kind": "prerelease",
"published_at": "2023-07-21T09:39:25Z"
},
{
"tag": "v1.13.2",
"kind": "patch",
"published_at": "2023-08-08T14:50:33Z"
},
{
"tag": "v1.13.1",
"kind": "patch",
"published_at": "2023-07-28T16:36:20Z"
},
{
"tag": "v1.13.0",
"kind": "minor",
"published_at": "2023-07-25T14:54:21Z"
},
{
"tag": "v1.13.0-rc.0",
"kind": "prerelease",
"published_at": "2023-04-25T15:39:06Z"
},
{
"tag": "v1.12.3",
"kind": "patch",
"published_at": "2023-07-27T13:37:06Z"
},
{
"tag": "v1.12.2",
"kind": "patch",
"published_at": "2023-06-07T12:11:40Z"
},
{
"tag": "v1.12.1",
"kind": "patch",
"published_at": "2023-04-28T13:53:57Z"
},
{
"tag": "v1.12.0",
"kind": "minor",
"published_at": "2023-04-25T11:03:02Z"
},
{
"tag": "v1.12.0-rc.0",
"kind": "prerelease",
"published_at": "2023-01-31T14:33:59Z"
},
{
"tag": "v1.11.5",
"kind": "patch",
"published_at": "2023-07-27T13:43:08Z"
},
{
"tag": "v1.11.4",
"kind": "patch",
"published_at": "2023-06-07T09:43:33Z"
},
{
"tag": "v1.11.3",
"kind": "patch",
"published_at": "2023-03-27T03:17:32Z"
},
{
"tag": "v1.11.2",
"kind": "patch",
"published_at": "2023-03-09T09:57:25Z"
},
{
"tag": "v1.11.1",
"kind": "patch",
"published_at": "2023-02-24T11:03:09Z"
},
{
"tag": "v1.11.0",
"kind": "minor",
"published_at": "2023-01-27T17:15:16Z"
},
{
"tag": "v1.11.0-rc.0",
"kind": "prerelease",
"published_at": "2022-10-12T13:38:03Z"
},
{
"tag": "v1.10.4",
"kind": "patch",
"published_at": "2023-06-08T09:39:03Z"
},
{
"tag": "v1.10.3",
"kind": "patch",
"published_at": "2023-03-10T08:41:55Z"
},
{
"tag": "v1.10.2",
"kind": "patch",
"published_at": "2023-01-17T18:23:22Z"
},
{
"tag": "v1.10.1",
"kind": "patch",
"published_at": "2022-10-31T22:06:24Z"
},
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2022-10-18T09:42:01Z"
},
{
"tag": "v1.10.0-rc.0",
"kind": "prerelease",
"published_at": "2022-07-06T01:39:15Z"
},
{
"tag": "v1.9.2",
"kind": "patch",
"published_at": "2023-03-09T09:57:52Z"
},
{
"tag": "v1.9.1",
"kind": "patch",
"published_at": "2022-09-14T05:37:52Z"
},
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2022-07-15T04:17:53Z"
},
{
"tag": "v1.9.0-rc.0",
"kind": "prerelease",
"published_at": "2022-05-17T13:51:37Z"
},
{
"tag": "v1.8.2",
"kind": "patch",
"published_at": "2022-09-14T00:14:48Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2022-05-26T21:12:40Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2022-05-17T14:47:13Z"
},
{
"tag": "v1.8.0-rc.0",
"kind": "prerelease",
"published_at": "2022-03-17T12:14:10Z"
},
{
"tag": "v1.7.3",
"kind": "patch",
"published_at": "2022-09-14T00:14:37Z"
},
{
"tag": "v1.7.2",
"kind": "patch",
"published_at": "2022-05-26T21:12:29Z"
},
{
"tag": "v1.7.1",
"kind": "patch",
"published_at": "2022-05-05T22:09:34Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2022-03-22T14:12:39Z"
},
{
"tag": "v1.7.0-rc.0",
"kind": "prerelease",
"published_at": "2021-12-14T23:33:41Z"
},
{
"tag": "v1.6.7",
"kind": "patch",
"published_at": "2022-05-26T21:12:20Z"
},
{
"tag": "v1.6.6",
"kind": "patch",
"published_at": "2022-05-05T22:09:42Z"
},
{
"tag": "v1.6.5",
"kind": "patch",
"published_at": "2022-04-01T08:45:24Z"
},
{
"tag": "v1.6.4",
"kind": "patch",
"published_at": "2022-03-07T16:25:33Z"
},
{
"tag": "v1.6.3",
"kind": "patch",
"published_at": "2022-02-15T12:13:37Z"
},
{
"tag": "v1.6.2",
"kind": "patch",
"published_at": "2022-01-26T03:11:00Z"
},
{
"tag": "v1.6.2-rc.0",
"kind": "prerelease",
"published_at": "2022-01-21T20:22:37Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2022-01-06T22:43:37Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2022-01-05T01:31:12Z"
},
{
"tag": "v1.6.0-rc.0",
"kind": "prerelease",
"published_at": "2021-10-19T20:17:57Z"
},
{
"tag": "v1.5.3",
"kind": "patch",
"published_at": "2022-04-01T08:27:00Z"
},
{
"tag": "v1.5.2",
"kind": "patch",
"published_at": "2022-02-15T12:13:24Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2021-11-22T19:14:37Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2021-10-26T21:32:00Z"
},
{
"tag": "v1.5.0-rc.0",
"kind": "prerelease",
"published_at": "2021-08-31T11:58:21Z"
},
{
"tag": "v1.4.4",
"kind": "patch",
"published_at": "2022-02-15T12:13:10Z"
},
{
"tag": "v1.4.3",
"kind": "patch",
"published_at": "2021-11-22T19:56:26Z"
},
{
"tag": "v1.4.2",
"kind": "patch",
"published_at": "2021-10-25T21:09:44Z"
},
{
"tag": "v1.4.1",
"kind": "patch",
"published_at": "2021-09-10T18:00:33Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2021-08-31T11:49:03Z"
},
{
"tag": "v1.4.0-rc.0",
"kind": "prerelease",
"published_at": "2021-06-22T00:33:17Z"
},
{
"tag": "v1.3.3",
"kind": "patch",
"published_at": "2021-11-22T19:56:03Z"
},
{
"tag": "v1.3.2",
"kind": "patch",
"published_at": "2021-10-25T21:09:35Z"
},
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2021-08-23T14:21:18Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2021-06-29T18:44:38Z"
},
{
"tag": "v1.2.5",
"kind": "patch",
"published_at": "2021-10-25T21:09:26Z"
},
{
"tag": "v1.2.4",
"kind": "patch",
"published_at": "2021-08-23T14:21:31Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2021-06-15T20:52:36Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2021-06-02T21:16:31Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2021-05-04T23:42:46Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2021-04-27T23:18:21Z"
},
{
"tag": "v1.1.4",
"kind": "patch",
"published_at": "2021-08-23T14:53:54Z"
},
{
"tag": "v1.1.3",
"kind": "patch",
"published_at": "2021-06-15T20:52:23Z"
},
{
"tag": "v1.1.2",
"kind": "patch",
"published_at": "2021-06-02T20:28:31Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2021-06-02T18:42:51Z"
}
],
"recent_commits": [
{
"oid": "ed4e659c5c217fb69958eeb75ce8daa65b63823c",
"body": "…lation-concurrency\n\nfeat: make package installation concurrency configurable",
"is_bot": false,
"headline": "Merge pull request #5968 from jake-ciolek/configurable-package-instal…",
"author_name": "Hasan Turken",
"author_login": "turkenh",
"committed_at": "2024-10-01T13:33:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa5f5850ef4ebe763def3c7a350a841a3d65b880",
"body": "Add Jove to ADOPTERS.md",
"is_bot": false,
"headline": "Merge pull request #5980 from jbw976/jove-adopters",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-09-24T19:24:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ef005ca8268d0968ed46c88f151e11d2050bf2a",
"body": "Signed-off-by: Jared Watts <jbw976@gmail.com>",
"is_bot": false,
"headline": "Add Jove to ADOPTERS.md",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-09-24T17:05:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aee9bcb7e2163d898fb758ba9df672e542156686",
"body": "feat(Earthfile): Add checksums and tarballs for crank",
"is_bot": false,
"headline": "Merge pull request #5779 from tampakrap/earthfile_checksums_tarballs",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-09-23T20:11:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8b3ce94c889bcb0d598f8b5cf8a2d81126c3a43",
"body": "- The checksums will help people to verify that their downloaded binary\n is not corrupted\n- The tarballs provide faster downloads. This is beneficial when\n downloading crank often, for example in CI jobs.\n- The tarballs and checksums can be useful for creating distro and brew\n packages, see crossplane#4899\n\nSigned-off-by: Theo Chatzimichos <tampakrap@gmail.com>",
"is_bot": false,
"headline": "feat(Earthfile): Add checksums and tarballs for crank",
"author_name": "Theo Chatzimichos",
"author_login": "tampakrap",
"committed_at": "2024-09-23T19:55:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea6242fa11f88b8f5eac54ac560dc739dfee74e4",
"body": "fix(Earthfile): set the correct timestamps when building the go binaries",
"is_bot": false,
"headline": "Merge pull request #5786 from tampakrap/earthfile_keep_ts",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-09-23T19:20:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "843cc43796b0f40d1fabeef5700f5189d2c31d26",
"body": "…-in-render-cmd",
"is_bot": false,
"headline": "Merge pull request #5976 from cychiang/feat-5975-support-read-secrets…",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-09-23T18:09:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a35a2ab0d1906e5ba99edc3dbbe9c0ada6d72dd",
"body": "- Add an example in `Help` function.\n\nSigned-off-by: Chuan-Yen Chiang <cychiang0823@gmail.com>",
"is_bot": false,
"headline": "- Remove `short` for `function-credentials`",
"author_name": "Chuan-Yen Chiang",
"author_login": "cychiang",
"committed_at": "2024-09-23T16:54:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef0dd46016b5f44d60c07d3d023985b9bceaacbf",
"body": "fix(pkg-mgr): Fix improper constraint error for digests",
"is_bot": false,
"headline": "Merge pull request #5973 from ezgidemirel/fix-linter-and-digest",
"author_name": "Hasan Turken",
"author_login": "turkenh",
"committed_at": "2024-09-23T09:46:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a7144496668e144bb2e20eff0e107fa826e6a70",
"body": "…er version issue for digests\n\nSigned-off-by: ezgidemirel <ezgidemirel91@gmail.com>",
"is_bot": false,
"headline": "fix(pkg-mgr): Update function linter to support metav1 and fix improp…",
"author_name": "ezgidemirel",
"author_login": "ezgidemirel",
"committed_at": "2024-09-23T07:43:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "084b0173535e3dbedcf8ca12ce152162981b6a7f",
"body": "Signed-off-by: Chuan-Yen Chiang <cychiang0823@gmail.com>",
"is_bot": false,
"headline": "fix linting",
"author_name": "Chuan-Yen Chiang",
"author_login": "cychiang",
"committed_at": "2024-09-22T06:10:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bfd74c538e514eb8291c9453b543a17cd999478",
"body": "Signed-off-by: Chuan-Yen Chiang <cychiang0823@gmail.com>",
"is_bot": false,
"headline": "handling function-credentials flag",
"author_name": "Chuan-Yen Chiang",
"author_login": "cychiang",
"committed_at": "2024-09-22T05:50:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40e92feb164cef6362b17de80521b3eb948c570e",
"body": "- Move function-credentials from param to flag.\n\nSigned-off-by: Chuan-Yen Chiang <cychiang0823@gmail.com>",
"is_bot": false,
"headline": "- Rename function-secrets to function-credentials, for naming consistent",
"author_name": "Chuan-Yen Chiang",
"author_login": "cychiang",
"committed_at": "2024-09-21T21:03:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd21a2bcc40c1dc19a2e660ad1884440cf17484b",
"body": "Signed-off-by: Chuan-Yen Chiang <cychiang0823@gmail.com>",
"is_bot": false,
"headline": "fix linting",
"author_name": "Chuan-Yen Chiang",
"author_login": "cychiang",
"committed_at": "2024-09-21T17:01:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ccf771995a37cfad63216a338b7ca9ed27df552",
"body": "init commit, testing on-going\n\nSigned-off-by: Chuan-Yen Chiang <cychiang0823@gmail.com>",
"is_bot": false,
"headline": "resolves crossplane/crossplane#5975",
"author_name": "Chuan-Yen Chiang",
"author_login": "cychiang",
"committed_at": "2024-09-21T16:39:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e99dd7d0b065cf7cfeaa9de109e0e5ea4eb3337",
"body": "Support building and installing Functions with v1 package metadata",
"is_bot": false,
"headline": "Merge pull request #5972 from negz/more-meta",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-09-20T21:49:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f29a327b03ae5ee81afd0dc3a89b4eb9a3e27b9c",
"body": "This validates that Crossplane supports both.\n\nSigned-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Use a mix of v1 and v1beta functions in E2E tests",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-09-19T23:28:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "114b865e0cb0f17f1f31d06a5ec4f4895a3f1789",
"body": "Signed-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Support installing Functions with v1 package metadata",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-09-19T22:11:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0d4db19a91548be3ad6a487d2c6c1ef3448831f",
"body": "feat(pkg-mgr): Support package installation with digests",
"is_bot": false,
"headline": "Merge pull request #5965 from ezgidemirel/pkg-mgr-digest",
"author_name": "Hasan Turken",
"author_login": "turkenh",
"committed_at": "2024-09-19T11:04:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1aa6a0a2581a592befc70affcf033ec110ae00d1",
"body": "Signed-off-by: ezgidemirel <ezgidemirel91@gmail.com>",
"is_bot": false,
"headline": "feat(pkg-mgr): Support package installation with digests",
"author_name": "ezgidemirel",
"author_login": "ezgidemirel",
"committed_at": "2024-09-19T07:54:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "234f5ebddbf4d29cb8a2fbda6d71534ecdcb8fad",
"body": "Previously, the concurrency for package installation was hardcoded\nto 10 goroutines per package establisher. This made it difficult to\nadjust performance settings without rebuilding Crossplane.\n\nThis introduces a new flag --max-concurrent-package-establishers\nto allow configuration of this value at runtime.\n\nFixes #3598\n\nSigned-off-by: Jakub Ciolek <jakub@ciolek.dev>",
"is_bot": false,
"headline": "feat: make package installation concurrency configurable",
"author_name": "Jakub Ciolek",
"author_login": "jake-ciolek",
"committed_at": "2024-09-18T14:32:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edbc23e9ec3a676726af64bb77ae61b2992c97d8",
"body": "Update ADOPTERS.md",
"is_bot": false,
"headline": "Merge pull request #5958 from DE-Wizard/patch-1",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-09-12T21:38:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56cb2038610983db8c83a949fbb7afb3ed647fa5",
"body": "Signed-off-by: Eric Deitrick <149844727+DE-Wizard@users.noreply.github.com>",
"is_bot": false,
"headline": "Update ADOPTERS.md",
"author_name": "Eric Deitrick",
"author_login": "DE-Wizard",
"committed_at": "2024-09-12T17:05:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10f8f2daf7b91a2684df97a734dc6bce1795f90e",
"body": "Signed-off-by: Eric Deitrick <149844727+DE-Wizard@users.noreply.github.com>",
"is_bot": false,
"headline": "Update ADOPTERS.md",
"author_name": "Eric Deitrick",
"author_login": "DE-Wizard",
"committed_at": "2024-09-12T15:37:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1efa54cc5f1e65d70252e1fdd950f5beab4295dc",
"body": "Retry on conflict during CRD dry-run updates in XRD validation webhook",
"is_bot": false,
"headline": "Merge pull request #5868 from ulucinar/retry-xrd-webhook",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-09-11T14:03:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38515aa179747b5a10758834a4238e01d14f602b",
"body": "Fix \"Missing node in tree error\" after updating a package source",
"is_bot": false,
"headline": "Merge pull request #5946 from jdillet/fix-3985",
"author_name": "Hasan Turken",
"author_login": "turkenh",
"committed_at": "2024-09-11T13:18:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0f6de6e300fd081a9ff4ad411410c1ccc6cc619",
"body": "…move-beta\n\nfix(ga): remove beta for CompositionModePipeline",
"is_bot": false,
"headline": "Merge pull request #5948 from haarchri/fix/compositionModePipeline-re…",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-09-10T18:39:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe17a8ddf498a9bb94a91e335ff5c649690b695f",
"body": "Signed-off-by: Christopher Haar <christopher.haar@upbound.io>",
"is_bot": false,
"headline": "fix(ga): remove beta for CompositionModePipeline",
"author_name": "Christopher Haar",
"author_login": "haarchri",
"committed_at": "2024-09-10T12:49:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "991ac5fbd0c0b7edd56c2b1ac9912867dff022f6",
"body": "Signed-off-by: Jose Francisco Dillet Alfonso <jose-francisco.dillet-alfonso@broadcom.com>",
"is_bot": false,
"headline": "Do not wrap line",
"author_name": "Jose Francisco Dillet Alfonso",
"author_login": null,
"committed_at": "2024-09-10T09:00:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "519e70726ebfabf30f54c9852af779d7095672e7",
"body": "Delete packages in lock having same name and distinct identifier.\n\nSigned-off-by: Jose Francisco Dillet Alfonso <jose-francisco.dillet-alfonso@broadcom.com>",
"is_bot": false,
"headline": "Fix \"Missing node in tree error\" after updating a package source",
"author_name": "Ubuntu",
"author_login": null,
"committed_at": "2024-09-10T08:58:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0e9a6d99a08913e1520507df5caec55efaee283",
"body": "Make composition revision numbers mutable",
"is_bot": false,
"headline": "Merge pull request #5939 from negz/mutants",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-09-06T22:24:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "838c1b6dc441ace03951543e9f460c2f0ea7a8d8",
"body": "…ut-digest\n\nchore(deps): update actions/checkout digest to 692973e (main)",
"is_bot": false,
"headline": "Merge pull request #5935 from crossplane/renovate/main-actions-checko…",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-09-06T14:13:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0afe70bace1ce39efc2b74ba604fe36ec37bf1b",
"body": "They were made immutable by mistake.\n\nSigned-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Make composition revision numbers mutable",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-09-05T23:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4eab9d7f91ca49ff17e82085009d74261aa3cb5a",
"body": "Update e2e tests by adding a description for `features.New` calls",
"is_bot": false,
"headline": "Merge pull request #5931 from jeanduplessis/e2e-with-desc",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-09-05T21:56:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51b46801d4ac71f291f9a1f290ee9e5047836dd7",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into e2e-with-desc",
"author_name": "Jean du Plessis",
"author_login": "jeanduplessis",
"committed_at": "2024-09-05T16:27:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74b63c88926613253f4795c3e86be158e0449457",
"body": "Signed-off-by: Jean du Plessis <jean@upbound.io>",
"is_bot": false,
"headline": "Remove unnecessary function comment.",
"author_name": "Jean du Plessis",
"author_login": "jeanduplessis",
"committed_at": "2024-09-05T16:22:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0efa870516bfa32db61df30d301041a5e6429fe5",
"body": null,
"is_bot": true,
"headline": "chore(deps): update actions/checkout digest to 692973e",
"author_name": "crossplane-renovate[bot]",
"author_login": "crossplane-renovate[bot]",
"committed_at": "2024-09-05T08:09:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90e38129c4499f99e91e870abb605415b5f5af82",
"body": "Code updates after renaming `master` → `main`",
"is_bot": false,
"headline": "Merge pull request #5930 from jeanduplessis/main",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-09-04T18:55:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae79fa4bbcfe592cd17da1a4863d4c93436dbef7",
"body": "Signed-off-by: Jean du Plessis <jean@upbound.io>",
"is_bot": false,
"headline": "Add generated files from earthly +generate",
"author_name": "Jean du Plessis",
"author_login": "jeanduplessis",
"committed_at": "2024-09-03T14:54:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3417cc6b534da87a0e372b618a64947ed94ec3b7",
"body": "Signed-off-by: Jean du Plessis <jean@upbound.io>",
"is_bot": false,
"headline": "Update e2e tests by adding a description for features.New calls.",
"author_name": "Jean du Plessis",
"author_login": "jeanduplessis",
"committed_at": "2024-09-03T14:43:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "972284c372ee31be2b6117dd6a0055068de818b0",
"body": "Signed-off-by: Jean du Plessis <jean@upbound.io>",
"is_bot": false,
"headline": "Updates e2e-framework dependency to latest version",
"author_name": "Jean du Plessis",
"author_login": "jeanduplessis",
"committed_at": "2024-09-03T14:43:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72175d614f6f12feb936c7d94d4ff06e3eeb8f48",
"body": "… master to main.\n\nSigned-off-by: Jean du Plessis <jean@upbound.io>",
"is_bot": false,
"headline": "Updates repo links, workflow configurations and other references from…",
"author_name": "Jean du Plessis",
"author_login": "jeanduplessis",
"committed_at": "2024-09-03T10:54:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b4de654d10ad46f7c3058510c1a28f8981953df",
"body": "chore: drop 1.14 and update 1.17 date from release table",
"is_bot": false,
"headline": "Merge pull request #5919 from phisco/readme-1.17",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-08-31T02:01:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "972c24252865ea67117bc10d79276fd65dbc56d8",
"body": "Co-authored-by: Jared Watts <jbw976@gmail.com>\nSigned-off-by: Philippe Scorsolini <p.scorsolini@gmail.com>",
"is_bot": false,
"headline": "chore: right year for 1.20 EOL",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-30T14:52:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bcd938b9e14a86d66b2d03fc498ddfbf93dfab37",
"body": "Signed-off-by: Philippe Scorsolini <p.scorsolini@gmail.com>",
"is_bot": false,
"headline": "chore: drop 1.14 and update 1.17 date from release table",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-29T09:25:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a512939478dda439e6b963b121d4d5be95ef8ba",
"body": "docs: changing gympass adopters to wellhub company",
"is_bot": false,
"headline": "Merge pull request #5887 from caiofralmeida/update-wellhub-adopters",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-08-28T23:49:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67b3c85fe4c9deca8c3aac785ed245e2c2f621a2",
"body": "Signed-off-by: Caio Almeida <caio.f.r.amd@gmail.com>",
"is_bot": false,
"headline": "docs: changing gympass adopters to wellhub company",
"author_name": "Caio Almeida",
"author_login": "caiofralmeida",
"committed_at": "2024-08-28T20:14:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbc64645fc4843d1dfd37008222356bc8edbe9aa",
"body": "fix: ensure x-kubernetes-preserve-unknown-fields is copied from xrd to crd spec",
"is_bot": false,
"headline": "Merge pull request #5908 from vibe/master",
"author_name": "Hasan Turken",
"author_login": "turkenh",
"committed_at": "2024-08-22T13:49:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f55ce852e116c6cba920340f9fba8c6b7cae3273",
"body": "…o crd spec\n\nSigned-off-by: Christian Franco <30784921+vibe@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: ensure x-kubernetes-preserve-unknown-fields is copied from xrd t…",
"author_name": "Christian Franco",
"author_login": "vibe",
"committed_at": "2024-08-21T01:28:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ed1a8698f2227bfd5e5e0d90913c602c02f3e92",
"body": "Omit docker login registry arg when promoting tag in Docker Hub",
"is_bot": false,
"headline": "Merge pull request #5907 from negz/thanks-docker",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-20T19:55:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "265dc449ccf2dc36d44e5f13ef42de2e210b15fa",
"body": "Apparently you get a magic URL in your Docker config file when you omit\nthe registry. It seems to be needed to successfully push.\n\nSigned-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Omit docker login registry arg when promoting tag in Docker Hub",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-20T19:51:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b017f86bae7d4fb632beb5805a2f301b116b05ec",
"body": "ci: --push on promote",
"is_bot": false,
"headline": "Merge pull request #5901 from phisco/push-it",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-20T14:38:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d263c1f2220a166684da3086fb18c6cc22a1705",
"body": "Add secrets.crossplane.io grant rules to RBAC manager roles, even though the feature is alpha.",
"is_bot": false,
"headline": "Merge pull request #5884 from luxas/secrets_roles",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-20T14:17:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d46a1c5dd4f08634624fa6141f4c705a1303e3a9",
"body": "Signed-off-by: Philippe Scorsolini <p.scorsolini@gmail.com>",
"is_bot": false,
"headline": "ci: --push on promote",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-20T13:45:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4247d894b5d4c5f98ce58b71b31fffc25b7cd1e",
"body": null,
"is_bot": false,
"headline": "Merge pull request #5899 from phisco/promote-login-right-repo",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-20T12:39:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f906fbfbd9dff991649319629267608871e7c9c",
"body": "Signed-off-by: Philippe Scorsolini <p.scorsolini@gmail.com>",
"is_bot": false,
"headline": "ci: docker login to right registry when promoting",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-20T10:41:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72c7d9dfc9b572475f5f58328633294b93fe191d",
"body": "chore: add 1.17 release branch to renovate",
"is_bot": false,
"headline": "Merge pull request #5898 from phisco/renovate-rolling-window-1.17",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-20T08:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae42fd7a71d0391a071c725b16c8eda2552e49a7",
"body": "Signed-off-by: Philippe Scorsolini <p.scorsolini@gmail.com>",
"is_bot": false,
"headline": "chore: add 1.17 release branch to renovate",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-20T08:38:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a37673faa2d50c65eb7e670fcd650c6bd07c8a04",
"body": "chore(deps): bump crossplane-runtime to v1.18.0-rc.0",
"is_bot": false,
"headline": "Merge pull request #5896 from phisco/bump-xp-runtime-v1.18.0-rc.0",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-20T08:03:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "446d9d0da6620b1e35d54ee5ca54375ccfb7d4a5",
"body": "Signed-off-by: Philippe Scorsolini <p.scorsolini@gmail.com>",
"is_bot": false,
"headline": "chore(deps): bump crossplane-runtime to v1.18.0-rc.0",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-20T07:40:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49efeb45504e9cb2e3f6fe80b6e0f633c7d5028d",
"body": "Fix race condition creating certs in init.",
"is_bot": false,
"headline": "Merge pull request #5892 from JonathanO/jono-fix-cert-init-race",
"author_name": "Hasan Turken",
"author_login": "turkenh",
"committed_at": "2024-08-19T10:01:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9eca638e6aa6c2bc92ad00dce284c6fc3f20b7fe",
"body": "Using Update instead of CreateOrUpdate avoids a race by failing with a conflict if the underlying\nSecret changed between the call to Get and the call to Update.\n\nSigned-off-by: Jonathan Oddy <jonathan@woaf.net>",
"is_bot": false,
"headline": "Fix race condition creating certs in init.",
"author_name": "Jonathan Oddy",
"author_login": null,
"committed_at": "2024-08-18T20:50:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75f2fed7351cb7e4abe01a0573e3644be794953d",
"body": "Documentation housekeeping for graduation application",
"is_bot": false,
"headline": "Merge pull request #5889 from jbw976/graduation-updates",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-17T01:12:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e86d29240b7cbb38c1cdbf4eec0d34beea5ba88a",
"body": "Signed-off-by: Jared Watts <jbw976@gmail.com>",
"is_bot": false,
"headline": "security: update links to release cycle in security policy",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-08-17T01:02:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43b12269b957f81bd2f0ed11799a568f94ce3918",
"body": "Signed-off-by: Jared Watts <jbw976@gmail.com>",
"is_bot": false,
"headline": "README: clarify public roadmap change process",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-08-17T01:02:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de23777e8b9a5c07df5b38eb61bb84ec1fe36494",
"body": "Promote composition functions to v1, and deprecate patch and transform",
"is_bot": false,
"headline": "Merge pull request #5885 from negz/its-happening-dot-gif",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-16T22:08:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "332d42b38803604e9e6823ab94ec9d0a9359e720",
"body": "It's still generally relevant, but it was at the functions test which\nisn't beta anymore.\n\nSigned-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Remove comment about E2E testing beta features",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-16T19:59:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1f67528a7606ee51a08af04832acec66899aeaa",
"body": "This method includes the version (v1 or v1beta1). Including it in the\nmetrics will help folks identify whether their control planes are\nrunning any functions that are still speaking only v1beta1.\n\nSigned-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Include gRPC method in metrics",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-16T19:58:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5f73edd3b432f105bad765a61777ef023447bef",
"body": "I missed this when moving it out from crossplane beta xpkg.\n\nSigned-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Register the init command under crossplane xpkg",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-16T02:26:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31653fe60495cf3c843a0e72ad2647c0fa2318cf",
"body": "Signed-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Fix typo when hidden --enable-composition-revisions flag is passed",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-16T02:23:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b37968e7616f24037ba9f4490daf6da53a8f3a58",
"body": "We want to promote the v1beta1 function proto to v1. This isn't a\nbreaking change. There's actually no changes - we just want to signal\nthat it's reached v1.\n\nCrossplane (the client) must continue to support v1beta1 functions (i.e.\nservers) in order to remain compatible with existing functions befor\n[…]\neserializing it into a v1beta1 request.\nAs far as I can tell this is the best way to convert a Go protobuf\nmessage to an identical message of a different type.\n\nSigned-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Fall back to v1beta1 if a function doesn't implement v1",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-16T02:20:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fd8b00197f97a79415c66ec990788ae9d696d209",
"body": "Signed-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Update storage versions for Functions and FunctionRevisions to v1",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-16T01:42:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78d6d1a8b8fef56bdd3a522856a2d5c82685079f",
"body": "Signed-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Promote render and xpkg init CLI commands to GA",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-15T04:53:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f2241de1944aae0f6ad7d0a4d771867dee82bcb",
"body": "Signed-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Promote functions to v1, deprecate native P&T",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-15T04:53:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc4813bb6446dd29cdcf2e47577232f44d371a6d",
"body": "Implement extra resource handling as a `FunctionRunner`",
"is_bot": false,
"headline": "Merge pull request #5883 from negz/extra-extra",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-14T18:29:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81074a1e1d21eeedacdc3593c0b2ecf3d67c4dc6",
"body": "Signed-off-by: Lucas Käldström <lucas.kaldstrom@upbound.io>",
"is_bot": false,
"headline": "Add secrets.crossplane.io grant rules to RBAC manager roles",
"author_name": "Lucas Käldström",
"author_login": "luxas",
"committed_at": "2024-08-14T13:56:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a808bf15cfc26d12471deda4ebcc45145382cc3e",
"body": "This breaks extra resource handling out of the main function composer\nloop (and crossplane beta render loop). It's now implemented as a\nFunctionRunner that wraps the existing FunctionRunner implementation,\nfetching extra resources as needed.\n\nSigned-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Add a FunctionRunner that supports extra resources",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-14T06:52:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d31a117147684cacd2d400b57804b44e237b287e",
"body": "Signed-off-by: Philippe Scorsolini <p.scorsolini@gmail.com>",
"is_bot": false,
"headline": "refactor: avoid using named loops",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-13T08:53:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9cd98039bdab3313a7708d0f24026a23b0f205a",
"body": "Delete resources that don't have a controller but appear in resourceRefs",
"is_bot": false,
"headline": "Merge pull request #5876 from negz/this-is-probably-okay",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-12T20:04:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23b1adaa59f1a66ebc3401f91b45d5c70344a0f9",
"body": "Signed-off-by: Philippe Scorsolini <p.scorsolini@gmail.com>",
"is_bot": false,
"headline": "fix: exit on fatal handling extra resources",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-12T13:50:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77acf79a7cb2dabacbf3ab823a4ccb912d116caa",
"body": "…m-docker-docker-vulnerability\n\nfix(deps): update module github.com/docker/docker to v25.0.6+incompatible [security] (master)",
"is_bot": false,
"headline": "Merge pull request #5852 from crossplane/renovate/master-go-github.co…",
"author_name": "Philippe Scorsolini",
"author_login": "phisco",
"committed_at": "2024-08-12T13:17:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "352b24b2a79bac0382fb095e1cadfa88120cd58f",
"body": "Previously if a composed resource appeared in an XR's spec.resourceRefs\nbut didn't have a controller reference the XR would refuse to garbage\ncollect it. The XR would then remove the composed resource from its\nresource refs, effectively orphaning it.\n\nNow if the composed resource has _no_ controller\n[…]\nd restored using a tool like Velero).\n\nIf the composed resource is controlled by another resource, we'll now\nreturn an error rather than silently orphaning it.\n\nSigned-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Delete resources that don't have a controller but appear in resourceRefs",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-10T00:29:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f07c1817467793c21227efdb08cb3495737462f6",
"body": "This happened when I ran `earthly +reviewable`. Not sure how this got\ninto the master branch?\n\nSigned-off-by: Nic Cope <nicc@rk0n.org>",
"is_bot": false,
"headline": "Automatic linter fix in cmd",
"author_name": "Nic Cope",
"author_login": "negz",
"committed_at": "2024-08-10T00:28:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a045274ab7f82cd51a966208d5ba6ebbcc37eecf",
"body": "Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>",
"is_bot": false,
"headline": "Retry on conflict during CRD dry-run updates in XRD validation webhook",
"author_name": "Alper Rifat Ulucinar",
"author_login": "ulucinar",
"committed_at": "2024-08-06T10:06:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63d16f52e8659c50fbc0157f234f0d3cc60c0d25",
"body": "chore: fix comment for struct field",
"is_bot": false,
"headline": "Merge pull request #5832 from stellrust/master",
"author_name": "Hasan Turken",
"author_login": "turkenh",
"committed_at": "2024-08-06T07:40:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b902a0eea6addb925449184d0b6f1103b575413d",
"body": "…ible [security]",
"is_bot": true,
"headline": "fix(deps): update module github.com/docker/docker to v25.0.6+incompat…",
"author_name": "crossplane-renovate[bot]",
"author_login": "crossplane-renovate[bot]",
"committed_at": "2024-08-02T08:11:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "691dcc748b3f1ddf54fd56dacd5a7cad2134a23b",
"body": "download/cache full graph of dependencies at `beta validate`",
"is_bot": false,
"headline": "Merge pull request #5809 from enesonus/download-all-config-deps",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-07-31T18:56:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93dff5dae11213030d69480a687f47d2c28ea6f5",
"body": "Signed-off-by: Mehmet Enes <menes.onus@gmail.com>",
"is_bot": false,
"headline": "update tests for readability",
"author_name": "Mehmet Enes",
"author_login": "enesonus",
"committed_at": "2024-07-31T05:18:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f551eefe3a176ed21dd2d22290b1765837b1a73",
"body": "Co-authored-by: Jared Watts <jbw976@gmail.com>\nSigned-off-by: Mehmet Enes <94247411+enesonus@users.noreply.github.com>",
"is_bot": false,
"headline": "Update cmd/crank/beta/validate/manager_test.go",
"author_name": "Mehmet Enes",
"author_login": "enesonus",
"committed_at": "2024-07-30T14:54:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7634a6e3c5123dc620ab77f94b66cb2d7765fa80",
"body": "Signed-off-by: Mehmet Enes <menes.onus@gmail.com>",
"is_bot": false,
"headline": "update m.confs var type and tests",
"author_name": "Mehmet Enes",
"author_login": "enesonus",
"committed_at": "2024-07-30T14:54:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aaad84235eb76b6004d9f517b786ddd0b81dc397",
"body": "Signed-off-by: Mehmet Enes <menes.onus@gmail.com>",
"is_bot": false,
"headline": "recursively add dependencies",
"author_name": "Mehmet Enes",
"author_login": "enesonus",
"committed_at": "2024-07-30T14:54:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f16020febeaba09012b949dd2475c0feb8e8e13d",
"body": "Signed-off-by: Mehmet Enes <menes.onus@gmail.com>",
"is_bot": false,
"headline": "download/cache full graph of dependencies at beta validate",
"author_name": "Mehmet Enes",
"author_login": "enesonus",
"committed_at": "2024-07-30T14:54:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52d3a7e730b70287863bf4092791f2bc742a35a9",
"body": "Use more global cache directory at validate",
"is_bot": false,
"headline": "Merge pull request #5839 from enesonus/global-validate-cache",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-07-30T05:30:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5352fdf58757923e84c716337ad68fa7e94e1d76",
"body": "Support dependecies with version constraints in crank validate",
"is_bot": false,
"headline": "Merge pull request #5669 from jtyr/jtyr-validate",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-07-25T00:05:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0170de4188e6a7b1d76d309ca7bb3abd60104b6e",
"body": "Co-authored-by: Jared Watts <jbw976@gmail.com>\nSigned-off-by: Mehmet Enes <94247411+enesonus@users.noreply.github.com>",
"is_bot": false,
"headline": "Update cmd/crank/beta/validate/cmd.go",
"author_name": "Mehmet Enes",
"author_login": "enesonus",
"committed_at": "2024-07-23T21:48:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "959db21684d18c2eb45748dbef5da44e21b188e4",
"body": "Signed-off-by: Mehmet Enes <menes.onus@gmail.com>",
"is_bot": false,
"headline": "use global cache directory at validate",
"author_name": "Mehmet Enes",
"author_login": "enesonus",
"committed_at": "2024-07-22T20:38:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b8545cc1caa6b5f57ccd7238dda7fbcb4c3d4af",
"body": "Add configuration.meta/crossplane.yaml support for dependencies to beta validate",
"is_bot": false,
"headline": "Merge pull request #5815 from enesonus/config-meta-validate",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-07-22T19:00:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9a8bef9c3e636af691329bef6244c81080ace7a",
"body": "docs: add Rogo to ADOPTERS.md",
"is_bot": false,
"headline": "Merge pull request #5837 from aiell0/master",
"author_name": "Jared Watts",
"author_login": "jbw976",
"committed_at": "2024-07-22T17:02:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d21171ea1133224068c12df0c6a8cc212d598f9",
"body": "Signed-off-by: aiell0 <lawrence@rogodata.com>",
"is_bot": false,
"headline": "docs: specify we run in production",
"author_name": "aiell0",
"author_login": "aiell0",
"committed_at": "2024-07-22T17:00:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a78817ce5604fca1f58ddba1d919d9c48beb7556",
"body": "Signed-off-by: Lawrence Aiello <lawrence@rogodata.com>\nSigned-off-by: aiell0 <lawrence@rogodata.com>",
"is_bot": false,
"headline": "docs: add Rogo to ADOPTERS.md",
"author_name": "Lawrence Aiello",
"author_login": "aiell0",
"committed_at": "2024-07-22T17:00:15Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 0,
"latest_release_at": "2024-09-16T20:35:31Z",
"latest_release_tag": "v1.16.2",
"releases_from_tags": true,
"days_since_last_push": 2,
"active_weeks_last_year": 0,
"days_since_latest_release": 675,
"mean_days_between_releases": 24.8
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/crossplane/crossplane",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": false,
"registry_url": "https://pkg.go.dev/github.com/crossplane/crossplane",
"is_deprecated": false,
"latest_version": "v1.20.11",
"repository_url": "https://github.com/crossplane/crossplane",
"versions_count": 175,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-23T09:17:03Z",
"latest_version_yanked": null,
"days_since_latest_publish": 1
}
]
},
"popularity": {
"forks": 1,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-03-30",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [
"apis/apiextensions/fn/proto/v1/run_function.proto",
"apis/apiextensions/fn/proto/v1beta1/zz_generated_run_function.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"design/assets/design-doc-provider-strategy/dcl/go.mod",
"go.mod"
],
"largest_source_bytes": 107957,
"source_files_sampled": 401,
"oversized_source_files": 4,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "dario.cat/mergo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/AdaLogics/go-fuzz-headers",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20230811130428-ced1acdcaa24"
},
{
"name": "github.com/Masterminds/semver",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/alecthomas/kong",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.0"
},
{
"name": "github.com/crossplane/crossplane-runtime",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.18.0-rc.0"
},
{
"name": "github.com/docker/docker",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v25.0.6+incompatible"
},
{
"name": "github.com/docker/go-connections",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.0"
},
{
"name": "github.com/emicklei/dot",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.2"
},
{
"name": "github.com/go-git/go-billy/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.5.0"
},
{
"name": "github.com/go-git/go-git/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.12.0"
},
{
"name": "github.com/golang-jwt/jwt/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.2.1"
},
{
"name": "github.com/google/go-cmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.0"
},
{
"name": "github.com/google/go-containerregistry",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.19.1"
},
{
"name": "github.com/google/go-containerregistry/pkg/authn/k8schain",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20230919002926-dbcd01c402b2"
},
{
"name": "github.com/jmattheis/goverter",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.2"
},
{
"name": "github.com/pkg/errors",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.1"
},
{
"name": "github.com/sirupsen/logrus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.3"
},
{
"name": "github.com/spf13/afero",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "github.com/upbound/up-sdk-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.1-0.20240122203953-2d00664aab8e"
},
{
"name": "golang.org/x/sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.0"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.63.2"
},
{
"name": "google.golang.org/grpc/cmd/protoc-gen-go-grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.0"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.34.2"
},
{
"name": "k8s.io/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.30.1"
},
{
"name": "k8s.io/apiextensions-apiserver",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.30.0"
},
{
"name": "k8s.io/apimachinery",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.30.1"
},
{
"name": "k8s.io/apiserver",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.30.0"
},
{
"name": "k8s.io/cli-runtime",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.29.1"
},
{
"name": "k8s.io/client-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.30.1"
},
{
"name": "k8s.io/code-generator",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.30.0"
},
{
"name": "k8s.io/kubectl",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.29.1"
},
{
"name": "k8s.io/metrics",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.29.1"
},
{
"name": "k8s.io/utils",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20230726121419-3b25d923346b"
},
{
"name": "sigs.k8s.io/controller-runtime",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.18.2"
},
{
"name": "sigs.k8s.io/controller-tools",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.14.0"
},
{
"name": "sigs.k8s.io/e2e-framework",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.0"
},
{
"name": "sigs.k8s.io/kind",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.20.0"
},
{
"name": "sigs.k8s.io/yaml",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/docker/docker-credential-helpers",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.2"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.19.1"
},
{
"name": "golang.org/x/net",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.24.0"
},
{
"name": "golang.org/x/term",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.19.0"
},
{
"name": "k8s.io/klog/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.120.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 2,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "negz",
"commits": 1891,
"avatar_url": "https://avatars.githubusercontent.com/u/1049349?v=4"
},
{
"type": "User",
"login": "hasheddan",
"commits": 1383,
"avatar_url": "https://avatars.githubusercontent.com/u/31777345?v=4"
},
{
"type": "User",
"login": "phisco",
"commits": 609,
"avatar_url": "https://avatars.githubusercontent.com/u/5697904?v=4"
},
{
"type": "User",
"login": "jbw976",
"commits": 551,
"avatar_url": "https://avatars.githubusercontent.com/u/4313439?v=4"
},
{
"type": "User",
"login": "muvaf",
"commits": 325,
"avatar_url": "https://avatars.githubusercontent.com/u/7584126?v=4"
},
{
"type": "User",
"login": "turkenh",
"commits": 324,
"avatar_url": "https://avatars.githubusercontent.com/u/9900707?v=4"
},
{
"type": "User",
"login": "ichekrygin",
"commits": 197,
"avatar_url": "https://avatars.githubusercontent.com/u/324803?v=4"
},
{
"type": "User",
"login": "displague",
"commits": 124,
"avatar_url": "https://avatars.githubusercontent.com/u/317653?v=4"
},
{
"type": "User",
"login": "suskin",
"commits": 89,
"avatar_url": "https://avatars.githubusercontent.com/u/813571?v=4"
},
{
"type": "User",
"login": "ezgidemirel",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/29144823?v=4"
}
],
"contributors_sampled": 98,
"top_contributor_share": 0.301
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"backport.yml",
"ci.yml",
"commands.yml",
"pr.yml",
"promote.yml",
"renovate.yml",
"scan.yaml",
"stale.yml",
"tag.yml"
],
"has_docs_dir": false,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 28 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 7,
"reason": "dependency not pinned by hash detected -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "80 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ed4e659c5c217fb69958eeb75ce8daa65b63823c",
"ran_at": "2026-07-24T18:52:13Z",
"aggregate_score": 4.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/adamwg/crossplane",
"host": "github.com",
"name": "crossplane",
"owner": "adamwg"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": "Abandonment Policy applies a 85% multiplier to weighted overall health.",
"notes": [
{
"code": "abandonment_overall_adjustment",
"params": {
"cap": 0,
"pct": 85
}
}
],
"value": 35,
"inputs": {
"security": 48,
"vitality": 44,
"community": 12,
"governance": 43,
"engineering": 54,
"abandonment_cap": null,
"abandonment_state": "at_risk",
"abandonment_multiplier": 85,
"weighted_overall_before_abandonment": 41,
"overall_after_abandonment_multiplier": 35
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 44,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"commits_last_year": 0,
"human_commit_share": 0.98,
"days_since_last_push": 2,
"active_weeks_last_year": 0
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "0/52 weeks with commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 0
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "0 commits in the last year",
"points": 0,
"status": "missed",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 0
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "moderate",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v1.16.2",
"releases_from_tags": true,
"days_since_latest_release": 675,
"mean_days_between_releases": 24.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 675 days ago",
"points": 7.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 675
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~24.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 24.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"cap": null,
"state": "at_risk",
"guards": [
"no_open_demand"
],
"signals": [
"release_stall",
"scorecard_unmaintained"
],
"red_flag": true,
"multiplier_pct": 85,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 0,
"unanswered_open_issues": 0,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 661,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 661 days; 2 unmet obligation(s): releases stalled, Scorecard reports it unmaintained",
"points": 85,
"status": "partial",
"details": [
{
"code": "abandonment_flagged",
"params": {
"days": 661,
"count": 2,
"signals": "releases stalled, Scorecard reports it unmaintained"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 12,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 1,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 43,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 98,
"top_contributor_share": 0.301
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 30% of commits",
"points": 15.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 30
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "98 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 98
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 28 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"followers": 67,
"owner_type": "User",
"is_verified": null,
"owner_login": "adamwg",
"public_repos": 84,
"account_age_days": 5782
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "67 followers of adamwg",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 67,
"login": "adamwg"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "84 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 84
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 54,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "9 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 9
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "critical",
"name": "Documentation",
"note": null,
"notes": [],
"value": 15,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "https://crossplane.io",
"has_readme": false,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://crossplane.io",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 48,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 4.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 28 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 7",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "80 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 68,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.735,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "72 of 98 human commits state their intent (structured subject or explanatory body)",
"points": 39.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 72,
"sampled": 98
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"design/assets/design-doc-provider-strategy/dcl/go.mod",
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "design/assets/design-doc-provider-strategy/dcl/go.mod, go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "design/assets/design-doc-provider-strategy/dcl/go.mod, go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 7",
"points": 7,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 107957,
"source_files_sampled": 401,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/401 source files over 60KB",
"points": 54.5,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 401,
"oversized": 4
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": [
"apis/apiextensions/fn/proto/v1/run_function.proto",
"apis/apiextensions/fn/proto/v1beta1/zz_generated_run_function.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "apis/apiextensions/fn/proto/v1/run_function.proto, apis/apiextensions/fn/proto/v1beta1/zz_generated_run_function.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "apis/apiextensions/fn/proto/v1/run_function.proto, apis/apiextensions/fn/proto/v1beta1/zz_generated_run_function.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Community profile unavailable",
"go package 'github.com/crossplane/crossplane' points at a different repository (https://github.com/crossplane/crossplane); excluded from ecosystem scoring",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-24T18:52:37.329742Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/adamwg/crossplane.svg",
"full_name": "adamwg/crossplane",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.