Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-25 15:01 UTC

alchemyplatform / go-ethereum

Official Go implementation of the Ethereum protocol

GoLGPL-3.0★ 1 star⑂ 1 forksince Sep 2021forkView on GitHub ↗

alchemyplatform/go-ethereum holds a health index of 19 out of 100, placing it in the Critical band. It scores highest on AI Readiness (68/100) and lowest on Community & Adoption (12/100). It was last updated 436 days ago. 2 contributors account for most of its recent work.

overall / 100

Critical

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

Excellent85-100Exemplary; meets essentially all checked criteria

Good70-84Healthy; minor gaps

Moderate50-69Acceptable with notable gaps; review recommended

At risk30-49Significant weaknesses; adoption warrants caution

Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Abandonment Policy applies a 60% multiplier to weighted overall health and gives it a ceiling of 49.

Ownership

AlchemyOrganization

1,058 followers161 public repossince Apr 2019

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

Registry	Package	Version	Downloads / mo	Versions	Last publish
Go	github.com/ethereum/go-ethereumpoints to another repo — not scored	v1.17.4	-	243	33 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

20Critical · 22% of overall

Development activity

1Critical

Abandonment alert

Work has arrived and nobody has attended to it

no human commit in 1576 daysautomated commits excludeda published fix left unappliedreleases stalledOpenSSF Scorecard reports it unmaintainedOverall rating: At risk ceiling

Silence alone is never the finding — a small, finished library may need no commits for years. This alert requires both: no human commit for a long time, and obligations the project is visibly not discharging. Automated commits do not count as maintenance.

How abandonment is assessed

How it's scored

0/36	Push recency — last push 436 days ago
0/36	Commit cadence — 0/52 weeks with commits
0/18	Commit volume — 0 commits in the last year
0/10	OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0

Inputs used

commits_last_year	0
human_commit_share	1
days_since_last_push	436
active_weeks_last_year	0

Release discipline

48At risk

How it's scored

16.2/27	Ships releases — 100 version tags (no GitHub releases)
0/36	Release recency — latest release 1,796 days ago
27/27	Release cadence — a release every ~28.4 days
0/10	OpenSSF Scorecard: Signed-Releases — no data

Inputs used

releases_count	100
latest_release_tag	v1.10.8
releases_from_tags	yes
days_since_latest_release	1,796
mean_days_between_releases	28.4

Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

12Critical · 18% of overall

Popularity & adoption

1Critical

How it's scored

0/60	Stars — 1 stars
0/25	Forks — 1 forks
0/15	Watchers — 0 watchers

Inputs used

forks	1
stars	1
watchers	0
growth_state	unverified
growth_factor_pct	100
growth_unverified_reason	no_history

Community health

25Critical

How it's scored

0/22.5	README
22.5/22.5	License — recognized license (LGPL-3.0)
0/18	CONTRIBUTING guide
0/13.5	Code of conduct
0/7.2	Issue template
0/6.3	PR template

Inputs used

has_readme	no
has_license	no
has_contributing	no
has_issue_template	no
has_code_of_conduct	no
has_pull_request_template	no

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

48At risk · 24% of overall

Maintainer resilience (bus factor)

64Moderate

How it's scored

25.2/54	Bus factor — 2 contributor(s) cover half of all commits
14.9/22.5	Commit distribution — top contributor authored 34% of commits
13.5/13.5	Contributor breadth — 100 contributors
10/10	OpenSSF Scorecard: Contributors — project has 63 contributing companies or organizations

Inputs used

bus_factor	2
contributors_sampled	100
top_contributor_share	0.339

Issue & PR responsiveness

1Critical

How it's scored

0/46.8	Issue resolution — no issues or no data
0/38.3	PR acceptance — 0/1 decided PRs merged
0/15	OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0

Inputs used

merged_prs	0
open_issues	0
closed_issues	0
issue_closed_ratio	—
closed_unmerged_prs	1

Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.

Ownership & stewardship

77Good

How it's scored

30/30	Ownership backing — organization-owned
0/20	Verified domain
21.7/25	Owner reach — 1,058 followers of alchemyplatform
25/25	Track record — 161 public repos, account ~7 yr old

Inputs used

followers	1,058
owner_type	Organization
is_verified	—
owner_login	alchemyplatform
public_repos	161
account_age_days	2,653

Engineering Quality

Are baseline engineering and documentation practices in place?

50Moderate · 20% of overall

Engineering practices

50Moderate

How it's scored

0/24	CI workflows
24/24	Tests present
16/16	Linter config — .golangci.yml
0/9.6	Pre-commit hooks
0/6.4	.editorconfig
0/20	OpenSSF Scorecard: CI-Tests — no data

Inputs used

has_ci	no
has_tests	yes
has_editorconfig	no
has_linter_config	yes
has_precommit_config	no

Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.

Documentation

50Moderate

How it's scored

0/30	README
25/25	Documentation directory
15/15	Documentation / homepage site — https://geth.ethereum.org
0/10	Repository description
0/10	Topics
10/10	Wiki

Inputs used

topics	—
has_wiki	yes
homepage	https://geth.ethereum.org
has_readme	no
has_docs_dir	yes
has_description	no

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

27Critical · 16% of overall

Security posture

26Critical

How it's scored

6.8/7.5	Binary-Artifacts — binaries present in source code
0/7.5	Branch-Protection — no data
0/2.5	CI-Tests — no data
0/2.5	CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5	Code-Review — Found 0/30 approved changesets -- score normalized to 0
2.5/2.5	Contributors — project has 63 contributing companies or organizations
0/10	Dangerous-Workflow — no data
0/7.5	Dependency-Update-Tool — no update tool detected
0/5	Fuzzing — project is not fuzzed
2.5/2.5	License — license file detected
0/7.5	Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5	Packaging — no data
0/5	Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5	SAST — no SAST tool detected
5/5	Security-Policy — security policy file detected
0/7.5	Signed-Releases — no data
0/7.5	Token-Permissions — no data
0/7.5	Vulnerabilities — 84 existing vulnerabilities detected

Inputs used

source	openssf_scorecard
checks_evaluated	12
scorecard_version	v5.5.0
checks_inconclusive	6
scorecard_aggregate	2.6

Excluded from scoring (no data or not applicable): branch_protection, ci_tests, dangerous_workflow, packaging, signed_releases, token_permissions. Remaining weights renormalized.

Dependency advisories

30At risk

How it's scored

3.8/35	Direct dependencies free of known advisories — 6 affected: golang.org/x/crypto 0.0.0-20210322153248-0c34fe9e7dc2 (critical 10.0), github.com/docker/docker 1.4.2-0.20180625184442-8e610b2b55bf (high 8.8), github.com/golang-jwt/jwt/v4 4.3.0 (high 7.5), +3 more
0/25	Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
19/40	No advisories left outstanding — 6 advisory-carrying package(s) unaddressed past 90 days; oldest published 1,621 days ago

Inputs used

source	osv
advisories	94
affected_packages	6
assessed_packages	67
unassessed_packages	0
affected_by_severity	critical 1, high 3, moderate 2
direct_affected_packages	6

Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 67 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

68Moderate · 0% of overall

Agent context & guidance

40At risk

How it's scored

0/45	Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15	Machine-readable docs (llms.txt)
40/40	Legible commit history — 94 of 100 human commits state their intent (structured subject or explanatory body)

Inputs used

has_llms_txt	no
legible_history_share	0.94
agent_instruction_files	—
agent_instruction_max_bytes	—

Verify loop (build / test / typecheck)

72Good

How it's scored

18/18	One-command bootstrap — Makefile
22/22	Automated tests
11/11	Lint / format config — .golangci.yml
11/11	Static type checking — Go (statically typed)
10/10	Reproducible environment — Dockerfile, lockfile
0/10	Demonstrated agent practice — no agent-authored commits among the last 100
0/8	Automated maintenance — no automated dependency updates observed
0/10	OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0

Inputs used

has_nix	no
has_tests	yes
lockfiles	go.sum
has_dockerfile	yes
typed_language	yes
bootstrap_files	Makefile
has_devcontainer	no
has_linter_config	yes
typecheck_configs	—
agent_commit_share	0
toolchain_manifests	go.mod
dependency_bot_commit_share	0

Code legibility for models

99Excellent

How it's scored

45/45	Type-checkable code — Go (statically typed)
54.1/55	Manageable file sizes — 21/1,276 source files over 60KB

Inputs used

primary_language	Go
largest_source_bytes	5,961,550
source_files_sampled	1,276
oversized_source_files	21

Machine-readable interfaces

80Good

How it's scored

40/40	API schema (OpenAPI/GraphQL/proto) — accounts/usbwallet/trezor/messages-common.proto, accounts/usbwallet/trezor/messages-ethereum.proto, accounts/usbwallet/trezor/messages-management.proto, accounts/usbwallet/trezor/messages.proto
0/20	MCP server
40/40	Runnable examples — examples

Inputs used

example_dirs	examples
has_mcp_signal	no
api_schema_files	accounts/usbwallet/trezor/messages-common.proto, accounts/usbwallet/trezor/messages-ethereum.proto, accounts/usbwallet/trezor/messages-management.proto, accounts/usbwallet/trezor/messages.proto

Key facts

1GitHub stars

100contributors

0commits, last 12 months

436days since last push

100releases

2bus factor

0open issues

Gopackage ecosystems

Data collection warnings

Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Community profile unavailable
go package 'github.com/ethereum/go-ethereum' points at a different repository (https://github.com/ethereum/go-ethereum); excluded from ecosystem scoring

More detail

OpenSSF Scorecard 2.6 / 10

2.6aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-25 15:00 UTC

9	Binary-Artifacts	binaries present in source code
n/a	Branch-Protection	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
n/a	CI-Tests	no pull request found
0	CII-Best-Practices	no effort to earn an OpenSSF best practices badge detected
0	Code-Review	Found 0/30 approved changesets -- score normalized to 0
10	Contributors	project has 63 contributing companies or organizations
n/a	Dangerous-Workflow	no workflows found
0	Dependency-Update-Tool	no update tool detected
0	Fuzzing	project is not fuzzed
10	License	license file detected
0	Maintained	0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
n/a	Packaging	packaging workflow not detected
0	Pinned-Dependencies	dependency not pinned by hash detected -- score normalized to 0
0	SAST	no SAST tool detected
10	Security-Policy	security policy file detected
n/a	Signed-Releases	no releases found
n/a	Token-Permissions	No tokens found
0	Vulnerabilities	84 existing vulnerabilities detected

Direct dependencies 59

Registry	Package	Version constraint	Manifest
Go	github.com/Azure/azure-sdk-for-go/sdk/storage/azblob	`v0.3.0`	go.mod
Go	github.com/VictoriaMetrics/fastcache	`v1.6.0`	go.mod
Go	github.com/aws/aws-sdk-go-v2	`v1.2.0`	go.mod
Go	github.com/aws/aws-sdk-go-v2/config	`v1.1.1`	go.mod
Go	github.com/aws/aws-sdk-go-v2/credentials	`v1.1.1`	go.mod
Go	github.com/aws/aws-sdk-go-v2/service/route53	`v1.1.1`	go.mod
Go	github.com/btcsuite/btcd/btcec/v2	`v2.1.2`	go.mod
Go	github.com/cespare/cp	`v0.1.0`	go.mod
Go	github.com/cloudflare/cloudflare-go	`v0.14.0`	go.mod
Go	github.com/consensys/gnark-crypto	`v0.4.1-0.20210426202927-39ac3d4b3f1f`	go.mod
Go	github.com/davecgh/go-spew	`v1.1.1`	go.mod
Go	github.com/deckarep/golang-set	`v1.8.0`	go.mod
Go	github.com/docker/docker	`v1.4.2-0.20180625184442-8e610b2b55bf`	go.mod
Go	github.com/dop251/goja	`v0.0.0-20211011172007-d99e4b8cbf48`	go.mod
Go	github.com/edsrzf/mmap-go	`v1.0.0`	go.mod
Go	github.com/fatih/color	`v1.7.0`	go.mod
Go	github.com/fjl/memsize	`v0.0.0-20190710130421-bcb5799ab5e5`	go.mod
Go	github.com/gballet/go-libpcsclite	`v0.0.0-20190607065134-2772fd86a8ff`	go.mod
Go	github.com/go-stack/stack	`v1.8.0`	go.mod
Go	github.com/golang-jwt/jwt/v4	`v4.3.0`	go.mod
Go	github.com/golang/protobuf	`v1.4.3`	go.mod
Go	github.com/golang/snappy	`v0.0.4`	go.mod
Go	github.com/google/gofuzz	`v1.1.1-0.20200604201612-c04b05f3adfa`	go.mod
Go	github.com/google/uuid	`v1.2.0`	go.mod
Go	github.com/gorilla/websocket	`v1.4.2`	go.mod
Go	github.com/graph-gophers/graphql-go	`v1.3.0`	go.mod
Go	github.com/hashicorp/go-bexpr	`v0.1.10`	go.mod
Go	github.com/hashicorp/golang-lru	`v0.5.5-0.20210104140557-80c98217689d`	go.mod
Go	github.com/holiman/bloomfilter/v2	`v2.0.3`	go.mod
Go	github.com/holiman/uint256	`v1.2.0`	go.mod
Go	github.com/huin/goupnp	`v1.0.3`	go.mod
Go	github.com/influxdata/influxdb	`v1.8.3`	go.mod
Go	github.com/influxdata/influxdb-client-go/v2	`v2.4.0`	go.mod
Go	github.com/jackpal/go-nat-pmp	`v1.0.2`	go.mod
Go	github.com/jedisct1/go-minisign	`v0.0.0-20190909160543-45766022959e`	go.mod
Go	github.com/julienschmidt/httprouter	`v1.2.0`	go.mod
Go	github.com/karalabe/usb	`v0.0.2`	go.mod
Go	github.com/mattn/go-colorable	`v0.1.8`	go.mod
Go	github.com/mattn/go-isatty	`v0.0.12`	go.mod
Go	github.com/naoina/toml	`v0.1.2-0.20170918210437-9fafd6967416`	go.mod
Go	github.com/olekukonko/tablewriter	`v0.0.5`	go.mod
Go	github.com/peterh/liner	`v1.1.1-0.20190123174540-a2c9a5303de7`	go.mod
Go	github.com/prometheus/tsdb	`v0.7.1`	go.mod
Go	github.com/rjeczalik/notify	`v0.9.1`	go.mod
Go	github.com/rs/cors	`v1.7.0`	go.mod
Go	github.com/shirou/gopsutil	`v3.21.4-0.20210419000835-c7a38de76ee5+incompatible`	go.mod
Go	github.com/status-im/keycard-go	`v0.0.0-20190316090335-8537d3370df4`	go.mod
Go	github.com/stretchr/testify	`v1.7.0`	go.mod
Go	github.com/syndtr/goleveldb	`v1.0.1-0.20210819022825-2ae1ddf74ef7`	go.mod
Go	github.com/tyler-smith/go-bip39	`v1.0.1-0.20181017060643-dbb3b84ba2ef`	go.mod
Go	golang.org/x/crypto	`v0.0.0-20210322153248-0c34fe9e7dc2`	go.mod
Go	golang.org/x/sync	`v0.0.0-20210220032951-036812b2e83c`	go.mod
Go	golang.org/x/sys	`v0.0.0-20210816183151-1e6c022a8912`	go.mod
Go	golang.org/x/text	`v0.3.7`	go.mod
Go	golang.org/x/time	`v0.0.0-20210220033141-f8bda1e9f3ba`	go.mod
Go	golang.org/x/tools	`v0.1.0`	go.mod
Go	gopkg.in/natefinch/npipe.v2	`v2.0.0-20160621034901-c1b8fa8bdcce`	go.mod
Go	gopkg.in/olebedev/go-duktape.v3	`v3.0.0-20200619000410-60c24ae608a6`	go.mod
Go	gopkg.in/urfave/cli.v1	`v1.20.0`	go.mod

All dependencies 67

Full resolved dependency set from the GitHub dependency graph: 59 direct and 8 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

Registry	Package	Version	Relation
Go	github.com/aws/aws-sdk-go-v2	`1.2.0`	direct
Go	github.com/aws/aws-sdk-go-v2/config	`1.1.1`	direct
Go	github.com/aws/aws-sdk-go-v2/credentials	`1.1.1`	direct
Go	github.com/aws/aws-sdk-go-v2/service/route53	`1.1.1`	direct
Go	github.com/azure/azure-sdk-for-go/sdk/storage/azblob	`0.3.0`	direct
Go	github.com/btcsuite/btcd/btcec/v2	`2.1.2`	direct
Go	github.com/cespare/cp	`0.1.0`	direct
Go	github.com/cloudflare/cloudflare-go	`0.14.0`	direct
Go	github.com/consensys/gnark-crypto	`0.4.1-0.20210426202927-39ac3d4b3f1f`	direct
Go	github.com/davecgh/go-spew	`1.1.1`	direct
Go	github.com/deckarep/golang-set	`1.8.0`	direct
Go	github.com/docker/docker	`1.4.2-0.20180625184442-8e610b2b55bf`	direct
Go	github.com/dop251/goja	`0.0.0-20211011172007-d99e4b8cbf48`	direct
Go	github.com/edsrzf/mmap-go	`1.0.0`	direct
Go	github.com/fatih/color	`1.7.0`	direct
Go	github.com/fjl/memsize	`0.0.0-20190710130421-bcb5799ab5e5`	direct
Go	github.com/gballet/go-libpcsclite	`0.0.0-20190607065134-2772fd86a8ff`	direct
Go	github.com/go-stack/stack	`1.8.0`	direct
Go	github.com/golang-jwt/jwt/v4	`4.3.0`	direct
Go	github.com/golang/protobuf	`1.4.3`	direct
Go	github.com/golang/snappy	`0.0.4`	direct
Go	github.com/google/gofuzz	`1.1.1-0.20200604201612-c04b05f3adfa`	direct
Go	github.com/google/uuid	`1.2.0`	direct
Go	github.com/gorilla/websocket	`1.4.2`	direct
Go	github.com/graph-gophers/graphql-go	`1.3.0`	direct
Go	github.com/hashicorp/go-bexpr	`0.1.10`	direct
Go	github.com/hashicorp/golang-lru	`0.5.5-0.20210104140557-80c98217689d`	direct
Go	github.com/holiman/bloomfilter/v2	`2.0.3`	direct
Go	github.com/holiman/uint256	`1.2.0`	direct
Go	github.com/huin/goupnp	`1.0.3`	direct
Go	github.com/influxdata/influxdb	`1.8.3`	direct
Go	github.com/influxdata/influxdb-client-go/v2	`2.4.0`	direct
Go	github.com/jackpal/go-nat-pmp	`1.0.2`	direct
Go	github.com/jedisct1/go-minisign	`0.0.0-20190909160543-45766022959e`	direct
Go	github.com/julienschmidt/httprouter	`1.2.0`	direct
Go	github.com/karalabe/usb	`0.0.2`	direct
Go	github.com/mattn/go-colorable	`0.1.8`	direct
Go	github.com/mattn/go-isatty	`0.0.12`	direct
Go	github.com/naoina/toml	`0.1.2-0.20170918210437-9fafd6967416`	direct
Go	github.com/olekukonko/tablewriter	`0.0.5`	direct
Go	github.com/peterh/liner	`1.1.1-0.20190123174540-a2c9a5303de7`	direct
Go	github.com/prometheus/tsdb	`0.7.1`	direct
Go	github.com/rjeczalik/notify	`0.9.1`	direct
Go	github.com/rs/cors	`1.7.0`	direct
Go	github.com/shirou/gopsutil	`3.21.4-0.20210419000835-c7a38de76ee5+incompatible`	direct
Go	github.com/status-im/keycard-go	`0.0.0-20190316090335-8537d3370df4`	direct
Go	github.com/stretchr/testify	`1.7.0`	direct
Go	github.com/syndtr/goleveldb	`1.0.1-0.20210819022825-2ae1ddf74ef7`	direct
Go	github.com/tyler-smith/go-bip39	`1.0.1-0.20181017060643-dbb3b84ba2ef`	direct
Go	github.com/victoriametrics/fastcache	`1.6.0`	direct
Go	golang.org/x/crypto	`0.0.0-20210322153248-0c34fe9e7dc2`	direct
Go	golang.org/x/sync	`0.0.0-20210220032951-036812b2e83c`	direct
Go	golang.org/x/sys	`0.0.0-20210816183151-1e6c022a8912`	direct
Go	golang.org/x/text	`0.3.7`	direct
Go	golang.org/x/time	`0.0.0-20210220033141-f8bda1e9f3ba`	direct
Go	golang.org/x/tools	`0.1.0`	direct
Go	gopkg.in/natefinch/npipe.v2	`2.0.0-20160621034901-c1b8fa8bdcce`	direct
Go	gopkg.in/olebedev/go-duktape.v3	`3.0.0-20200619000410-60c24ae608a6`	direct
Go	gopkg.in/urfave/cli.v1	`1.20.0`	direct
Go	github.com/deepmap/oapi-codegen	`1.8.2`	indirect
Go	github.com/go-ole/go-ole	`1.2.1`	indirect
Go	github.com/influxdata/line-protocol	`0.0.0-20210311194329-9aa0e372d097`	indirect
Go	github.com/kylelemons/godebug	`1.1.0`	indirect
Go	github.com/naoina/go-stringutil	`0.1.0`	indirect
Go	github.com/stackexchange/wmi	`0.0.0-20180116203802-5d049714c4a6`	indirect
Go	github.com/tklauser/go-sysconf	`0.3.5`	indirect
Go	gotest.tools	`2.2.0+incompatible`	indirect

Dependency advisories 6

This repository publishes no package the index resolves, so its own dependency graph was assessed — 67 packages, which also include development and test pins that never ship: 6 carry known advisories, of which 6 are direct.

Package	Version	Relation	Severity	Advisories	Fixed in
golang.org/x/crypto	`0.0.0-20210322153248-0c34fe9e7dc2`	direct	critical	43	`3.4.0`
github.com/docker/docker	`1.4.2-0.20180625184442-8e610b2b55bf`	direct	high	36	`29.3.1`
github.com/golang-jwt/jwt/v4	`4.3.0`	direct	high	4	`5.2.2`
golang.org/x/text	`0.3.7`	direct	high	3	`0.39.0`
github.com/consensys/gnark-crypto	`0.4.1-0.20210426202927-39ac3d4b3f1f`	direct	moderate	5	`0.12.1`
golang.org/x/sys	`0.0.0-20210816183151-1e6c022a8912`	direct	moderate	3	`1.18.2`

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 169862,
      "has_wiki": true,
      "homepage": "https://geth.ethereum.org",
      "languages": {
        "C": 673771,
        "Go": 12127892,
        "M4": 25931,
        "HTML": 11276,
        "Java": 30290,
        "NSIS": 23196,
        "Ruby": 818,
        "Sage": 30192,
        "Shell": 16241,
        "Python": 5984,
        "Assembly": 94897,
        "Makefile": 8299,
        "Solidity": 15311,
        "Dockerfile": 723,
        "JavaScript": 438994
      },
      "pushed_at": "2025-05-15T00:19:08Z",
      "created_at": "2021-09-26T19:47:55Z",
      "owner_type": "Organization",
      "updated_at": "2026-04-02T15:06:07Z",
      "description": "Official Go implementation of the Ethereum protocol",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "LGPL-3.0",
      "default_branch": "master",
      "license_spdx_raw": "LGPL-3.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://www.alchemy.com",
      "name": "Alchemy",
      "type": "Organization",
      "login": "alchemyplatform",
      "company": null,
      "location": "San Francisco, CA",
      "followers": 1058,
      "avatar_url": "https://avatars.githubusercontent.com/u/49798644?v=4",
      "created_at": "2019-04-19T23:22:23Z",
      "is_verified": null,
      "public_repos": 161,
      "account_age_days": 2653
    },
    "license": {
      "state": "standard",
      "spdx_id": "LGPL-3.0",
      "raw_spdx": "LGPL-3.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.10.8",
          "kind": "patch",
          "published_at": "2021-08-24T07:04:30Z"
        },
        {
          "tag": "v1.10.7",
          "kind": "patch",
          "published_at": "2021-08-12T07:14:03Z"
        },
        {
          "tag": "v1.10.6",
          "kind": "patch",
          "published_at": "2021-07-22T14:44:28Z"
        },
        {
          "tag": "v1.10.5",
          "kind": "patch",
          "published_at": "2021-07-14T08:01:38Z"
        },
        {
          "tag": "v1.10.4",
          "kind": "patch",
          "published_at": "2021-06-17T10:35:17Z"
        },
        {
          "tag": "v1.10.3",
          "kind": "patch",
          "published_at": "2021-05-05T11:20:06Z"
        },
        {
          "tag": "v1.10.2",
          "kind": "patch",
          "published_at": "2021-04-08T11:02:25Z"
        },
        {
          "tag": "v1.10.1",
          "kind": "patch",
          "published_at": "2021-03-08T09:32:20Z"
        },
        {
          "tag": "v1.10.0",
          "kind": "minor",
          "published_at": "2021-03-03T16:44:17Z"
        },
        {
          "tag": "v1.9.25",
          "kind": "patch",
          "published_at": "2020-12-11T08:03:16Z"
        },
        {
          "tag": "v1.9.24",
          "kind": "patch",
          "published_at": "2020-11-12T20:10:15Z"
        },
        {
          "tag": "v1.9.23",
          "kind": "patch",
          "published_at": "2020-10-15T10:29:42Z"
        },
        {
          "tag": "v1.9.22",
          "kind": "patch",
          "published_at": "2020-09-28T08:21:47Z"
        },
        {
          "tag": "v1.9.21",
          "kind": "patch",
          "published_at": "2020-09-09T08:22:11Z"
        },
        {
          "tag": "v1.9.20",
          "kind": "patch",
          "published_at": "2020-08-25T14:20:37Z"
        },
        {
          "tag": "v1.9.19",
          "kind": "patch",
          "published_at": "2020-08-11T11:10:21Z"
        },
        {
          "tag": "v1.9.18",
          "kind": "patch",
          "published_at": "2020-07-27T11:53:53Z"
        },
        {
          "tag": "v1.9.17",
          "kind": "patch",
          "published_at": "2020-07-20T12:56:42Z"
        },
        {
          "tag": "v1.9.16",
          "kind": "patch",
          "published_at": "2020-07-10T10:38:48Z"
        },
        {
          "tag": "v1.9.15",
          "kind": "patch",
          "published_at": "2020-06-08T08:56:48Z"
        },
        {
          "tag": "v1.9.14",
          "kind": "patch",
          "published_at": "2020-05-13T09:31:35Z"
        },
        {
          "tag": "v1.9.13",
          "kind": "patch",
          "published_at": "2020-04-16T07:39:22Z"
        },
        {
          "tag": "v1.9.12",
          "kind": "patch",
          "published_at": "2020-03-16T11:39:04Z"
        },
        {
          "tag": "v1.9.11",
          "kind": "patch",
          "published_at": "2020-02-18T11:26:00Z"
        },
        {
          "tag": "v1.9.10",
          "kind": "patch",
          "published_at": "2020-01-20T10:27:51Z"
        },
        {
          "tag": "v1.9.9",
          "kind": "patch",
          "published_at": "2019-12-06T09:51:37Z"
        },
        {
          "tag": "v1.9.8",
          "kind": "patch",
          "published_at": "2019-11-26T10:20:22Z"
        },
        {
          "tag": "v1.9.7",
          "kind": "patch",
          "published_at": "2019-11-07T07:58:39Z"
        },
        {
          "tag": "v1.9.6",
          "kind": "patch",
          "published_at": "2019-10-03T09:29:20Z"
        },
        {
          "tag": "v1.9.5",
          "kind": "patch",
          "published_at": "2019-09-20T11:32:42Z"
        },
        {
          "tag": "v1.9.4",
          "kind": "patch",
          "published_at": "2019-09-19T08:36:53Z"
        },
        {
          "tag": "v1.9.3",
          "kind": "patch",
          "published_at": "2019-09-03T09:00:38Z"
        },
        {
          "tag": "v1.9.2",
          "kind": "patch",
          "published_at": "2019-08-13T10:03:42Z"
        },
        {
          "tag": "v1.9.1",
          "kind": "patch",
          "published_at": "2019-07-24T06:41:48Z"
        },
        {
          "tag": "v1.9.0",
          "kind": "minor",
          "published_at": "2019-07-10T07:41:15Z"
        },
        {
          "tag": "v1.8.27",
          "kind": "patch",
          "published_at": "2019-04-17T12:47:54Z"
        },
        {
          "tag": "v1.8.26",
          "kind": "patch",
          "published_at": "2019-04-10T12:45:13Z"
        },
        {
          "tag": "v1.8.25",
          "kind": "patch",
          "published_at": "2019-04-09T08:47:09Z"
        },
        {
          "tag": "v1.8.24",
          "kind": "patch",
          "published_at": "2019-04-08T13:16:05Z"
        },
        {
          "tag": "v1.8.23",
          "kind": "patch",
          "published_at": "2019-02-20T08:48:12Z"
        },
        {
          "tag": "v1.8.22",
          "kind": "patch",
          "published_at": "2019-01-31T10:52:18Z"
        },
        {
          "tag": "v1.8.21",
          "kind": "patch",
          "published_at": "2019-01-15T20:51:31Z"
        },
        {
          "tag": "v1.8.20",
          "kind": "patch",
          "published_at": "2018-12-11T12:20:21Z"
        },
        {
          "tag": "v1.8.19",
          "kind": "patch",
          "published_at": "2018-11-28T12:42:37Z"
        },
        {
          "tag": "v1.8.18",
          "kind": "patch",
          "published_at": "2018-11-14T08:25:19Z"
        },
        {
          "tag": "v1.8.17",
          "kind": "patch",
          "published_at": "2018-10-09T07:35:31Z"
        },
        {
          "tag": "v1.8.16",
          "kind": "patch",
          "published_at": "2018-09-24T12:59:21Z"
        },
        {
          "tag": "v1.8.15",
          "kind": "patch",
          "published_at": "2018-08-29T15:24:32Z"
        },
        {
          "tag": "v1.8.14",
          "kind": "patch",
          "published_at": "2018-08-22T08:39:00Z"
        },
        {
          "tag": "v1.8.13",
          "kind": "patch",
          "published_at": "2018-07-31T10:35:53Z"
        },
        {
          "tag": "v1.8.12",
          "kind": "patch",
          "published_at": "2018-07-04T23:08:05Z"
        },
        {
          "tag": "v1.8.11",
          "kind": "patch",
          "published_at": "2018-06-12T14:02:14Z"
        },
        {
          "tag": "v1.8.10",
          "kind": "patch",
          "published_at": "2018-05-30T08:00:07Z"
        },
        {
          "tag": "v1.8.9",
          "kind": "patch",
          "published_at": "2018-05-28T09:58:22Z"
        },
        {
          "tag": "v1.8.8",
          "kind": "patch",
          "published_at": "2018-05-14T10:14:17Z"
        },
        {
          "tag": "v1.8.7",
          "kind": "patch",
          "published_at": "2018-05-02T11:01:38Z"
        },
        {
          "tag": "v1.8.6",
          "kind": "patch",
          "published_at": "2018-04-23T12:52:02Z"
        },
        {
          "tag": "v1.8.5",
          "kind": "patch",
          "published_at": "2018-04-23T07:02:34Z"
        },
        {
          "tag": "v1.8.4",
          "kind": "patch",
          "published_at": "2018-04-17T08:20:53Z"
        },
        {
          "tag": "v1.8.3",
          "kind": "patch",
          "published_at": "2018-03-26T16:09:06Z"
        },
        {
          "tag": "v1.8.2",
          "kind": "patch",
          "published_at": "2018-03-05T13:48:48Z"
        },
        {
          "tag": "v1.8.1",
          "kind": "patch",
          "published_at": "2018-02-19T09:35:31Z"
        },
        {
          "tag": "v1.8.0",
          "kind": "minor",
          "published_at": "2018-02-14T12:51:30Z"
        },
        {
          "tag": "v1.7.3",
          "kind": "patch",
          "published_at": "2017-11-21T09:54:19Z"
        },
        {
          "tag": "v1.7.2",
          "kind": "patch",
          "published_at": "2017-10-14T12:58:53Z"
        },
        {
          "tag": "v1.7.1",
          "kind": "patch",
          "published_at": "2017-10-03T17:18:39Z"
        },
        {
          "tag": "v1.7.0",
          "kind": "minor",
          "published_at": "2017-09-14T10:55:42Z"
        },
        {
          "tag": "v1.6.7",
          "kind": "patch",
          "published_at": "2017-07-11T14:32:36Z"
        },
        {
          "tag": "v1.6.6",
          "kind": "patch",
          "published_at": "2017-06-23T09:26:54Z"
        },
        {
          "tag": "v1.6.5",
          "kind": "patch",
          "published_at": "2017-06-01T18:48:47Z"
        },
        {
          "tag": "v1.6.4",
          "kind": "patch",
          "published_at": "2017-06-01T14:33:17Z"
        },
        {
          "tag": "v1.6.3",
          "kind": "patch",
          "published_at": "2017-06-01T08:41:48Z"
        },
        {
          "tag": "v1.6.2",
          "kind": "patch",
          "published_at": "2017-05-31T03:45:13Z"
        },
        {
          "tag": "v1.6.1",
          "kind": "patch",
          "published_at": "2017-05-04T11:11:45Z"
        },
        {
          "tag": "v1.6.0",
          "kind": "minor",
          "published_at": "2017-04-14T10:07:07Z"
        },
        {
          "tag": "v1.5.9",
          "kind": "patch",
          "published_at": "2017-02-13T16:54:59Z"
        },
        {
          "tag": "v1.5.8",
          "kind": "patch",
          "published_at": "2017-02-01T01:14:04Z"
        },
        {
          "tag": "v1.5.7",
          "kind": "patch",
          "published_at": "2017-01-16T09:57:02Z"
        },
        {
          "tag": "v1.5.6",
          "kind": "patch",
          "published_at": "2017-01-09T15:39:27Z"
        },
        {
          "tag": "v1.5.5",
          "kind": "patch",
          "published_at": "2016-12-14T14:06:54Z"
        },
        {
          "tag": "v1.5.4",
          "kind": "patch",
          "published_at": "2016-11-28T13:59:26Z"
        },
        {
          "tag": "v1.5.3",
          "kind": "patch",
          "published_at": "2016-11-24T22:03:13Z"
        },
        {
          "tag": "v1.5.2",
          "kind": "patch",
          "published_at": "2016-11-18T11:01:54Z"
        },
        {
          "tag": "v1.5.1",
          "kind": "patch",
          "published_at": "2016-11-16T12:10:03Z"
        },
        {
          "tag": "v1.5.0",
          "kind": "minor",
          "published_at": "2016-11-15T13:29:33Z"
        },
        {
          "tag": "v1.4.19",
          "kind": "patch",
          "published_at": "2016-11-15T12:46:47Z"
        },
        {
          "tag": "v1.4.18",
          "kind": "patch",
          "published_at": "2016-10-15T11:00:43Z"
        },
        {
          "tag": "v1.4.17",
          "kind": "patch",
          "published_at": "2016-10-10T14:19:05Z"
        },
        {
          "tag": "v1.4.16",
          "kind": "patch",
          "published_at": "2016-10-06T14:25:17Z"
        },
        {
          "tag": "v1.4.15",
          "kind": "patch",
          "published_at": "2016-10-03T08:55:41Z"
        },
        {
          "tag": "v1.4.14",
          "kind": "patch",
          "published_at": "2016-09-28T10:40:44Z"
        },
        {
          "tag": "v1.4.13",
          "kind": "patch",
          "published_at": "2016-09-26T09:40:58Z"
        },
        {
          "tag": "v1.4.12",
          "kind": "patch",
          "published_at": "2016-09-19T01:28:08Z"
        },
        {
          "tag": "v1.4.11",
          "kind": "patch",
          "published_at": "2016-08-18T15:31:35Z"
        },
        {
          "tag": "v1.4.10",
          "kind": "patch",
          "published_at": "2016-07-16T15:52:56Z"
        },
        {
          "tag": "v1.4.9",
          "kind": "patch",
          "published_at": "2016-06-29T12:42:21Z"
        },
        {
          "tag": "v1.4.8",
          "kind": "patch",
          "published_at": "2016-06-24T15:17:12Z"
        },
        {
          "tag": "v0.4.3",
          "kind": "patch",
          "published_at": "2019-07-25T11:08:29Z"
        },
        {
          "tag": "v0.4.2",
          "kind": "patch",
          "published_at": "2019-06-28T10:02:47Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2019-06-13T14:32:55Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "1e973a96b4b52d2a3af07a935ad41a4358924422",
          "body": "This PR makes the errors we spit out a bit more clear about what block is problematic.",
          "is_bot": false,
          "headline": "eth: clarify the error string on getlogs failure (#24617)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-03-31T19:16:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3fd16af5a91e232f1b32c85db79c45d5563ae14f",
          "body": "* core,eth: add empty tx logger hooks\r\n\r\n* core,eth: add initial and remaining gas to tx hooks\r\n\r\n* store tx gasLimit in js tracer\r\n\r\n* use gasLimit to compute intrinsic cost for js tracer\r\n\r\n* re-use rules in transitiondb\r\n\r\n* rm logs\r\n\r\n* rm logs\r\n\r\n* Mv some fields from Start to TxStart\r\n\r\n* simp\n[…]\nreverts commit aa50d3d9b2559addc80df966111ef5fb5d0c1b6b.\r\n\r\n* fix intrinsic gas for prestate tracer\r\n\r\n* add comments\r\n\r\n* refactor\r\n\r\n* fix test case\r\n\r\n* simplify consumedGas calc in prestate tracer",
          "is_bot": false,
          "headline": "core,eth: implement tx-level hooks for tracers (#24510)",
          "author_name": "Sina Mahmoodi",
          "author_login": "s1na",
          "committed_at": "2022-03-31T09:51:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "da16d089c09dfbe5497862496c6f34d32ba6bd0e",
          "body": "Trie tracer is an auxiliary tool to capture all deleted nodes\r\nwhich can't be captured by trie.Committer. The deleted nodes\r\ncan be removed from the disk later.",
          "is_bot": false,
          "headline": "trie, les, tests, core: implement trie tracer (#24403)",
          "author_name": "rjl493456442",
          "author_login": "rjl493456442",
          "committed_at": "2022-03-31T07:28:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "127dc5982e3484406eae0631326bbc356f914749",
          "body": "…d of error (#24475)\n\n* core: Change Snapshot extension registration failed to Debug\r\n\r\n* Update eth/handler.go\r\n\r\nCo-authored-by: Martin Holst Swende <martin@swende.se>",
          "is_bot": false,
          "headline": "eth: change snapshot extension registration failure to warning instea…",
          "author_name": "Nic Jansma",
          "author_login": "nicjansma",
          "committed_at": "2022-03-30T08:28:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8cacb42278299b341d3cf7a032f336d5b65b0388",
          "body": "* Add extra-data checks for clique genesis\r\n\r\n* Update genesis.go\r\n\r\n* Update genesis.go\r\n\r\n* core: simplify clique genesis check\r\n\r\nCo-authored-by: Felix Lange <fjl@twurst.com>\r\nCo-authored-by: Martin Holst Swende <martin@swende.se>",
          "is_bot": false,
          "headline": "core: verify genesis extradata for clique (#24470)",
          "author_name": "Guruprasad Kamath",
          "author_login": "gurukamath",
          "committed_at": "2022-03-30T08:27:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f75994b5eff89622c68904a61f2496057f6f15d",
          "body": "This PR adds a ExtraAllowedPath field to Solidity and exposes two APIs: CompileSource and CompileFiles, which were hidden inside CompileSolidityString and CompileSolidity before.",
          "is_bot": false,
          "headline": "common/compiler: add extra include paths to solidity compiler (#24541)",
          "author_name": "zhiqiangxu",
          "author_login": "zhiqiangxu",
          "committed_at": "2022-03-29T20:38:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67c070c3790dd995d7c5428ecd1e5a749e8d3069",
          "body": "Makes the evm json output less verbose: omitting output of `memory` and `returndata` in case they are empty.",
          "is_bot": false,
          "headline": "eth/tracers/logger: use omitempty to reduce log bloat  (#24547)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-03-29T20:36:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5a129ea248f259a367d804cdf396ce442109d85",
          "body": "* internal/ethapi: add refund to StructLogRes\r\n\r\n* Update internal/ethapi/api.go\r\n\r\nCo-authored-by: rjl493456442 <garyrong0905@gmail.com>\r\n\r\nCo-authored-by: rjl493456442 <garyrong0905@gmail.com>",
          "is_bot": false,
          "headline": "internal/ethapi: add refund to StructLogRes (#24567)",
          "author_name": "Zhang Zhuo",
          "author_login": "lispc",
          "committed_at": "2022-03-29T20:34:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "763b3f8d1f93b57795dd33b35e8b97ef9b9da99f",
          "body": null,
          "is_bot": false,
          "headline": "go.mod : upnp 1.0.3 stable version (#24573)",
          "author_name": "ucwong",
          "author_login": "ucwong",
          "committed_at": "2022-03-29T20:33:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25bd17d725db5378b3611ac077506dc09e940a77",
          "body": null,
          "is_bot": false,
          "headline": "core/state/snapshot: clean up the generation code (#24479)",
          "author_name": "rjl493456442",
          "author_login": "rjl493456442",
          "committed_at": "2022-03-29T18:37:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "33022c2e7d97d9ce4f9b648eec857865edbc8895",
          "body": "Co-authored-by: Yong Yang <yangyong775654@163.com>",
          "is_bot": false,
          "headline": "rlp: fix typo in comment (#24595)",
          "author_name": "flowerofdream",
          "author_login": "flowerofdream",
          "committed_at": "2022-03-29T18:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ec8b81b29abdd90fe6aa06c03f0f5ea8e29fbf4",
          "body": null,
          "is_bot": false,
          "headline": "params: begin v1.10.18 release cycle",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-03-29T17:19:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25c9b49fdb74931137431c24cf28d3c65f9420d2",
          "body": null,
          "is_bot": false,
          "headline": "params: go-ethereum v1.10.17 stable",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-03-29T17:18:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de6a113f843822165b7fb26eb4147e493ce5d8b2",
          "body": "* eth/catalyst: only apply block if we actually have the state\r\n\r\n* add header to payload queue\r\n\r\n* Update cmd/geth/dbcmd.go\r\n\r\nCo-authored-by: Martin Holst Swende <martin@swende.se>\r\n\r\nCo-authored-by: Martin Holst Swende <martin@swende.se>",
          "is_bot": false,
          "headline": "eth/catalyst: only apply block if we actually have the state (#24598)",
          "author_name": "Marius van der Wijden",
          "author_login": "MariusVanDerWijden",
          "committed_at": "2022-03-29T16:26:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b502b6ac977a4e13e4255b5b71bdbd3aef608f4b",
          "body": "…ge is not implemented (#24603)\n\n* cmd/geth: only check for presence of legacy receipts if developer mode is not enabled\r\n\r\n* cmd/geth: degrade log level\r\n\r\n* cmd/geth: fix format\r\n\r\nCo-authored-by: Gary Rong <garyrong0905@gmail.com>",
          "is_bot": false,
          "headline": "cmd/geth: change to non-fatal error message when legacy receipt stora…",
          "author_name": "jwasinger",
          "author_login": "jwasinger",
          "committed_at": "2022-03-29T08:40:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1027cb52c4068931ef67d7ad8c9ebd4c7a766112",
          "body": "core: set ttd override on all chain variations",
          "is_bot": false,
          "headline": "Merge pull request #24605 from karalabe/revert-setting-ttd",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-03-29T08:39:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b06e8c4a8a12a9cdfa7ac8dc7fd5f6d15cf089d1",
          "body": null,
          "is_bot": false,
          "headline": "core/vm: fix sstore gas comment type (#24583)",
          "author_name": "Zhang Zhuo",
          "author_login": "lispc",
          "committed_at": "2022-03-29T08:21:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b45d82e94ad2695831d63a11a64c2bcc8d5a8576",
          "body": null,
          "is_bot": false,
          "headline": "core: set ttd override on all chain variations",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-03-29T08:03:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0fffd3acbdc5c8f83a27b001623769cb73c5d231",
          "body": null,
          "is_bot": false,
          "headline": "build: close sftp connection when done (#24593)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-03-27T11:21:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb3ebceaa112dc62bbe5751e721c1d6c90bc50fb",
          "body": null,
          "is_bot": false,
          "headline": "internal/build: exit sftp upload (#24590)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-03-25T15:46:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1c243f84100f7d5e2291ec0e731c54b0ec9d2be",
          "body": null,
          "is_bot": false,
          "headline": "internal/build: prevent travis timeout during ppa upload (#24589)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-03-25T14:43:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "19b9cf714ff1aeb044e67e8eb8f1e3cb4f965e7d",
          "body": null,
          "is_bot": false,
          "headline": "internal/build: show ppa upload process stdout on stdout (#24588)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-03-25T14:06:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a44bf6826e02af4de41dd9c13a1c8b27c721442",
          "body": null,
          "is_bot": false,
          "headline": "build: upgrade to golangci-lint v1.45.2 (#24586)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-03-25T12:46:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8040bc2c51605a4cca9e48cac83ff14928d50c2",
          "body": null,
          "is_bot": false,
          "headline": "node: allow JWT pass by file only (#24579)",
          "author_name": "Marius van der Wijden",
          "author_login": "MariusVanDerWijden",
          "committed_at": "2022-03-24T14:04:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "535f25d65fa0a0e3151bb90fc1846c47dfa55741",
          "body": null,
          "is_bot": false,
          "headline": "eth/catalyst: fix log message (#24574)",
          "author_name": "Marius van der Wijden",
          "author_login": "MariusVanDerWijden",
          "committed_at": "2022-03-23T20:00:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f252154599595f29554a8106fc115679725f1c40",
          "body": null,
          "is_bot": false,
          "headline": "eth/downloader: fix flakey test (#24576)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-03-23T19:57:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd4f60f49b22ecaba068f31a28fc7b204379a4a6",
          "body": "* cmd,core: add simple legacy receipt converter\r\n\r\ncore/rawdb: use forEach in migrate\r\n\r\ncore/rawdb: batch reads in forEach\r\n\r\ncore/rawdb: make forEach anonymous fn\r\n\r\ncmd/geth: check for legacy receipts on node startup\r\n\r\nfix err msg\r\n\r\nCo-authored-by: rjl493456442 <garyrong0905@gmail.com>\r\n\r\nfix l\n[…]\nnet check, use networkid instead\r\n\r\n* check mainnet genesis\r\n\r\n* review fixes\r\n\r\n* resume previous migration attempt\r\n\r\n* core/rawdb: lint fix\r\n\r\nCo-authored-by: Martin Holst Swende <martin@swende.se>",
          "is_bot": false,
          "headline": "core/rawdb: simple legacy receipt converter (#24028)",
          "author_name": "Sina Mahmoodi",
          "author_login": "s1na",
          "committed_at": "2022-03-23T19:57:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e0e8bf31c5d44f7de33ce774b221debf2c42256c",
          "body": "* eth/downloader: ignore zero size header batch for importing\r\n\r\n* core, light: reject empty header batch for importing",
          "is_bot": false,
          "headline": "eth/downloader: ignore zero size header batch for importing (#24569)",
          "author_name": "rjl493456442",
          "author_login": "rjl493456442",
          "committed_at": "2022-03-22T17:58:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ae6c4a79006ce27b19f144be09af8211c7055e5",
          "body": "* core: store genesis allocation and recommit them if necessary\r\n\r\n* core: recover predefined genesis allocation if possible",
          "is_bot": false,
          "headline": "core: store genesis allocation and recommit them if necessary (#24460)",
          "author_name": "rjl493456442",
          "author_login": "rjl493456442",
          "committed_at": "2022-03-22T09:53:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34501ed235a7bbbe169f050089832a2c0c19576c",
          "body": null,
          "is_bot": false,
          "headline": "crypto/bls12381: go format",
          "author_name": "ucwong",
          "author_login": "ucwong",
          "committed_at": "2022-03-22T09:32:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6afb717be545073c739adcfd917138b664e81b89",
          "body": null,
          "is_bot": false,
          "headline": "core/rawdb: fix db commands (#24540)",
          "author_name": "rjl493456442",
          "author_login": "rjl493456442",
          "committed_at": "2022-03-22T09:19:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51de2bc9dcffa12d4ca70eb4ddee6f53281c5358",
          "body": "…n (#24550)\n\n* eth/downloader: terminate beacon sync early when linked to local chain\r\n\r\n* eth/downloader: fix backfiller resume on early beacon termination",
          "is_bot": false,
          "headline": "eth/downloader: terminate beacon sync early when linked to local chai…",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-03-21T08:43:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afe9558bba80727f40ac214276b0c0bbb1b237a0",
          "body": null,
          "is_bot": false,
          "headline": "docs/postmortems: fix spelling (#24558)",
          "author_name": "alvaroahp11",
          "author_login": "alvaroahp11",
          "committed_at": "2022-03-18T10:39:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "667e1c038e171fafb6e2136b02f8b01dd559cacf",
          "body": null,
          "is_bot": false,
          "headline": "core, params: add kiln flag (#24548)",
          "author_name": "Marius van der Wijden",
          "author_login": "MariusVanDerWijden",
          "committed_at": "2022-03-17T15:34:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f4622bc8b104fc87c5ed64ed86895fe118e1ea7",
          "body": "* core/beacon: eth/catalyst: updated engine api to new version\r\n\r\n* core: implement exchangeTransitionConfig\r\n\r\n* core/beacon: prevRandao instead of Random\r\n\r\n* eth/catalyst: Fix ExchangeTransitionConfig, add test\r\n\r\n* eth/catalyst: stop external miners on TTD reached\r\n\r\n* node: implement --authrpc.\n[…]\nput\r\n\r\n* cmd/utils: rename authrpc.host to authrpc.addr\r\n\r\n* eth/catalyst: disable the disabling of the miner\r\n\r\n* eth: core: remove notion of terminal pow block\r\n\r\n* eth: les: more of peters nitpicks",
          "is_bot": false,
          "headline": "core: eth: implement Kiln-v2 spec (#24506)",
          "author_name": "Marius van der Wijden",
          "author_login": "MariusVanDerWijden",
          "committed_at": "2022-03-17T15:20:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "830231c1c40f45f32cbf4ab69954b87a79313f44",
          "body": "This updates the no-cgo implementations in the crypto package to use\r\nthe github.com/btcsuite/btcd/btcec/v2 module instead of the older btcec\r\npackage that was part of the main github.com/btcsuite/btcd module.\r\n\r\nname                   old time/op  new time/op  delta\r\nEcrecoverSignature-32   198µs ±\n[…]\n32      177µs ± 0%   128µs ± 0%  -27.44%\r\nDecompressPubkey-32    20.9µs ± 0%  10.1µs ± 0%  -51.51%\r\n\r\nUse (*ModNScalar).IsOverHalfOrder instead of math/big.Int when checking\r\nfor malleable signatures.",
          "is_bot": false,
          "headline": "crypto: use btcec/v2 for no-cgo (#24533)",
          "author_name": "Jonathan Chappelow",
          "author_login": "chappjc",
          "committed_at": "2022-03-16T13:23:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7a80cf6543330c73c4fe1c1dc9ca6872e7325d0f",
          "body": null,
          "is_bot": false,
          "headline": "les, tests: fix vflux fuzzer by removing unnecessary panic (#24537)",
          "author_name": "rjl493456442",
          "author_login": "rjl493456442",
          "committed_at": "2022-03-16T10:13:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d99fedeaedb6e102ab47606f5c7c0e5aaf47eb4",
          "body": "build, Dockerfile: bump Go to 1.18",
          "is_bot": false,
          "headline": "Merge pull request #24544 from karalabe/go-1.18",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-03-16T07:01:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2352c7222927035c2b209710d6eabfdd312daf47",
          "body": "eth/downloader: fix off-by-one error in test causing 50% fails",
          "is_bot": false,
          "headline": "Merge pull request #24545 from karalabe/beacon-sync-fix-test",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-03-16T07:01:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6b8718c3746c8e51375d084ee9fc994d5e450ac2",
          "body": null,
          "is_bot": false,
          "headline": "eth/downloader: fix off-by-one error in test causing 50% fails",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-03-16T06:57:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be7eb8ae17758fccf569c0702230ae37089f8012",
          "body": null,
          "is_bot": false,
          "headline": "build, Dockerfile: bump Go to 1.18",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-03-16T06:27:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbfd3972624c1d82db21f5dfceab8fde7a1eee0a",
          "body": "* cmd, eth: Rename whitelist argument to peer.requiredblocks\r\n\r\n* eth/ethconfig: document PeerRequiredBlocks better\r\n\r\n* cmd/utils: rename new flag to --eth.requiredblocks\r\n\r\nCo-authored-by: Felix Lange <fjl@twurst.com>",
          "is_bot": false,
          "headline": "cmd/geth: rename --whitelist to --eth.requiredblocks (#24505)",
          "author_name": "Ryan Schneider",
          "author_login": "ryanschneider",
          "committed_at": "2022-03-15T11:20:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6cd72660d0e43969f8560eee224bb7bbfac15d96",
          "body": "prepare #24145",
          "is_bot": false,
          "headline": "cmd/geth: set EnableBashCompletion = true (#24313)",
          "author_name": "ligi",
          "author_login": "ligi",
          "committed_at": "2022-03-15T09:38:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85042b70905d8c01889c66e160e38c92ba14aa56",
          "body": null,
          "is_bot": false,
          "headline": "eth/tracers: use hex encoding for debug_traceBlock argument (#24517)",
          "author_name": "Guifel",
          "author_login": "guifel",
          "committed_at": "2022-03-15T09:27:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6bf2487d11a16f30f9d6ba1b11cd2af71f2d70e",
          "body": null,
          "is_bot": false,
          "headline": "build: fix linter install on windows (#24523)",
          "author_name": "ligi",
          "author_login": "ligi",
          "committed_at": "2022-03-15T09:24:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb2ae8e9955d2cbb65383e6ff0f3ba73e88c0b09",
          "body": "* trie: fix memory leak in trie iterator\r\n\r\nIn the trie iterator, live nodes are tracked in a stack while iterating.\r\nPopped node states should be explictly set to nil in order to get\r\ngarbage-collected.\r\n\r\n* trie: fix empty trie iterator",
          "is_bot": false,
          "headline": "trie: fix two issues in trie iterator (#24539)",
          "author_name": "rjl493456442",
          "author_login": "rjl493456442",
          "committed_at": "2022-03-15T09:23:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c3701b265e3568b5de8922bb7627d99185c42487",
          "body": null,
          "is_bot": false,
          "headline": "core/rawdb: add specified key length iterator (#24535)",
          "author_name": "aaronbuchwald",
          "author_login": "aaronbuchwald",
          "committed_at": "2022-03-15T08:28:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70da74e73a182620a09bb0cfbff173e6d65d0518",
          "body": "core/statedb: always clear out access list when setting a new one",
          "is_bot": false,
          "headline": "Merge pull request #24515 from karalabe/pending-statedb-accesslist-init",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-03-14T08:51:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "279409a98e2d5cb28238ff428aab295f4fa27c9d",
          "body": null,
          "is_bot": false,
          "headline": "go.mod: upgrade upnp dependency (#24536)",
          "author_name": "ucwong",
          "author_login": "ucwong",
          "committed_at": "2022-03-14T08:12:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "496f05cf52f2b7f1baaa064eee49aea8ed604ec8",
          "body": "\r\nCo-authored-by: Felix Lange <fjl@twurst.com>",
          "is_bot": false,
          "headline": "rpc: fix defer in test (#24490)",
          "author_name": "s7v7nislands",
          "author_login": "s7v7nislands",
          "committed_at": "2022-03-11T15:24:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f66ea3786dad42ebebb8308a3352cbc5be1d0e7",
          "body": "* eth/downloader: implement beacon sync\r\n\r\n* eth/downloader: fix a crash if the beacon chain is reduced in length\r\n\r\n* eth/downloader: fix beacon sync start/stop thrashing data race\r\n\r\n* eth/downloader: use a non-nil pivot even in degenerate sync requests\r\n\r\n* eth/downloader: don't touch internal st\n[…]\n deliver beacon headers\r\n\r\n* core/rawdb: track beacon sync data in db inspect\r\n\r\n* eth: fix review concerns\r\n\r\n* internal/web3ext: nit\r\n\r\nCo-authored-by: Marius van der Wijden <m.vanderwijden@live.de>",
          "is_bot": false,
          "headline": "eth/downloader: implement beacon sync (#23982)",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-03-11T12:14:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1b58e42802eaa0f69295be95b675e8dfb99eeb4f",
          "body": "eth/protocols/snap: avoid estimating infinite percentage",
          "is_bot": false,
          "headline": "Merge pull request #24529 from holiman/fix_inf",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-03-11T08:40:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d3ecca4512211695129008372a52d2b1d3a5508",
          "body": null,
          "is_bot": false,
          "headline": "eth/protocols/snap: a little typo Merkel -> Merkle (#24530)",
          "author_name": "沉风",
          "author_login": "myself659",
          "committed_at": "2022-03-11T08:32:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57cec892536270fc6dafae01ded2c528ffa370e9",
          "body": "This PR adds the `NextBaseFeePerGas` to `Block` and `EffectiveTip` to `Transaction` to make it easier for clients to compute fee history themselves via graphql queries.",
          "is_bot": false,
          "headline": "graphql: fee history fields (#24452)",
          "author_name": "Sina Mahmoodi",
          "author_login": "s1na",
          "committed_at": "2022-03-10T12:59:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "658415960ee342c69bc0b04cecd4c490de2b3b63",
          "body": null,
          "is_bot": false,
          "headline": "eth/protocols/snap: avoid estimating infinite percentage",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-03-10T11:46:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "538a86838423add89a0734d5334599898be91e5a",
          "body": "* core/rawdb, cmd, ethdb, eth: implement freezer tail deletion\r\n\r\n* core/rawdb: address comments from martin and sina\r\n\r\n* core/rawdb: fixes cornercase in tail deletion\r\n\r\n* core/rawdb: separate metadata into a standalone file\r\n\r\n* core/rawdb: remove unused code\r\n\r\n* core/rawdb: add random test\r\n\r\n* core/rawdb: polish code\r\n\r\n* core/rawdb: fsync meta file before manipulating the index\r\n\r\n* core/rawdb: fix typo\r\n\r\n* core/rawdb: address comments",
          "is_bot": false,
          "headline": "core/rawdb, cmd, ethdb, eth: implement freezer tail deletion (#23954)",
          "author_name": "rjl493456442",
          "author_login": "rjl493456442",
          "committed_at": "2022-03-10T08:37:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c8a9e5ca1f7d30cddd91f510dd978d42496d225",
          "body": null,
          "is_bot": false,
          "headline": "core, ethdb, tests, trie: introduce database snapshot (#24486)",
          "author_name": "rjl493456442",
          "author_login": "rjl493456442",
          "committed_at": "2022-03-10T08:35:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5079e3c6e5f2096e32b2216d1119db66fe0ff531",
          "body": "…#24522)\n\nThe default listening address \"localhost\" is not sufficient when running\r\ngeth in Docker.",
          "is_bot": false,
          "headline": "cmd/geth: make authrpc listening address settable from command line (…",
          "author_name": "Felix Lange",
          "author_login": "fjl",
          "committed_at": "2022-03-09T13:45:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65ed1a6871569ce616f18d69f6ec8cfbec85c1f2",
          "body": "This change speeds up trie hashing and all other activities that require\r\nRLP encoding of trie nodes by approximately 20%. The speedup is achieved by\r\navoiding reflection overhead during node encoding.\r\n\r\nThe interface type trie.node now contains a method 'encode' that works with\r\nrlp.EncoderBuffer.\n[…]\nis pooled to avoid allocations, now maintains an\r\nEncoderBuffer. This means memory resources related to trie node encoding\r\nare tied to the hasher pool.\r\n\r\nCo-authored-by: Felix Lange <fjl@twurst.com>",
          "is_bot": false,
          "headline": "rlp, trie: faster trie node encoding (#24126)",
          "author_name": "Qian Bin",
          "author_login": "qianbin",
          "committed_at": "2022-03-09T13:45:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d1f6a9f544528b41495dd3f3281afdf89aaa6b6b",
          "body": "…g (#24256)\n\n\r\nCo-authored-by: Felix Lange <fjl@twurst.com>",
          "is_bot": false,
          "headline": "core/types: improve error for too short transaction / receipt encodin…",
          "author_name": "Justus",
          "author_login": "Juicestus",
          "committed_at": "2022-03-09T09:44:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "19c2c60bbe68172dd023b71fd13b8d28fd4b0a5f",
          "body": null,
          "is_bot": false,
          "headline": "mobile: remove deprecated Stop function (#24369)",
          "author_name": "Zachinquarantine",
          "author_login": null,
          "committed_at": "2022-03-08T23:42:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8401e4277a8c8cd02be2ebd958c6b356c53be8df",
          "body": "…4454)",
          "is_bot": false,
          "headline": "core/rawdb: add HasCode, HashTrieNode and use them where possible (#2…",
          "author_name": "Ceyhun Onur",
          "author_login": "ceyonur",
          "committed_at": "2022-03-08T23:39:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec64358ac999cb737277b92ee018f7bb782c724f",
          "body": "When using -buildmode=shared, R15 is clobbered by a global variable\r\naccess; use a different register instead.\r\n\r\nFixes: #24439",
          "is_bot": false,
          "headline": "crypto/bn256/cloudflare: fix asm for dynamic linking (#24476)",
          "author_name": "uji",
          "author_login": "uji",
          "committed_at": "2022-03-08T23:23:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48605b5f61f7ce63cb3148099047309156c959a9",
          "body": null,
          "is_bot": false,
          "headline": "core/statedb: always clear out access list when setting a new one",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-03-08T10:00:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a4ec1dde57e4314839644095b79572851e32d2a",
          "body": null,
          "is_bot": false,
          "headline": " crypto/bls12381: fix typo in comment (#24509)",
          "author_name": "Ikko Ashimine",
          "author_login": "eltociear",
          "committed_at": "2022-03-08T09:48:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "870b4505a05cd8b3604078ed4afcd3012bf72a47",
          "body": "All other implementations store disconnect reasons as a single byte,\r\nso go-ethereum should do it too.",
          "is_bot": false,
          "headline": "p2p: define DiscReason as uint8 (#24507)",
          "author_name": "Felix Lange",
          "author_login": "fjl",
          "committed_at": "2022-03-07T17:25:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a79afd9ac325e12021ae56928ba4af32bb3cc78f",
          "body": "* eth, cmd: allow FdLimit to be set in config/command line (#24148)\r\n\r\n* eth/ethconfig: format code\r\n\r\n* cmd, eth/ethconfig: simplify fdlimit arg, disallow toml\r\n\r\n* cnd/utils: make fdlimit setting nicer on the logs\r\n\r\nCo-authored-by: Gary Rong <garyrong0905@gmail.com>\r\nCo-authored-by: Péter Szilágyi <peterke@gmail.com>",
          "is_bot": false,
          "headline": "cmd: allow file descriptor limit to be set via CLI (#24477)",
          "author_name": "Olivier H",
          "author_login": "ohe",
          "committed_at": "2022-03-07T08:21:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4860e50e057b0fb0fa7ff9672fcdd737ac137d1c",
          "body": "* rpc, node: refactor request validation and add jwt validation\r\n\r\n* node, rpc: fix error message, ignore engine api in RegisterAPIs\r\n\r\n* node: make authenticated port configurable\r\n\r\n* eth/catalyst: enable unauthenticated version of engine api\r\n\r\n* node: rework obtainjwtsecret (backport later)\r\n\r\n*\n[…]\nr authenticated api\r\n\r\nModifies the authentication mechanism to use default values\r\n\r\n* node: trim spaces and newline away from secret\r\n\r\nCo-authored-by: Marius van der Wijden <m.vanderwijden@live.de>",
          "is_bot": false,
          "headline": "cmd/geth, node, rpc: implement jwt tokens (#24364)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-03-07T07:30:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "37f9d25ba027356457953eab5f181c98b46e9988",
          "body": "This replaces the simple selector parser in signer/fourbyte with one that\r\ncan actually handle most types. The new parser is added in accounts/abi\r\nto also make it useable elsewhere.",
          "is_bot": false,
          "headline": "signer/fourbyte: add support for nested types in selectors (#24407)",
          "author_name": "Daniel Perez",
          "author_login": "danhper",
          "committed_at": "2022-03-04T12:39:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fddf27a989e246659fd018ea9be37b2b4f55326",
          "body": "…Azure/azure-sdk-for-go/sdk/storage/azblob. (#24473)\n\n* go.mod: update azure-storage-blob-go\r\n\r\nupdate Azure/azure-storage-blob-go from v0.7.0 to v0.14.0.\r\nrelation #24396.\r\n\r\n* internal/build: fix for breaking changes of azure-storage-blob-go\r\n\r\nfix for breaking changes of update Azure/azure-storag\n[…]\nor-go/sdk/storage/azblob.\r\n\r\n* internal/build refactor appending BlobItems\r\n\r\n* internal/build: fix azure blobstore client to include container id\r\n\r\nCo-authored-by: Péter Szilágyi <peterke@gmail.com>",
          "is_bot": false,
          "headline": "internal/build: switch azure sdk from Azure/azure-storage-blob-go to …",
          "author_name": "uji",
          "author_login": "uji",
          "committed_at": "2022-03-02T11:05:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f4ff4268f7448a2fa85442751de0b2159ba57e0b",
          "body": "Co-authored-by: seven <seven@nodereal.io>",
          "is_bot": false,
          "headline": "rpc: fix godoc (#24488)",
          "author_name": "s7v7nislands",
          "author_login": "s7v7nislands",
          "committed_at": "2022-03-02T01:51:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7307d97ae1e51a8f8b25d4df8da99df0a33cfe70",
          "body": "\r\nCo-authored-by: Felix Lange <fjl@twurst.com>",
          "is_bot": false,
          "headline": "README.md: add hardware requirements (#24395)",
          "author_name": "Yash Atwal",
          "author_login": "YashAtwal",
          "committed_at": "2022-03-01T10:00:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6662c78ec077316a6f95e3299becf135fb0f31a0",
          "body": null,
          "is_bot": false,
          "headline": "internal/flags: update copyright year (#24415)",
          "author_name": "Zachinquarantine",
          "author_login": null,
          "committed_at": "2022-03-01T09:53:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "703372452275e5347559665d8edf10534670620c",
          "body": null,
          "is_bot": false,
          "headline": "les/vflux/client: fix goroutine leak in testIter (#24449)",
          "author_name": "Felföldi Zsolt",
          "author_login": "zsfelfoldi",
          "committed_at": "2022-03-01T09:36:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03b7de28b2b2eebc2a63cb1b24452e0dd4f881cc",
          "body": null,
          "is_bot": false,
          "headline": "appveyor.yml: fetch sub-modules recursively (#24451)",
          "author_name": "Guruprasad Kamath",
          "author_login": "gurukamath",
          "committed_at": "2022-03-01T09:36:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "687e4dc8555b3b53fd8d4a4974b8f8f4b594b552",
          "body": "rlpgen outputs calls to this method for values of type string.",
          "is_bot": false,
          "headline": "rlp: add WriteString method on EncoderBuffer (#24425)",
          "author_name": "ucwong",
          "author_login": "ucwong",
          "committed_at": "2022-02-24T21:55:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0cb4d65f8d4f2503c23abe7867d52309d352c7fa",
          "body": null,
          "is_bot": false,
          "headline": "params: replace 2 bootnodes (#24432)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-02-23T10:33:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "862f8e98bce89889de22e2d32bf37f823127a32c",
          "body": null,
          "is_bot": false,
          "headline": "graphql: fix nonce for pending accounts (#24443)",
          "author_name": "Sina Mahmoodi",
          "author_login": "s1na",
          "committed_at": "2022-02-22T09:45:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6f49bf764c48e9415b168e701b6dc26566a675c",
          "body": "…torage (#24420)\n\nThis change makes use of the new code generator rlp/rlpgen to improve the\r\nperformance of RLP encoding for Header and StateAccount. It also speeds up\r\nencoding of ReceiptForStorage using the new rlp.EncoderBuffer API.\r\n\r\nThe change is much less transparent than I wanted it to be, b\n[…]\n     (all equal)\r\n    EncodeRLP/receipt-for-storage-8     64.0B ± 0%      0.0B       -100.00%  (p=0.000 n=8+8)\r\n    EncodeRLP/receipt-full-8             320B ± 0%      320B ± 0%      ~     (all equal)",
          "is_bot": false,
          "headline": "core/types: faster RLP encoding of Header, StateAcccount, ReceiptForS…",
          "author_name": "Felix Lange",
          "author_login": "fjl",
          "committed_at": "2022-02-18T07:10:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "06aaeed1a6e4e7f85348d2700ac4e658962477f3",
          "body": "Also specify EOL dates of all listed releases.",
          "is_bot": false,
          "headline": "build: add Ubuntu 21.10 PPA target (#24418)",
          "author_name": "Felix Lange",
          "author_login": "fjl",
          "committed_at": "2022-02-17T17:35:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b93564e213ac33e2647ef94a8d8758ec5f0a1af",
          "body": "This change adds a code generator tool for creating EncodeRLP method\r\nimplementations. The generated methods will behave identically to the\r\nreflect-based encoder, but run faster because there is no reflection overhead.\r\n\r\nPackage rlp now provides the EncoderBuffer type for incremental encoding. Thi\n[…]\nncodeRLP\r\nimplementations.\r\n\r\nThe new EncoderBuffer type is a sort-of 'opaque handle' for a pointer to\r\nencBuffer. It is implemented this way to ensure the global encBuffer pool\r\nis handled correctly.",
          "is_bot": false,
          "headline": "rlp/rlpgen: RLP encoder code generator (#24251)",
          "author_name": "Felix Lange",
          "author_login": "fjl",
          "committed_at": "2022-02-16T17:14:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4335bbbf0a90236d4f0d10172a26fe8b3fb3e6e3",
          "body": "This Ubuntu release has reached EOL and Launchpad does not\r\naccept uploads for it anymore.",
          "is_bot": false,
          "headline": "build: disable Ubuntu Hirsuite (#24408)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-02-16T16:38:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc8ad1b70df56b0ed063a7cbbd89d8c1551daec8",
          "body": "trie: implement NodeBlob API for trie iterator",
          "is_bot": false,
          "headline": "Merge pull request #24391 from rjl493456442/trie-iterator",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-02-15T13:35:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d086430bd8c0b9549fde5259f74f6df6c96df65",
          "body": "…(#24392)\n\nThis PR adds an addtional API called `NewBatchWithSize` for db\r\nbatcher. It turns out that leveldb batch memory allocation is\r\nsuper inefficient. The main reason is the allocation step of\r\nleveldb Batch is too small when the batch size is large. It can\r\ntake a few second to build a leveld\n[…]\nh is\r\nknown in advance, this API can be used in this case.\r\n\r\nIt's needed in new state scheme PR which needs to commit a batch of\r\ntrie nodes in a single batch. Implement the feature in a seperate PR.",
          "is_bot": false,
          "headline": "core, ethdb, tests, trie: implement NewBatchWithSize API for batcher …",
          "author_name": "rjl493456442",
          "author_login": "rjl493456442",
          "committed_at": "2022-02-15T13:15:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2056e596f2d4eb6ba936385edacad45d9716ea2e",
          "body": null,
          "is_bot": false,
          "headline": "params: begin v1.10.17 release cycle",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-02-15T12:34:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20356e57b119b4e70ce47665a71964434e15200d",
          "body": null,
          "is_bot": false,
          "headline": "params: go-ethereum v1.10.16 stable",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-02-15T12:32:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e98114da4feedf6dfb17b9839fc2c314cf1e5768",
          "body": "* add CallContractAtHash to ethclient\r\n\r\n* add docstring and test\r\n\r\n* optimize test\r\n\r\n* ethclient: nits\r\n\r\nCo-authored-by: Péter Szilágyi <peterke@gmail.com>",
          "is_bot": false,
          "headline": "ethclient: add CallContractAtHash  (#24355)",
          "author_name": "zhiqiangxu",
          "author_login": "zhiqiangxu",
          "committed_at": "2022-02-15T09:55:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f01e2fab07a20a4be5bedde45a366cfe89f07cd4",
          "body": "* Fixes #24368\r\n\r\nSigned-off-by: 0x6f736f646f <blackd0t@protonmail.com>\r\n\r\n* Update internal/ethapi/api.go\r\n\r\nCo-authored-by: Martin Holst Swende <martin@swende.se>",
          "is_bot": false,
          "headline": "internal/ethapi: fix incorrect type on empty slice (#24372)",
          "author_name": "b1ackd0t",
          "author_login": "rodneyosodo",
          "committed_at": "2022-02-15T09:44:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55430b6ea2bcc63bc11e7089690d90d8ac70dc5c",
          "body": "This functionality is needed in new path-based storage scheme, but\ncan be implemented in a seperate PR though.\n\nWhen an account is deleted, then all the storage slots should be\nnuked out from the disk as well. In hash-based storage scheme they\nare still left in the disk but in new scheme, they will \n[…]\n\nand marked as deleted.\n\nBut why the NodeBlob API is needed in this scenario? Because when\nthe node is marked deleted, the previous value is also required to\nbe recorded to construct the reverse diff.",
          "is_bot": false,
          "headline": "trie: implement NodeBlob API for trie iterator",
          "author_name": "Gary Rong",
          "author_login": "rjl493456442",
          "committed_at": "2022-02-15T08:12:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6c3513c0775e1e1e69a7c9e5c86255804fa3fb36",
          "body": "dialPubkey isn't used anywhere else after dialDest.Load, so it should be safe to\r\nrestrict its scope to the if clause.",
          "is_bot": false,
          "headline": "p2p: reduce the scope of variable dialPubkey (#24385)",
          "author_name": "zhiqiangxu",
          "author_login": "zhiqiangxu",
          "committed_at": "2022-02-14T11:05:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51e7968b8b2f80696a6900de1560dd2413d2f31c",
          "body": null,
          "is_bot": false,
          "headline": "core/state: fix read-meters + simplify code (#24304)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-02-14T08:22:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb3a6528cfa49f623570575c4fe9e8a716cfcdf7",
          "body": "This upgrade resolves a build issue on Android 7+ and removes\r\na build warning on macOS >= 12.0.",
          "is_bot": false,
          "headline": "go.mod: upgrade to github.com/karalabe/usb v0.0.2 (#24356)",
          "author_name": "Felix Lange",
          "author_login": "fjl",
          "committed_at": "2022-02-08T18:58:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a0d487c3bd8f3a05a41ffde1b20b17567abd029",
          "body": "Co-authored-by: specerxi <xhxpecer@gmail.com>",
          "is_bot": false,
          "headline": "signer/core: fix complex typed data sign (EIP712) (#24220)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-02-08T13:40:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d20fed893faa894f50af709349b13b6ad9b45db",
          "body": null,
          "is_bot": false,
          "headline": "miner: avoid data race in miner (#24349)",
          "author_name": "rjl493456442",
          "author_login": "rjl493456442",
          "committed_at": "2022-02-07T17:34:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ce4670bc03602bb6638c490f892e848647c15c0",
          "body": "This also contains some changes to the protocol handler to\r\nmake the tests pass.",
          "is_bot": false,
          "headline": "cmd/devp2p: implement snap protocol testing (#24276)",
          "author_name": "Martin Holst Swende",
          "author_login": "holiman",
          "committed_at": "2022-02-04T14:24:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aaca58a7a1d9acbd24bbc74c49933efa2f1af183",
          "body": null,
          "is_bot": false,
          "headline": "go.mode: bump graphql-go dependency to v1.3.0 (#24324)",
          "author_name": "aaronbuchwald",
          "author_login": "aaronbuchwald",
          "committed_at": "2022-02-02T16:21:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a7e345af4333e29a300382a8c67c6b04ff9ebd8",
          "body": "cmd: auto-enable beacon APIs if TTD is defined",
          "is_bot": false,
          "headline": "Merge pull request #24328 from karalabe/uke-catalyst",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-02-02T16:15:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d99e759e762c963a170269b73168a857b7b8d773",
          "body": null,
          "is_bot": false,
          "headline": "cmd: auto-enable beacon APIs if TTD is defined",
          "author_name": "Péter Szilágyi",
          "author_login": "karalabe",
          "committed_at": "2022-02-02T15:57:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afe344bcf31bfb477a6e1ad5b862a70fc5c1a22b",
          "body": "This change makes it so WaitMined no longer logs an error when the receipt\r\nis unavailable. It also changes the simulated backend to return NotFound for\r\nunavailable receipts, just like ethclient does.",
          "is_bot": false,
          "headline": "accounts/abi/bind: improve WaitMined error handling (#24321)",
          "author_name": "komika",
          "author_login": "komkom",
          "committed_at": "2022-02-01T15:42:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5436c8eb7380fc0efd02bc34ebd6b56b47f2db6",
          "body": "* eth/tracers: clean-up tracer collection\r\n\r\n* Rm test for dropped tracer",
          "is_bot": false,
          "headline": "eth/tracers: clean-up tracer collection (#24320)",
          "author_name": "Sina Mahmoodi",
          "author_login": "s1na",
          "committed_at": "2022-02-01T09:44:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 0,
      "latest_release_at": "2021-08-24T07:04:30Z",
      "latest_release_tag": "v1.10.8",
      "releases_from_tags": true,
      "days_since_last_push": 436,
      "active_weeks_last_year": 0,
      "days_since_latest_release": 1796,
      "mean_days_between_releases": 28.4
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/ethereum/go-ethereum",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": false,
          "registry_url": "https://pkg.go.dev/github.com/ethereum/go-ethereum",
          "is_deprecated": false,
          "latest_version": "v1.17.4",
          "repository_url": "https://github.com/ethereum/go-ethereum",
          "versions_count": 243,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-06-22T07:46:12Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 33
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2022-02-07",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [
        "accounts/usbwallet/trezor/messages-common.proto",
        "accounts/usbwallet/trezor/messages-ethereum.proto",
        "accounts/usbwallet/trezor/messages-management.proto",
        "accounts/usbwallet/trezor/messages.proto"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 5961550,
      "source_files_sampled": 1276,
      "oversized_source_files": 21,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "0.0.0-20210322153248-0c34fe9e7dc2",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 10,
            "advisory_ids": [
              "GHSA-45gg-vh54-h5m9",
              "GHSA-45x7-px36-x8w8",
              "GHSA-5cgq-3rg8-m6cv",
              "GHSA-78mq-xcr3-xm33",
              "GHSA-89gr-r52h-f8rx",
              "GHSA-8c26-wmh5-6g9v",
              "GHSA-9m57-25v3-79x9",
              "GHSA-f5wc-c3c7-36mc",
              "GHSA-f6x5-jh6r-wrfv",
              "GHSA-gwc9-m7rh-j2ww"
            ],
            "fixed_version": "3.4.0",
            "advisory_count": 43,
            "oldest_advisory_days": 1589
          },
          {
            "name": "github.com/docker/docker",
            "direct": true,
            "version": "1.4.2-0.20180625184442-8e610b2b55bf",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-2mm7-x5h6-5pvq",
              "GHSA-3fwx-pjgw-3558",
              "GHSA-4vq8-7jfc-9cvp",
              "GHSA-6hwg-w5jg-9c6x",
              "GHSA-g7v2-2qxx-wjrw",
              "GHSA-j249-ghv5-7mxv",
              "GHSA-jq35-85cj-fj4p",
              "GHSA-mq39-4gv4-mvpx",
              "GHSA-pxq6-2prw-chj9",
              "GHSA-qrqr-3x5j-2xw9"
            ],
            "fixed_version": "29.3.1",
            "advisory_count": 36,
            "oldest_advisory_days": 1621
          },
          {
            "name": "github.com/golang-jwt/jwt/v4",
            "direct": true,
            "version": "4.3.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-29wx-vh33-7x7r",
              "GHSA-mh63-6h87-95cp",
              "GO-2024-3250",
              "GO-2025-3553"
            ],
            "fixed_version": "5.2.2",
            "advisory_count": 4,
            "oldest_advisory_days": 627
          },
          {
            "name": "golang.org/x/text",
            "direct": true,
            "version": "0.3.7",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-69ch-w2m2-3vjp",
              "GO-2022-1059",
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 3,
            "oldest_advisory_days": 1382
          },
          {
            "name": "github.com/consensys/gnark-crypto",
            "direct": true,
            "version": "0.4.1-0.20210426202927-39ac3d4b3f1f",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.1,
            "advisory_ids": [
              "GHSA-fr8m-434r-g3xp",
              "GHSA-pffg-92cg-xf5c",
              "GO-2023-2096",
              "GO-2023-2101",
              "GO-2025-4027"
            ],
            "fixed_version": "0.12.1",
            "advisory_count": 5,
            "oldest_advisory_days": 1023
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "0.0.0-20210816183151-1e6c022a8912",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-p782-xgp4-8hr8",
              "GO-2022-0493",
              "GO-2026-5024"
            ],
            "fixed_version": "1.18.2",
            "advisory_count": 3,
            "oldest_advisory_days": 1492
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 3,
          "critical": 1,
          "moderate": 2
        },
        "advisory_count": 94,
        "affected_count": 6,
        "assessed_count": 67,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 6
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/storage/azblob",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.0"
        },
        {
          "name": "github.com/VictoriaMetrics/fastcache",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/config",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/credentials",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/route53",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/btcsuite/btcd/btcec/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.1.2"
        },
        {
          "name": "github.com/cespare/cp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.0"
        },
        {
          "name": "github.com/cloudflare/cloudflare-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.14.0"
        },
        {
          "name": "github.com/consensys/gnark-crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.1-0.20210426202927-39ac3d4b3f1f"
        },
        {
          "name": "github.com/davecgh/go-spew",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/deckarep/golang-set",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.0"
        },
        {
          "name": "github.com/docker/docker",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.2-0.20180625184442-8e610b2b55bf"
        },
        {
          "name": "github.com/dop251/goja",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20211011172007-d99e4b8cbf48"
        },
        {
          "name": "github.com/edsrzf/mmap-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/fatih/color",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.7.0"
        },
        {
          "name": "github.com/fjl/memsize",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20190710130421-bcb5799ab5e5"
        },
        {
          "name": "github.com/gballet/go-libpcsclite",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20190607065134-2772fd86a8ff"
        },
        {
          "name": "github.com/go-stack/stack",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.0"
        },
        {
          "name": "github.com/golang-jwt/jwt/v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.3.0"
        },
        {
          "name": "github.com/golang/protobuf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.3"
        },
        {
          "name": "github.com/golang/snappy",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.4"
        },
        {
          "name": "github.com/google/gofuzz",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1-0.20200604201612-c04b05f3adfa"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/gorilla/websocket",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.2"
        },
        {
          "name": "github.com/graph-gophers/graphql-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.0"
        },
        {
          "name": "github.com/hashicorp/go-bexpr",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.10"
        },
        {
          "name": "github.com/hashicorp/golang-lru",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.5.5-0.20210104140557-80c98217689d"
        },
        {
          "name": "github.com/holiman/bloomfilter/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.3"
        },
        {
          "name": "github.com/holiman/uint256",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/huin/goupnp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.3"
        },
        {
          "name": "github.com/influxdata/influxdb",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.3"
        },
        {
          "name": "github.com/influxdata/influxdb-client-go/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.0"
        },
        {
          "name": "github.com/jackpal/go-nat-pmp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.2"
        },
        {
          "name": "github.com/jedisct1/go-minisign",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20190909160543-45766022959e"
        },
        {
          "name": "github.com/julienschmidt/httprouter",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/karalabe/usb",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.2"
        },
        {
          "name": "github.com/mattn/go-colorable",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.8"
        },
        {
          "name": "github.com/mattn/go-isatty",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.12"
        },
        {
          "name": "github.com/naoina/toml",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.2-0.20170918210437-9fafd6967416"
        },
        {
          "name": "github.com/olekukonko/tablewriter",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.5"
        },
        {
          "name": "github.com/peterh/liner",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1-0.20190123174540-a2c9a5303de7"
        },
        {
          "name": "github.com/prometheus/tsdb",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.1"
        },
        {
          "name": "github.com/rjeczalik/notify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.1"
        },
        {
          "name": "github.com/rs/cors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.7.0"
        },
        {
          "name": "github.com/shirou/gopsutil",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.21.4-0.20210419000835-c7a38de76ee5+incompatible"
        },
        {
          "name": "github.com/status-im/keycard-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20190316090335-8537d3370df4"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.7.0"
        },
        {
          "name": "github.com/syndtr/goleveldb",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.1-0.20210819022825-2ae1ddf74ef7"
        },
        {
          "name": "github.com/tyler-smith/go-bip39",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.1-0.20181017060643-dbb3b84ba2ef"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20210322153248-0c34fe9e7dc2"
        },
        {
          "name": "golang.org/x/sync",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20210220032951-036812b2e83c"
        },
        {
          "name": "golang.org/x/sys",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20210816183151-1e6c022a8912"
        },
        {
          "name": "golang.org/x/text",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.7"
        },
        {
          "name": "golang.org/x/time",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20210220033141-f8bda1e9f3ba"
        },
        {
          "name": "golang.org/x/tools",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.0"
        },
        {
          "name": "gopkg.in/natefinch/npipe.v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.0-20160621034901-c1b8fa8bdcce"
        },
        {
          "name": "gopkg.in/olebedev/go-duktape.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.0-20200619000410-60c24ae608a6"
        },
        {
          "name": "gopkg.in/urfave/cli.v1",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": true,
            "version": "1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": true,
            "version": "1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": true,
            "version": "1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/route53",
            "direct": true,
            "version": "1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/storage/azblob",
            "direct": true,
            "version": "0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/btcsuite/btcd/btcec/v2",
            "direct": true,
            "version": "2.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/cp",
            "direct": true,
            "version": "0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cloudflare/cloudflare-go",
            "direct": true,
            "version": "0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/consensys/gnark-crypto",
            "direct": true,
            "version": "0.4.1-0.20210426202927-39ac3d4b3f1f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": true,
            "version": "1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/deckarep/golang-set",
            "direct": true,
            "version": "1.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker",
            "direct": true,
            "version": "1.4.2-0.20180625184442-8e610b2b55bf",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dop251/goja",
            "direct": true,
            "version": "0.0.0-20211011172007-d99e4b8cbf48",
            "ecosystem": "go"
          },
          {
            "name": "github.com/edsrzf/mmap-go",
            "direct": true,
            "version": "1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": true,
            "version": "1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fjl/memsize",
            "direct": true,
            "version": "0.0.0-20190710130421-bcb5799ab5e5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gballet/go-libpcsclite",
            "direct": true,
            "version": "0.0.0-20190607065134-2772fd86a8ff",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-stack/stack",
            "direct": true,
            "version": "1.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v4",
            "direct": true,
            "version": "4.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/protobuf",
            "direct": true,
            "version": "1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/snappy",
            "direct": true,
            "version": "0.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gofuzz",
            "direct": true,
            "version": "1.1.1-0.20200604201612-c04b05f3adfa",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/websocket",
            "direct": true,
            "version": "1.4.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/graph-gophers/graphql-go",
            "direct": true,
            "version": "1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-bexpr",
            "direct": true,
            "version": "0.1.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru",
            "direct": true,
            "version": "0.5.5-0.20210104140557-80c98217689d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/holiman/bloomfilter/v2",
            "direct": true,
            "version": "2.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/holiman/uint256",
            "direct": true,
            "version": "1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/huin/goupnp",
            "direct": true,
            "version": "1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/influxdata/influxdb",
            "direct": true,
            "version": "1.8.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/influxdata/influxdb-client-go/v2",
            "direct": true,
            "version": "2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackpal/go-nat-pmp",
            "direct": true,
            "version": "1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jedisct1/go-minisign",
            "direct": true,
            "version": "0.0.0-20190909160543-45766022959e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/julienschmidt/httprouter",
            "direct": true,
            "version": "1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/karalabe/usb",
            "direct": true,
            "version": "0.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": true,
            "version": "0.1.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": true,
            "version": "0.0.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/naoina/toml",
            "direct": true,
            "version": "0.1.2-0.20170918210437-9fafd6967416",
            "ecosystem": "go"
          },
          {
            "name": "github.com/olekukonko/tablewriter",
            "direct": true,
            "version": "0.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/peterh/liner",
            "direct": true,
            "version": "1.1.1-0.20190123174540-a2c9a5303de7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/tsdb",
            "direct": true,
            "version": "0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rjeczalik/notify",
            "direct": true,
            "version": "0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rs/cors",
            "direct": true,
            "version": "1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shirou/gopsutil",
            "direct": true,
            "version": "3.21.4-0.20210419000835-c7a38de76ee5+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/status-im/keycard-go",
            "direct": true,
            "version": "0.0.0-20190316090335-8537d3370df4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/syndtr/goleveldb",
            "direct": true,
            "version": "1.0.1-0.20210819022825-2ae1ddf74ef7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tyler-smith/go-bip39",
            "direct": true,
            "version": "1.0.1-0.20181017060643-dbb3b84ba2ef",
            "ecosystem": "go"
          },
          {
            "name": "github.com/victoriametrics/fastcache",
            "direct": true,
            "version": "1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "0.0.0-20210322153248-0c34fe9e7dc2",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": true,
            "version": "0.0.0-20210220032951-036812b2e83c",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "0.0.0-20210816183151-1e6c022a8912",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": true,
            "version": "0.3.7",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": true,
            "version": "0.0.0-20210220033141-f8bda1e9f3ba",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": true,
            "version": "0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/natefinch/npipe.v2",
            "direct": true,
            "version": "2.0.0-20160621034901-c1b8fa8bdcce",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/olebedev/go-duktape.v3",
            "direct": true,
            "version": "3.0.0-20200619000410-60c24ae608a6",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/urfave/cli.v1",
            "direct": true,
            "version": "1.20.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/deepmap/oapi-codegen",
            "direct": false,
            "version": "1.8.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/influxdata/line-protocol",
            "direct": false,
            "version": "0.0.0-20210311194329-9aa0e372d097",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kylelemons/godebug",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/naoina/go-stringutil",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stackexchange/wmi",
            "direct": false,
            "version": "0.0.0-20180116203802-5d049714c4a6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/go-sysconf",
            "direct": false,
            "version": "0.3.5",
            "ecosystem": "go"
          },
          {
            "name": "gotest.tools",
            "direct": false,
            "version": "2.2.0+incompatible",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 67,
        "direct_count": 59,
        "indirect_count": 8
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 2,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "obscuren",
          "commits": 3951,
          "avatar_url": "https://avatars.githubusercontent.com/u/6264126?v=4"
        },
        {
          "type": "User",
          "login": "karalabe",
          "commits": 2424,
          "avatar_url": "https://avatars.githubusercontent.com/u/129561?v=4"
        },
        {
          "type": "User",
          "login": "fjl",
          "commits": 1264,
          "avatar_url": "https://avatars.githubusercontent.com/u/6915?v=4"
        },
        {
          "type": "User",
          "login": "tgerring",
          "commits": 569,
          "avatar_url": "https://avatars.githubusercontent.com/u/731472?v=4"
        },
        {
          "type": "User",
          "login": "holiman",
          "commits": 518,
          "avatar_url": "https://avatars.githubusercontent.com/u/142290?v=4"
        },
        {
          "type": "User",
          "login": "zelig",
          "commits": 377,
          "avatar_url": "https://avatars.githubusercontent.com/u/769725?v=4"
        },
        {
          "type": "User",
          "login": "rjl493456442",
          "commits": 264,
          "avatar_url": "https://avatars.githubusercontent.com/u/5959481?v=4"
        },
        {
          "type": "User",
          "login": "CJentzsch",
          "commits": 226,
          "avatar_url": "https://avatars.githubusercontent.com/u/8452011?v=4"
        },
        {
          "type": "User",
          "login": "debris",
          "commits": 212,
          "avatar_url": "https://avatars.githubusercontent.com/u/2613714?v=4"
        },
        {
          "type": "User",
          "login": "zsfelfoldi",
          "commits": 173,
          "avatar_url": "https://avatars.githubusercontent.com/u/9884311?v=4"
        }
      ],
      "contributors_sampled": 100,
      "top_contributor_share": 0.339
    },
    "quality_signals": {
      "has_ci": false,
      "has_tests": true,
      "ci_workflows": [],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 9,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 63 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": null,
            "reason": "no workflows found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": null,
            "reason": "No tokens found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "84 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "1e973a96b4b52d2a3af07a935ad41a4358924422",
        "ran_at": "2026-07-25T15:00:48Z",
        "aggregate_score": 2.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-10T08:53:56Z",
      "oldest_open_prs": [
        {
          "number": 2,
          "created_at": "2025-05-15T00:19:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": null,
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/alchemyplatform/go-ethereum",
    "host": "github.com",
    "name": "go-ethereum",
    "owner": "alchemyplatform"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "critical",
      "name": "Overall health",
      "note": "Abandonment Policy applies a 60% multiplier to weighted overall health and gives it a ceiling of 49.",
      "notes": [
        {
          "code": "abandonment_overall_adjustment",
          "params": {
            "cap": 49,
            "pct": 60
          }
        }
      ],
      "value": 19,
      "inputs": {
        "security": 27,
        "vitality": 20,
        "community": 12,
        "governance": 48,
        "engineering": 50,
        "abandonment_cap": 49,
        "abandonment_state": "likely_abandoned",
        "abandonment_multiplier": 60,
        "weighted_overall_before_abandonment": 32,
        "overall_after_abandonment_multiplier": 19
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "critical",
        "name": "Vitality",
        "value": 20,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "commits_last_year": 0,
              "human_commit_share": 1,
              "days_since_last_push": 436,
              "active_weeks_last_year": 0
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 436 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 436
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "0/52 weeks with commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "0 commits in the last year",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 48,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v1.10.8",
              "releases_from_tags": true,
              "days_since_latest_release": 1796,
              "mean_days_between_releases": 28.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 1796 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 1796
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~28.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 28.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "moderate",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "cap": 49,
              "state": "likely_abandoned",
              "guards": [],
              "signals": [
                "unfixed_advisory",
                "release_stall",
                "scorecard_unmaintained"
              ],
              "red_flag": true,
              "multiplier_pct": 60,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": 1,
              "unanswered_open_issues": 0,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1576,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "no human commit for 1576 days; 3 unmet obligation(s): a fixed advisory left unapplied, releases stalled, Scorecard reports it unmaintained",
                "points": 60,
                "status": "partial",
                "details": [
                  {
                    "code": "abandonment_flagged",
                    "params": {
                      "days": 1576,
                      "count": 3,
                      "signals": "a fixed advisory left unapplied, releases stalled, Scorecard reports it unmaintained"
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 12,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 1,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (LGPL-3.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "LGPL-3.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 48,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 100,
              "top_contributor_share": 0.339
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 34% of commits",
                "points": 14.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 34
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "100 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 63 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "0/1 decided PRs merged",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 0,
                      "decided": 1
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "followers": 1058,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "alchemyplatform",
              "public_repos": 161,
              "account_age_days": 2653
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "1,058 followers of alchemyplatform",
                "points": 21.7,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 1058,
                      "login": "alchemyplatform"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "161 public repos, account ~7 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 161
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 7
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 50,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 50,
            "inputs": {
              "has_ci": false,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": "https://geth.ethereum.org",
              "has_readme": false,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://geth.ethereum.org",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "critical",
        "name": "Security",
        "value": 27,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, CI-Tests, Dangerous-Workflow, Packaging, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "ci_tests",
                    "dangerous_workflow",
                    "packaging",
                    "signed_releases",
                    "token_permissions"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 26,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 12,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 6,
              "scorecard_aggregate": 2.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 63 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no workflows found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "No tokens found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "84 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "at_risk",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 67 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 67
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 30,
            "inputs": {
              "source": "osv",
              "advisories": 94,
              "affected_packages": 6,
              "assessed_packages": 67,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, high 3, moderate 2",
              "direct_affected_packages": 6
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "6 affected: golang.org/x/crypto 0.0.0-20210322153248-0c34fe9e7dc2 (critical 10.0), github.com/docker/docker 1.4.2-0.20180625184442-8e610b2b55bf (high 8.8), github.com/golang-jwt/jwt/v4 4.3.0 (high 7.5), +3 more",
                "points": 3.8,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 6,
                      "packages": "golang.org/x/crypto 0.0.0-20210322153248-0c34fe9e7dc2 (critical 10.0), github.com/docker/docker 1.4.2-0.20180625184442-8e610b2b55bf (high 8.8), github.com/golang-jwt/jwt/v4 4.3.0 (high 7.5)"
                    }
                  },
                  {
                    "code": "advisories_affected_more",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "6 advisory-carrying package(s) unaddressed past 90 days; oldest published 1621 days ago",
                "points": 19,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 6,
                      "oldest": 1621
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 67,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 10
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 68,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.94,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "94 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 94,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 5961550,
              "source_files_sampled": 1276,
              "oversized_source_files": 21
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "21/1276 source files over 60KB",
                "points": 54.1,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 1276,
                      "oversized": 21
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "good",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": [
                "accounts/usbwallet/trezor/messages-common.proto",
                "accounts/usbwallet/trezor/messages-ethereum.proto",
                "accounts/usbwallet/trezor/messages-management.proto",
                "accounts/usbwallet/trezor/messages.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "accounts/usbwallet/trezor/messages-common.proto, accounts/usbwallet/trezor/messages-ethereum.proto, accounts/usbwallet/trezor/messages-management.proto, accounts/usbwallet/trezor/messages.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "accounts/usbwallet/trezor/messages-common.proto, accounts/usbwallet/trezor/messages-ethereum.proto, accounts/usbwallet/trezor/messages-management.proto, accounts/usbwallet/trezor/messages.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Community profile unavailable",
    "go package 'github.com/ethereum/go-ethereum' points at a different repository (https://github.com/ethereum/go-ethereum); excluded from ecosystem scoring"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T15:01:07.542992Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/alchemyplatform/go-ethereum.svg",
  "full_name": "alchemyplatform/go-ethereum",
  "license_state": "standard",
  "license_spdx": "LGPL-3.0"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statistics — Go.

Software health index

Score profile

Ownership

Package ecosystems

Metrics by category

Key facts

Data collection warnings

More detail

Related records