alphagov/gds-api-adapters holds a health index of 93 out of 100, placing it in the Exceptional band. It scores highest on Sustainability & Governance (92/100) and lowest on AI Readiness (44/100). It was last updated today. 13 contributors account for most of its recent work.
93
overall / 100
Exceptional
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
93
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 79 is calibrated to 93 on the published index scale (record calibration 2026-08-02).
Direct dependencies free of known advisories — no direct dependency carries a known advisory
0/25
Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
0
affected_packages
0
assessed_packages
1
unassessed_packages
22
affected_by_severity
none
direct_affected_packages
0
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 1 resolved dependencies against OSV. 22 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Type-checkable code — Ruby without a type-check config
55/55
Manageable file sizes — 0/123 source files over 60KB
Inputs used
primary_language
Ruby
largest_source_bytes
40,393
source_files_sampled
123
oversized_source_files
0
Key facts
21GitHub stars
99contributors
126commits, last 12 months
0days since last push
100releases
13bus factor
1open issues
RubyGemspackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 13 ⇿
0Stars
13Forks
93Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 35Minor 44Patch 14
Each point covers 12 days.
OpenSSF Scorecard 7.8 / 10
7.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-27 10:14 UTC
Full resolved dependency set from the GitHub dependency graph: 0 direct and 23 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
RubyGems
addressable
—
indirect
RubyGems
byebug
—
indirect
RubyGems
climate_control
—
indirect
RubyGems
govuk_schemas
—
indirect
RubyGems
link_header
—
indirect
RubyGems
minitest
—
indirect
RubyGems
minitest-around
—
indirect
RubyGems
mocha
—
indirect
RubyGems
null_logger
—
indirect
RubyGems
pact
—
indirect
RubyGems
pact-consumer-minitest
—
indirect
RubyGems
pact-mock_service
—
indirect
RubyGems
pact_broker-client
—
indirect
RubyGems
plek
—
indirect
RubyGems
rack
—
indirect
RubyGems
rack-test
—
indirect
RubyGems
rake
—
indirect
RubyGems
rdoc
—
indirect
RubyGems
rest-client
—
indirect
RubyGems
rubocop-govuk
5.2.1
indirect
RubyGems
simplecov
—
indirect
RubyGems
timecop
—
indirect
RubyGems
webmock
—
indirect
Dependency advisories 0
This repository publishes no package the index resolves, so its own dependency graph was assessed — 1 packages, which also include development and test pins that never ship: 0 carry known advisories, of which 0 are direct. 22 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"govuk"
],
"is_fork": false,
"size_kb": 3672,
"has_wiki": false,
"homepage": "http://www.rubydoc.info/github/alphagov/gds-api-adapters",
"languages": {
"Ruby": 583301
},
"pushed_at": "2026-07-27T10:08:02Z",
"created_at": "2011-12-02T14:13:57Z",
"owner_type": "Organization",
"updated_at": "2026-07-27T10:06:12Z",
"description": "A set of API adapters to work with the GOV.UK APIs",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Ruby",
"significant_languages": [
"Ruby"
]
},
"owner": {
"blog": "https://gds.blog.gov.uk/",
"name": "Government Digital Service",
"type": "Organization",
"login": "alphagov",
"company": null,
"location": "The White Chapel Building, 10 Whitechapel High Street, London E1 8QS",
"followers": 1576,
"avatar_url": "https://avatars.githubusercontent.com/u/596977?v=4",
"created_at": "2011-02-02T15:45:37Z",
"is_verified": null,
"public_repos": 1528,
"account_age_days": 5653
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v103.4.0",
"kind": "minor",
"published_at": "2026-07-27T10:04:44Z"
},
{
"tag": "v103.3.1",
"kind": "patch",
"published_at": "2026-04-20T11:37:43Z"
},
{
"tag": "v103.3.0",
"kind": "minor",
"published_at": "2026-04-09T14:01:54Z"
},
{
"tag": "v103.2.0",
"kind": "minor",
"published_at": "2026-04-01T09:05:39Z"
},
{
"tag": "v103.1.1",
"kind": "patch",
"published_at": "2026-03-30T16:03:54Z"
},
{
"tag": "v103.1.0",
"kind": "minor",
"published_at": "2026-03-10T08:39:03Z"
},
{
"tag": "v103.0.0",
"kind": "major",
"published_at": "2026-03-02T09:50:37Z"
},
{
"tag": "v102.0.0",
"kind": "major",
"published_at": "2026-01-27T11:34:22Z"
},
{
"tag": "v101.2.0",
"kind": "minor",
"published_at": "2025-12-17T16:53:45Z"
},
{
"tag": "v101.1.0",
"kind": "minor",
"published_at": "2025-12-17T10:00:27Z"
},
{
"tag": "v101.0.0",
"kind": "major",
"published_at": "2025-08-14T14:45:59Z"
},
{
"tag": "v100.0.0",
"kind": "major",
"published_at": "2025-08-13T12:13:12Z"
},
{
"tag": "v99.3.0",
"kind": "minor",
"published_at": "2025-08-08T14:53:34Z"
},
{
"tag": "v99.2.0",
"kind": "minor",
"published_at": "2025-05-09T07:09:56Z"
},
{
"tag": "v99.1.0",
"kind": "minor",
"published_at": "2025-05-08T12:38:19Z"
},
{
"tag": "v99.0.0",
"kind": "major",
"published_at": "2025-03-26T10:21:24Z"
},
{
"tag": "v98.4.0",
"kind": "minor",
"published_at": "2025-03-19T15:43:53Z"
},
{
"tag": "v98.3.0",
"kind": "minor",
"published_at": "2025-03-12T15:55:40Z"
},
{
"tag": "v98.2.0",
"kind": "minor",
"published_at": "2025-01-06T13:57:11Z"
},
{
"tag": "v98.1.0",
"kind": "minor",
"published_at": "2024-12-18T12:09:18Z"
},
{
"tag": "v98.0.0",
"kind": "major",
"published_at": "2024-12-17T14:03:13Z"
},
{
"tag": "v97.6.0",
"kind": "minor",
"published_at": "2024-12-09T16:29:31Z"
},
{
"tag": "v97.5.0",
"kind": "minor",
"published_at": "2024-12-03T08:00:42Z"
},
{
"tag": "v97.4.1",
"kind": "patch",
"published_at": "2024-11-28T14:51:15Z"
},
{
"tag": "v97.4.0",
"kind": "minor",
"published_at": "2024-11-26T14:46:54Z"
},
{
"tag": "v97.3.0",
"kind": "minor",
"published_at": "2024-11-14T12:13:19Z"
},
{
"tag": "v97.2.0",
"kind": "minor",
"published_at": "2024-11-13T15:59:08Z"
},
{
"tag": "v97.1.0",
"kind": "minor",
"published_at": "2024-10-30T14:59:43Z"
},
{
"tag": "v97.0.0",
"kind": "major",
"published_at": "2024-10-17T09:03:00Z"
},
{
"tag": "v96.0.3",
"kind": "patch",
"published_at": "2024-08-30T15:40:09Z"
},
{
"tag": "v96.0.2",
"kind": "patch",
"published_at": "2024-06-25T12:41:52Z"
},
{
"tag": "v96.0.1",
"kind": "patch",
"published_at": "2024-05-21T09:21:25Z"
},
{
"tag": "v96.0.0",
"kind": "major",
"published_at": "2024-05-09T15:48:06Z"
},
{
"tag": "v95.1.0",
"kind": "minor",
"published_at": "2024-04-29T16:23:50Z"
},
{
"tag": "v95.0.1",
"kind": "patch",
"published_at": "2024-03-27T13:37:26Z"
},
{
"tag": "v95.0.0",
"kind": "major",
"published_at": "2024-03-26T10:50:19Z"
},
{
"tag": "v94.0.0",
"kind": "major",
"published_at": "2024-02-28T11:43:10Z"
},
{
"tag": "v93.0.0",
"kind": "major",
"published_at": "2024-01-25T11:07:44Z"
},
{
"tag": "v92.1.0",
"kind": "minor",
"published_at": "2024-01-11T14:33:20Z"
},
{
"tag": "v92.0.0",
"kind": "major",
"published_at": "2023-12-15T11:11:58Z"
},
{
"tag": "v91.1.0",
"kind": "minor",
"published_at": "2023-09-14T09:53:50Z"
},
{
"tag": "v91.0.0",
"kind": "major",
"published_at": "2023-09-11T13:43:34Z"
},
{
"tag": "v90.0.0",
"kind": "major",
"published_at": "2023-07-31T14:19:17Z"
},
{
"tag": "v89.0.0",
"kind": "major",
"published_at": "2023-07-19T15:11:42Z"
},
{
"tag": "v88.2.0",
"kind": "minor",
"published_at": "2023-06-06T11:26:47Z"
},
{
"tag": "v88.1.0",
"kind": "minor",
"published_at": "2023-05-30T10:07:21Z"
},
{
"tag": "v88.0.0",
"kind": "major",
"published_at": "2023-05-23T14:05:13Z"
},
{
"tag": "v87.1.0",
"kind": "minor",
"published_at": "2023-05-10T08:48:22Z"
},
{
"tag": "v87.0.0",
"kind": "major",
"published_at": "2023-03-29T13:25:14Z"
},
{
"tag": "v86.0.0",
"kind": "major",
"published_at": "2023-02-20T15:31:01Z"
},
{
"tag": "v85.0.1",
"kind": "patch",
"published_at": "2023-01-30T12:33:41Z"
},
{
"tag": "v85.0.0",
"kind": "major",
"published_at": "2022-12-05T10:29:58Z"
},
{
"tag": "v84.0.0",
"kind": "major",
"published_at": "2022-10-21T13:33:17Z"
},
{
"tag": "v83.0.0",
"kind": "major",
"published_at": "2022-10-03T16:00:34Z"
},
{
"tag": "v82.0.0",
"kind": "major",
"published_at": "2022-09-12T15:10:22Z"
},
{
"tag": "v81.0.4",
"kind": "patch",
"published_at": "2022-08-03T13:10:27Z"
},
{
"tag": "v81.0.3",
"kind": "patch",
"published_at": "2022-08-01T14:05:47Z"
},
{
"tag": "v81.0.2",
"kind": "patch",
"published_at": "2022-07-26T14:37:57Z"
},
{
"tag": "v81.0.1",
"kind": "patch",
"published_at": "2022-07-25T12:11:44Z"
},
{
"tag": "v81.0.0",
"kind": "major",
"published_at": "2022-07-12T13:44:12Z"
},
{
"tag": "v80.0.1",
"kind": "patch",
"published_at": "2022-06-29T12:05:49Z"
},
{
"tag": "v80.0.0",
"kind": "major",
"published_at": "2022-06-21T12:17:12Z"
},
{
"tag": "v79.2.0",
"kind": "minor",
"published_at": "2022-05-24T08:55:46Z"
},
{
"tag": "v79.1.2",
"kind": "patch",
"published_at": "2022-04-06T16:20:02Z"
},
{
"tag": "v79.1.1",
"kind": "patch",
"published_at": "2022-03-29T09:04:08Z"
},
{
"tag": "v79.1.0",
"kind": "minor",
"published_at": "2022-03-08T16:29:55Z"
},
{
"tag": "v79.0.0",
"kind": "major",
"published_at": "2022-01-25T15:39:29Z"
},
{
"tag": "v78.1.0",
"kind": "minor",
"published_at": "2022-01-19T16:29:21Z"
},
{
"tag": "v78.0.0",
"kind": "major",
"published_at": "2022-01-18T17:29:40Z"
},
{
"tag": "v77.1.0",
"kind": "minor",
"published_at": "2022-01-18T14:40:19Z"
},
{
"tag": "v77.0.0",
"kind": "major",
"published_at": "2021-12-10T10:53:32Z"
},
{
"tag": "v76.0.0",
"kind": "major",
"published_at": "2021-12-07T16:30:37Z"
},
{
"tag": "v75.3.0",
"kind": "minor",
"published_at": "2021-11-03T13:09:31Z"
},
{
"tag": "v75.2.0",
"kind": "minor",
"published_at": "2021-10-15T08:29:27Z"
},
{
"tag": "v75.1.0",
"kind": "minor",
"published_at": "2021-10-14T13:56:53Z"
},
{
"tag": "v75.0.0",
"kind": "major",
"published_at": "2021-09-28T16:20:58Z"
},
{
"tag": "v74.0.0",
"kind": "major",
"published_at": "2021-09-22T16:15:47Z"
},
{
"tag": "v73.1.0",
"kind": "minor",
"published_at": "2021-09-08T10:08:45Z"
},
{
"tag": "v73.0.0",
"kind": "major",
"published_at": "2021-08-26T10:27:03Z"
},
{
"tag": "v72.1.0",
"kind": "minor",
"published_at": "2021-07-27T14:06:16Z"
},
{
"tag": "v72.0.0",
"kind": "major",
"published_at": "2021-07-13T15:18:17Z"
},
{
"tag": "v71.9.0",
"kind": "minor",
"published_at": "2021-07-06T12:09:05Z"
},
{
"tag": "v71.8.0",
"kind": "minor",
"published_at": "2021-07-02T11:11:36Z"
},
{
"tag": "v71.7.0",
"kind": "minor",
"published_at": "2021-06-29T14:42:20Z"
},
{
"tag": "v71.6.0",
"kind": "minor",
"published_at": "2021-06-23T14:27:48Z"
},
{
"tag": "v71.5.0",
"kind": "minor",
"published_at": "2021-06-18T09:21:03Z"
},
{
"tag": "v71.4.0",
"kind": "minor",
"published_at": "2021-06-10T13:28:58Z"
},
{
"tag": "v71.3.0",
"kind": "minor",
"published_at": "2021-06-07T15:17:23Z"
},
{
"tag": "v71.2.0",
"kind": "minor",
"published_at": "2021-05-25T10:23:19Z"
},
{
"tag": "v71.1.0",
"kind": "minor",
"published_at": "2021-05-06T13:50:04Z"
},
{
"tag": "v71.0.0",
"kind": "major",
"published_at": "2021-03-22T13:50:28Z"
},
{
"tag": "v70.0.0",
"kind": "major",
"published_at": "2021-03-15T10:15:50Z"
},
{
"tag": "v69.3.0",
"kind": "minor",
"published_at": "2021-01-25T13:26:11Z"
},
{
"tag": "v69.2.0",
"kind": "minor",
"published_at": "2021-01-20T13:57:59Z"
},
{
"tag": "v69.1.0",
"kind": "minor",
"published_at": "2021-01-19T14:20:06Z"
},
{
"tag": "v69.0.0",
"kind": "major",
"published_at": "2021-01-18T13:42:42Z"
},
{
"tag": "v68.2.0",
"kind": "minor",
"published_at": "2021-01-06T12:59:15Z"
},
{
"tag": "v68.1.0",
"kind": "minor",
"published_at": "2021-01-05T15:33:41Z"
},
{
"tag": "v68.0.0",
"kind": "major",
"published_at": "2020-12-18T09:18:33Z"
},
{
"tag": "v67.2.1",
"kind": "patch",
"published_at": "2020-12-10T09:19:11Z"
}
],
"recent_commits": [
{
"oid": "d9d389c7ea5eebdb5c6c722245da7749a75de375",
"body": "Release 103.4.0",
"is_bot": false,
"headline": "Merge pull request #1412 from alphagov/release-104.4.0",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-27T10:04:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8de05691efede1b40ca7d07beebde7285ac78efc",
"body": null,
"is_bot": false,
"headline": "Release 103.4.0",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-27T09:51:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62394c927f371eb15e157e8df6441902681ad412",
"body": "Improve RFC-192 validator method",
"is_bot": false,
"headline": "Merge pull request #1411 from alphagov/rfc-192-adjust-validator",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-27T09:47:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e8ebb927c4e75253a08ccb23655553e65373114",
"body": "Co-authored-by: Bruce Bolt <6329861+brucebolt@users.noreply.github.com>",
"is_bot": false,
"headline": "Update test/validators/base_path_validator_test.rb",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-27T08:25:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "133988b48b976d36f96951db4f525cbe1ffa2a71",
"body": "- Remove \"Path\" from the front of all error messages - unnecessary because context\n is provided by the error key\n- We're using a mixture of must/cannot/contains, adjust that all to must/must not\n- Although it probably isn't important, 512 bytes and 512 characters might not\n be the same, so at least keep the language correct.",
"is_bot": false,
"headline": "Standardise language in error messages",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T18:48:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7cb74321c59e27bb16d7f68df52c80e68f08a4b",
"body": "- The primary user of errors is going to be publishing-api, secondary users the\n publishing apps. So update the errors to return codes similar to the ones that\n publishing-api returns at the moment (base_path_invalid and path_too_long).\n- At some future time we might make these more varied, but these two are\n being returned by publishing-api now, so returning them will help keep\n it compatible.",
"is_bot": false,
"headline": "Return hash of errors with codes",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:39:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7371e7e18f76cae38718534a8891d631aa05a67a",
"body": "- We weren't covering the nil path, and adding the test showed up that some\n of the error tests rely on the base_path not being nil (okay in the valid? method\n where the ||'s shortcut returning false, but we need to manually shortcut\n in the errors method.",
"is_bot": false,
"headline": "Improve nil handling",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:33:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "139c80e28a0921b87f74ae55a53d489f011d2846",
"body": "- This regex was actually testing the structure more thoroughly than it needs\n to to detect invalid_chars? Now that we're explicitly testing if the path is\n a single / (and we're testing that there are no runs of // .. and the path doesn't\n end in a .) we can simplify this down to just testing that the path is entirely\n made of allowed characters (in any order, because other tests are checking\n that).",
"is_bot": false,
"headline": "Simplify invalid_chars? regex",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:32:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ddb4785c5b72681e1e05f0a3fcff719438e264c6",
"body": "- We're implicitly testing this in the invalid_chars? method, but that's actually\n not doing what it says (it's actually testing both chars _and_ structure of the\n path), so break out an explicit test here so we can simplify invalid_chars? in\n the next commit.",
"is_bot": false,
"headline": "Explicitly test for no leading slash.",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:27:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e3f06e5a98c4c68fcf4a0427137f8300ff29912",
"body": "- The 511 figure came from a misreading of the existing publishing-api regex,\n which is 511 chars _plus_ the leading slash. The RFC has now been updated,\n we adjust here to 512 because it's more recognisable.",
"is_bot": false,
"headline": "Update max base_path size from 511 chars to 512",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:22:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad33e42872399ac229e2b1d34e20bea53bafcd06",
"body": "- It's important we don't miss any branches in these tests, and this will help.",
"is_bot": false,
"headline": "Turn on branch coverage report",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T16:16:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "689b03726ad877b907b8e30bb146b124e9ed543c",
"body": "…2ca4\n\nUpdate simplecov requirement from ~> 0.21 to ~> 1.0 in the test group",
"is_bot": false,
"headline": "Merge pull request #1410 from alphagov/dependabot/bundler/test-eb6996…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-07-21T12:08:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcda533bbd0e7b9818d3836aed891c86218f1fd5",
"body": "…ons/checkout-7.0.1\n\nBump actions/checkout from 7.0.0 to 7.0.1",
"is_bot": false,
"headline": "Merge pull request #1408 from alphagov/dependabot/github_actions/acti…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-07-21T11:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82c7b08f0c0de35bf9686bf40db1ddbd3213acb6",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb9\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 7.0.0 to 7.0.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T11:18:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "da43243d6b8725edf72fa8ed019e857726fd1208",
"body": "…/setup-ruby-1.319.0\n\nBump ruby/setup-ruby from 1.316.0 to 1.319.0",
"is_bot": false,
"headline": "Merge pull request #1409 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-07-21T11:16:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ab824157ecfb78b9a935bf13e9ec1a4c1672526",
"body": "Add RFC-192 compliant base path validator",
"is_bot": false,
"headline": "Merge pull request #1406 from alphagov/rfc-192-simplify-base-paths",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-21T08:09:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d29bcf9da4d3736050dba64f32aa31425dbe941a",
"body": "Updates the requirements on [simplecov](https://github.com/simplecov-ruby/simplecov) to permit the latest version.\n\nUpdates `simplecov` to 1.0.1\n- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)\n- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)\n-\n[…]\n-\nupdated-dependencies:\n- dependency-name: simplecov\n dependency-version: 1.0.1\n dependency-type: direct:development\n dependency-group: test\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update simplecov requirement from ~> 0.21 to ~> 1.0 in the test group",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T07:03:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "242b3bc4855181940edcc0668bd57d7021f25adc",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.316.0 to 1.319.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/d45b1a4e94b71acab930e56e\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.319.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.316.0 to 1.319.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T07:03:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "776ccfdca12cd0c6ed22c613203594d14d7ebcbc",
"body": "- Implements validation based of the suggestions in RFC-192\n (https://github.com/alphagov/govuk-rfcs/pull/192)\n- allowed paths are 511 chars or shorter\n- they contain only lowercase letters and numbers, periods, forward slashes and dashes (minus signs)\n- they do not contain runs of forward slashes or periods\n- they do not end in a period",
"is_bot": false,
"headline": "Add base_path validator",
"author_name": "Keith Lawrence",
"author_login": "KludgeKML",
"committed_at": "2026-07-20T15:15:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89dfee963bc1f77f18c55b26fcfc1413cee297be",
"body": "…/setup-ruby-1.316.0\n\nBump ruby/setup-ruby from 1.314.0 to 1.316.0",
"is_bot": false,
"headline": "Merge pull request #1407 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-07-07T12:35:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "236a458e54c626a469b4d04af7c5d3a4f6d48ce7",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.314.0 to 1.316.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/9eb537ca036ebaed86729dcb\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.316.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.314.0 to 1.316.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-07T07:02:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d0f81676baa63fd548a16707d8e6a1eed00d4b1e",
"body": "…ons/checkout-7.0.0\n\nBump actions/checkout from 6.0.3 to 7.0.0",
"is_bot": false,
"headline": "Merge pull request #1405 from alphagov/dependabot/github_actions/acti…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-06-23T11:29:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9413940685ce5122167b34f82877bdd2e1ca7fc2",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b43\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6.0.3 to 7.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T11:24:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "55f020532524c61b3179a46044f61ebb710df7ba",
"body": "…/setup-ruby-1.314.0\n\nBump ruby/setup-ruby from 1.313.0 to 1.314.0",
"is_bot": false,
"headline": "Merge pull request #1404 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Duncan Garmonsway",
"author_login": "nacnudus",
"committed_at": "2026-06-23T11:22:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da9115f588c0b92d6eb7780cd2c23f9a0f50416f",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.313.0 to 1.314.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/89f90524b88a01fe6e0b7322\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.314.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.313.0 to 1.314.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T07:02:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "342ce60fc37d5de76367136213d0f65455a3670c",
"body": "…rs-test\n\nUpdate search autocomplete tests",
"is_bot": false,
"headline": "Merge pull request #1402 from alphagov/SCH-2146-Update-GDS-API-adapte…",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-06-19T12:49:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "524d54f277ceba9fcefb82eda0ab126cafadf97a",
"body": "…/setup-ruby-1.313.0\n\nBump ruby/setup-ruby from 1.310.0 to 1.313.0",
"is_bot": false,
"headline": "Merge pull request #1403 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-06-16T15:02:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c131eee2ec0c3e806d8ef3712ad7034ba17e722e",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.310.0 to 1.313.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/afeafc3d1ab54a631816aba4\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.313.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.310.0 to 1.313.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-16T07:03:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "791312fca5800c1c661250270d25250f7011009f",
"body": "We no longer raise internal errors in search-api-v2 if GCP times out or\nitself raises an internal error:\nhttps://github.com/alphagov/search-api-v2/pull/677",
"is_bot": false,
"headline": "Update search autocomplete tests",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-06-12T16:15:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "017768c7a4637334321855a51c47b8a36385ae42",
"body": "…ons/checkout-6.0.3\n\nBump actions/checkout from 6.0.2 to 6.0.3",
"is_bot": false,
"headline": "Merge pull request #1400 from alphagov/dependabot/github_actions/acti…",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-06-09T10:41:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c2df6f015ee404866592bdcb9f12dd1c3ce1eaf",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n dependency-version: 6.0.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6.0.2 to 6.0.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T07:03:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cd97e2d345aa130cfeabaed1712bfedfc00a77dd",
"body": "…/setup-ruby-1.310.0\n\nBump ruby/setup-ruby from 1.308.0 to 1.310.0",
"is_bot": false,
"headline": "Merge pull request #1399 from alphagov/dependabot/github_actions/ruby…",
"author_name": "callumknights",
"author_login": "callumknights",
"committed_at": "2026-06-03T11:25:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b44e4a4e0f53d21eef8a90778091b09f5a6c7b55",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.308.0 to 1.310.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/97ecb7b512899eb71ab1bf23\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.310.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.308.0 to 1.310.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-03T07:06:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "38a70d117651633e875a3172c0d7ef7db93c1fa5",
"body": "[PP-7718] Pin SHAs for third-party actions",
"is_bot": false,
"headline": "Merge pull request #1398 from alphagov/pin_gha_actions_to_hashes",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-05-20T16:34:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5af2373416153757241409beaf8a27a15598db1f",
"body": "As per policy: https://docs.publishing.service.gov.uk/manual/test-and-build-a-project-with-github-actions.html#pin-untrusted-github-actions-to-a-commit-sha",
"is_bot": false,
"headline": "Pins non-alphagov actions to a commit SHA",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-05-20T16:21:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6464203ff965c399c998affec606731144a3b2fc",
"body": "…/setup-ruby-1.308.0\n\nBump ruby/setup-ruby from 1.306.0 to 1.308.0",
"is_bot": false,
"headline": "Merge pull request #1397 from alphagov/dependabot/github_actions/ruby…",
"author_name": "callumknights",
"author_login": "callumknights",
"committed_at": "2026-05-20T15:28:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d152089ac60975a8e7bf1b54c4e7dc8f634df852",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.306.0 to 1.308.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/v1.306.0...v1.308.0)\n\n--\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.308.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1.306.0 to 1.308.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-19T19:29:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "97dba5f9e1c8017542f6fd0a08641755216dff4e",
"body": "[PP-7606] Update pact tests for Publishing API error responses",
"is_bot": false,
"headline": "Merge pull request #1395 from alphagov/publishing-api-error-codes",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-05-19T14:20:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ecca98e2e56963d468a1eb81bdc5319294e3bf2",
"body": "Update team name in PR template",
"is_bot": false,
"headline": "Merge pull request #1396 from alphagov/update-team-name-pr-template",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-05-19T09:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d270f4750b7d8337be04f11c4ad92d3c90ffcc8",
"body": "The team name has changed, so updating the PR template to reflect this.",
"is_bot": false,
"headline": "Update team name in PR template",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-05-19T07:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18f661b8429a05ec7f847783a6af774566fcbabf",
"body": "Publishing API will includes error_code in its error responses. It is possible\nthat multiple validation fail simultaneously. In such cases, the top-level\nerror_code would be multiple_validation_errors so the `fields` property is\nexpanded to provide detailed information about each individual failure,\n[…]\n field represented as a hash containing both a human-readable error and a\nmachine-readable code.\n\nThe test is updated to expect this new structure, ensuring it accurately\nreflects the API’s behaviour.",
"is_bot": false,
"headline": "Update pact tests for Publishing API error responses",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-05-15T15:47:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "066477582a9b5c8081c9b1deb552ebda18d6c9e5",
"body": "…/setup-ruby-1.306.0\n\nBump ruby/setup-ruby from 1 to 1.306.0",
"is_bot": false,
"headline": "Merge pull request #1394 from alphagov/dependabot/github_actions/ruby…",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-05-13T10:31:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e89bc7bbd6b849096197ef2f4150ef9c46e5579",
"body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1 to 1.306.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/v1...v1.306.0)\n\n---\nupdated-de\n[…]\n dependency-name: ruby/setup-ruby\n dependency-version: 1.306.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ruby/setup-ruby from 1 to 1.306.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-12T11:53:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2f108be76dcdee4629c30b691c9c2bbdfb2a353c",
"body": "…-6.0\n\nUpdate minitest requirement from ~> 5.19 to ~> 6.0",
"is_bot": false,
"headline": "Merge pull request #1374 from alphagov/dependabot/bundler/minitest-tw…",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-04-28T10:24:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ac4682f53e9ebd354cdb8126a7df5c6a65f5367",
"body": "[PP-7588] Update Pact to reflect new base path schema definition",
"is_bot": false,
"headline": "Merge pull request #1392 from alphagov/update-base-path-pact",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-20T11:37:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c91c639fb73e1437904498c002edb5e7de518030",
"body": null,
"is_bot": false,
"headline": "Add missing PR links",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-20T11:26:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "768b0eca7a1879468386c75579668f2c9013633e",
"body": null,
"is_bot": false,
"headline": "Release 103.3.1",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-20T11:24:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f250317b242b0fb6668a218a27f7717aa216851b",
"body": "The absolute path definition used by base paths is being updated to have\nmultiple requirements via allOf. This test needs updating to reflect\nthat change",
"is_bot": false,
"headline": "Update Pact test for new path schema definition",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-20T10:24:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4396b7e68abc3a295c4f5cbe73e1c772b29b6e20",
"body": "…uk-eq-5.2.1\n\nUpdate rubocop-govuk requirement from = 5.2.0 to = 5.2.1",
"is_bot": false,
"headline": "Merge pull request #1391 from alphagov/dependabot/bundler/rubocop-gov…",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-17T12:29:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "201b958ba26a309bfab7271563b978ab7494826e",
"body": null,
"is_bot": false,
"headline": "Autocorrect rubocop offences",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-17T11:40:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb2b28bbe6ff33a61e555fbec65bad36cd8ff92e",
"body": "…o-use-govuk_test-index\n\nUpdate search index",
"is_bot": false,
"headline": "Merge pull request #1389 from alphagov/SCH-1987-Refactor-pact-tests-t…",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-04-17T10:03:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "650b9eb72bde5e7863ea62ad815296b5b22dbd8c",
"body": "[PP-7685] Update Dependabot configuration",
"is_bot": false,
"headline": "Merge pull request #1390 from alphagov/configure-dependabot",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T17:36:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e39feefa1ae51ca73c5eec7658da989364e13c7",
"body": "Updates the requirements on [rubocop-govuk](https://github.com/alphagov/rubocop-govuk) to permit the latest version.\n- [Changelog](https://github.com/alphagov/rubocop-govuk/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/alphagov/rubocop-govuk/compare/v5.2.0...v5.2.1)\n\n---\nupdated-dependencies:\n- dependency-name: rubocop-govuk\n dependency-version: 5.2.1\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update rubocop-govuk requirement from = 5.2.0 to = 5.2.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-16T17:23:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f29f2aef4737cf87057433eae83298e2838270a8",
"body": "Configure Dependabot to only open pull requests for direct dependencies,\nreducing noise from transitive updates and keeping changes more relevant and\neasier to review.\n\nApproach recommended in GOV.UK Developer Docs.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#dependency-type-allow",
"is_bot": false,
"headline": "Restrict Dependabot updates to direct dependencies",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b16fe511365f5693c20f057027af1a4e80ed76c6",
"body": "We increase the Dependabot open PR limit to 25 to accommodate our weekly\nschedule and grouped updates, ensuring multiple batches can be raised and\nreviewed without being artificially capped. This helps avoid delays while still\nkeeping changes manageable alongside the cooldown and grouping strategy.\n\n[…]\narate internal limit of ten open pull requests which cannot be changed.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#open-pull-requests-limit-",
"is_bot": false,
"headline": "Increase Dependabot Open PR limit to 25",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c55d3f2f2f8b873323b2bdf04c521792c4f3165c",
"body": "We schedule updates weekly on Tuesdays at 7:00am UTC to balance staying current\nwith a manageable review workload. A monthly cadence would be too infrequent\nfor a single person on the daily rota, and Tuesdays avoid common non-working\ndays in our team (Mondays and Fridays at the time).\n\nThe `timezone\n[…]\nlphagov/govuk-dependabot-merger/blob/main/.github/workflows/merge-dependabot-prs.yml#L5\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#schedule-",
"is_bot": false,
"headline": "Change Dependabot schedule to weekly",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b2a1dd83998acd9e828195ad72c8d2aec8461d79",
"body": "Groups Bundler updates to reduce noise and make reviews more focused by\nbatching related dependencies together. Test libraries (e.g. RSpec, SimpleCov)\nare grouped so they can be reviewed and updated in context. This approach helps\nstreamline pull requests, making them less disruptive to the team’s d\n[…]\nork. We’re only using one linter for ruby so there’s no point in grouping at\nthe moment.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#groups--",
"is_bot": false,
"headline": "Group Dependabot PRs",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1e858a41b7f2504632c6654b2f249e5783bfa48c",
"body": "This gives the community time to flag compromised or broken releases before\nupdates are applied, helping us avoid pulling in unstable or unsafe\ndependencies. Sets the values according to GOV.UK Developer docs\nrecommendations: \n- 3 days for code dependencies\n- 7 days for infrastructure tooling (Terraform, Docker), as these changes tend\n to carry more risk.\n\nhttps://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown-",
"is_bot": false,
"headline": "Introduce Dependabot cooldown period",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7631d498b3bb9ccb186fd3fb204083a943675ca8",
"body": "For consistency with other repos. The quotes are not needed.",
"is_bot": false,
"headline": "Update Dependabot values format",
"author_name": "Aga Dufrat",
"author_login": "AgaDufrat",
"committed_at": "2026-04-16T16:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2ab503a89a6257a861f8eac41a2c92f386e62a0",
"body": "The government index is being retired.\nThis change isn't strictly necessary for the tests\nto pass, but might make them easier to understand\ngoing forward.",
"is_bot": false,
"headline": "Update search index",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-04-16T09:22:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "842d89f8071c6177891219f0ab58d4d546c1b967",
"body": "[PP-7664] Test against Ruby 4.0",
"is_bot": false,
"headline": "Merge pull request #1388 from alphagov/support-ruby-4",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-09T14:01:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e58ede88475cea6dcc5a7041344fce43f95c0b27",
"body": null,
"is_bot": false,
"headline": "Release 103.3.0",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-09T13:57:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f04192efa4af369a56427ca9ce01febb9c28d40",
"body": "rdoc is no longer a default gem in 4.0 so we need to include it in the\ngemspec. I believe rdoc supports the documentation at\nhttps://www.rubydoc.info/gems/gds-api-adapters/52.3.0. This is only\nexplicitly used via the Rakefile, so since Rake is a development\ndependency, I've made this the same\n\nOutpu\n[…]\nrdoc, which is not part of the default gems since Ruby 4.0.0.\nYou can add rdoc to your Gemfile or gemspec to fix this error.\nrake aborted!\nLoadError: cannot load such file -- rdoc/task (LoadError)\n```",
"is_bot": false,
"headline": "Test against Ruby 4.0",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-09T13:56:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "868114328195c51bac93a059d1421cb765fa6297",
"body": "[PP-7274] Drop support for Ruby 3.2",
"is_bot": false,
"headline": "Merge pull request #1387 from alphagov/drop-ruby-3-2",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-04-01T09:05:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcfbf54412fd6e9cf4fc43317dc024fee3dda671",
"body": null,
"is_bot": false,
"headline": "Release 103.2.0",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-03-31T11:49:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6c130b6c4e717ab5bbfb1a24404eafe85877e96",
"body": "This will be end of life from 1 April 2026",
"is_bot": false,
"headline": "Drop support for Ruby 3.2",
"author_name": "Ynda Jas",
"author_login": "yndajas",
"committed_at": "2026-03-31T11:14:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c31e026aeaf3adab1ee17892fa5ea299c04a70b5",
"body": "[PP-7566] Require `plek` in Publishing API test helpers",
"is_bot": false,
"headline": "Merge pull request #1386 from alphagov/require-plek-publishing-api",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-03-30T16:03:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d3b12ba775ba5e5ce39955f27bd96730f04c73b",
"body": null,
"is_bot": false,
"headline": "Release version 130.1.1",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-03-30T15:58:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ec65d640df9678f4d66f2868dd2ff94fab32bd5",
"body": "`Plek` is used in the Publishing API test helpers to define some\nconstants, but has not been required.\n\nThis has never been an issue before, as all consumers of this helper\nalready required `plek` in their tests. However the pact tests in the\n`frontend` app do not.\n\nTherefore requiring `plek` to ensure it is always available.",
"is_bot": false,
"headline": "Require `plek` in Publishing API test helpers",
"author_name": "Bruce Bolt",
"author_login": "brucebolt",
"committed_at": "2026-03-30T15:54:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "706692b4a11b48ee8db37308e38e1bee6c5bdb60",
"body": "[PNP-9879] Update example to use Frontend",
"is_bot": false,
"headline": "Merge pull request #1385 from alphagov/update-government-frontend",
"author_name": "deborahchua",
"author_login": "deborahchua",
"committed_at": "2026-03-24T17:03:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a179287f3c96d2365647afd84f8babc65c3324e",
"body": "We have retired government-frontend.",
"is_bot": false,
"headline": "Update example to use Frontend",
"author_name": "deborahchua",
"author_login": "deborahchua",
"committed_at": "2026-03-24T14:59:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d4b2ab6969f333eb1cab94ff8e93d7ff8aeebf1",
"body": "Add timeout helper",
"is_bot": false,
"headline": "Merge pull request #1384 from alphagov/add-timeout-helper",
"author_name": "callumknights",
"author_login": "callumknights",
"committed_at": "2026-03-10T08:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "072714da862ca06d7ecdd5de8c2e03feb7ac7231",
"body": null,
"is_bot": false,
"headline": "Release version 103.1.0",
"author_name": "Callum Knights",
"author_login": "callumknights",
"committed_at": "2026-03-09T18:05:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26d6205f0bba44813a825366e76c948a9e141d0e",
"body": "Useful for testing graphql work",
"is_bot": false,
"headline": "Add timeout publishing API test helper",
"author_name": "Callum Knights",
"author_login": "callumknights",
"committed_at": "2026-03-09T18:05:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47b605ed0db91faa3e2fd1a2f1d1ffc21ee31f28",
"body": "…ons/upload-artifact-7\n\nBump actions/upload-artifact from 6 to 7",
"is_bot": false,
"headline": "Merge pull request #1383 from alphagov/dependabot/github_actions/acti…",
"author_name": "callumknights",
"author_login": "callumknights",
"committed_at": "2026-03-02T11:25:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "750f8b4c5ed17e928301b3f41688ed9ca8e48bb8",
"body": "[SCH-1750] Remove unused #batch_search endpoint",
"is_bot": false,
"headline": "Merge pull request #1381 from alphagov/remove-batch-search-adapter",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-03-02T09:50:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f98203141d6583fb238caee67e61f268b5f24f2",
"body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/upload-artifact from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-27T17:22:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a5e2d988692b688e2e5546af7401eb404f297d9",
"body": "Removal of #batch_search adapter is a breaking change.",
"is_bot": false,
"headline": "Bump version to 103.0.0",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-19T14:20:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c32caf5bf58261e8e604c1e423ae98d753de15a4",
"body": "Removing unused method as part of tidying up unused Search API code.",
"is_bot": false,
"headline": "Remove unused #batch_search endpoint",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-19T14:20:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9542c80c4a004db1ab37274f8f6f4a4bf90a6e86",
"body": "[SCH-1679] Add search-api pacts to ci",
"is_bot": false,
"headline": "Merge pull request #1382 from alphagov/add-search-api-pacts-to-ci",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-19T14:05:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea3ace6a3f34792974d7a1ab10bdd8457e5220a1",
"body": "…-enum\n\n[SCH-1679] Add pact tests for Search API #search_enum",
"is_bot": false,
"headline": "Merge pull request #1380 from alphagov/search-api-pact-testing-search…",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-17T14:02:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77feffa65c15aae46aa0290c995dcf45fd2f4b9a",
"body": "#search_enum allows for the /search endpoint to be called page by page. It uses the /search endpoint, and needs params `start` and `count` to be allowed.",
"is_bot": false,
"headline": "Add pact tests for #search_enum",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-16T13:33:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8ff5b5bb1d2d849fcafe125cc1ae6c8922d684c",
"body": "Now that we've added the necessary pact tests for search-api and tested them locally against the published pacts we can add the pact tests to the CI pipeline.\nThere is a companion PR to add the pact-verify workflow to the search-api ci workflow, which should be merged before this PR.",
"is_bot": false,
"headline": "Add search-api pacts to ci",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-12T12:20:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4de251f39cca49a06bbd039c847856b1763e2c65",
"body": "Currently these tests aren't run as part of `bundle exec rake`, as the filename does not have the format `\"test/**/*_test.rb\"`. Changing the filename will mean that the tests are run as part of ci",
"is_bot": false,
"headline": "Rename from search.rb to search_test.rb",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-09T11:44:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bfa5aaa0722ba209897b4ac78af2235fa0ea74d",
"body": "…-endpoint-2\n\n[SCH-1679] Add pact tests for #search",
"is_bot": false,
"headline": "Merge pull request #1379 from alphagov/search-api-pact-testing-search…",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-09T09:13:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad6ce1e1f9b568f84fad78de2152112eb86b73ef",
"body": null,
"is_bot": false,
"headline": "Add pact test for search with no keyword included",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-06T16:35:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b7390da6d658490319d1fe04b640c84c4caa81b",
"body": "This is a representative test of one of the types of user input that would raise a 422 error.",
"is_bot": false,
"headline": "Add pact tests for search with invalid ordering field.",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-02-06T16:35:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ddefc2f7d00b93c204076f11672b934cb42219c",
"body": "[SCH-1679] Contract tests with Search API",
"is_bot": false,
"headline": "Merge pull request #1375 from alphagov/search-api-pact-testing",
"author_name": "Emma",
"author_login": "emmalowe",
"committed_at": "2026-01-30T10:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a869d3e8e3ead8b245f7b8aa77a72ca2525ce0a9",
"body": "We will need multiple pact tests for search, but this PR only adds the most straightforward one so that we can get the pact tests configured correctly.",
"is_bot": false,
"headline": "Add initial pact test",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-01-29T17:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57c215571238e349c90517a61a8f41bed06a02e9",
"body": "…uk-eq-5.2.0",
"is_bot": false,
"headline": "Merge pull request #1378 from alphagov/dependabot/bundler/rubocop-gov…",
"author_name": "GOV.UK Continuous Integration User",
"author_login": "govuk-ci",
"committed_at": "2026-01-28T08:49:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e45d4150fe21a1a5c1574dba4278db9c689ea84",
"body": "Updates the requirements on [rubocop-govuk](https://github.com/alphagov/rubocop-govuk) to permit the latest version.\n- [Changelog](https://github.com/alphagov/rubocop-govuk/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/alphagov/rubocop-govuk/compare/v5.1.20...v5.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: rubocop-govuk\n dependency-version: 5.2.0\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update rubocop-govuk requirement from = 5.1.20 to = 5.2.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-27T17:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b6d37112a594094501f32e5287da771168e3823",
"body": "[SCH-1704] Removed unused search-api adapters",
"is_bot": false,
"headline": "Merge pull request #1376 from alphagov/remove-unused-search-endpoints",
"author_name": "Jess Jones",
"author_login": "hannako",
"committed_at": "2026-01-27T11:34:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d15040f90077d5a912d045eb7287404ffdb519e",
"body": "Co-authored-by: Jos Koetsier <jos.koetsier@digital.cabinet-office.gov.uk>",
"is_bot": false,
"headline": "Bump version to 102.0.0",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-01-15T14:45:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca7e960c791ad3ba8fe125d0f056339c133cf821",
"body": "Deleting add_document, delete_document, get_content & delete_content and associated test helpers as they're no longer used.\n\nCo-authored-by: Jos Koetsier <jos.koetsier@digital.cabinet-office.gov.uk>",
"is_bot": false,
"headline": "Removed unused search-api adapters",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-01-15T14:35:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2aacab914ea582cd37e8248cd1d89f479193958d",
"body": null,
"is_bot": false,
"headline": "Declare new pact with Search API",
"author_name": "Lucy Stringer",
"author_login": "stringiest",
"committed_at": "2026-01-07T09:42:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9faabb2c29c95f5c7243267bf6ded3bb5777765",
"body": "Updates the requirements on [minitest](https://github.com/minitest/minitest) to permit the latest version.\n- [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc)\n- [Commits](https://github.com/minitest/minitest/compare/v5.19.0...v6.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: minitest\n dependency-version: 6.0.1\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update minitest requirement from ~> 5.19 to ~> 6.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-29T17:04:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9e44f94cbb5dea44a92b453d9b2156ce8119a79",
"body": "…emoved-version\n\nPact updates for removal of ?version= in GET content",
"is_bot": false,
"headline": "Merge pull request #1373 from alphagov/update-pacts-for-get-content-r…",
"author_name": "Richard Towers",
"author_login": null,
"committed_at": "2025-12-17T16:53:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "644126c16e12f66a67f03ffbf74fd6ee70ac558b",
"body": "Not sure if this is strictly needed to get the Pact tests updated, but\nseems like a new gem version is sensible in any case.",
"is_bot": false,
"headline": "Bump the version to 101.2.0",
"author_name": "Richard Towers",
"author_login": null,
"committed_at": "2025-12-17T16:20:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36d3be4efecf79868176aa4328ec87fac1432300",
"body": "We've replaced the version param with a content_store param.\n\nThis means it's no longer possible to request a superseded edition (so\nthat pact is removed).\n\nIt's still possible to request published content instead of draft (by\nquerying with content_store=live), or to request draft content\nspecifically (with content_store=draft).",
"is_bot": false,
"headline": "Pact updates for removal of ?version= in GET content",
"author_name": "Richard Towers",
"author_login": null,
"committed_at": "2025-12-17T15:23:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ac9b57fa121f980cd36bf0aeefae49e6c3139db",
"body": "[PP-7501] Simplify the get_live_content method",
"is_bot": false,
"headline": "Merge pull request #1372 from alphagov/simplify-get-live-content",
"author_name": "Richard Towers",
"author_login": null,
"committed_at": "2025-12-17T10:00:27Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 126,
"latest_release_at": "2026-07-27T10:04:44Z",
"latest_release_tag": "v103.4.0",
"releases_from_tags": true,
"days_since_last_push": 0,
"active_weeks_last_year": 32,
"days_since_latest_release": 0,
"mean_days_between_releases": 24.7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "gds-api-adapters",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "rubygems",
"matches_repo": true,
"registry_url": "https://rubygems.org/gems/gds-api-adapters",
"is_deprecated": false,
"latest_version": "103.4.0",
"repository_url": "http://github.com/alphagov/gds-api-adapters",
"versions_count": 589,
"total_downloads": 2174538,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2011-12-06T10:30:58.554000Z",
"latest_published_at": "2026-07-27T10:07:58.002000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 13,
"stars": 21,
"watchers": 88,
"fork_history": {
"days": [
{
"date": "2013-09-11",
"count": 1
},
{
"date": "2015-02-26",
"count": 1
},
{
"date": "2015-10-07",
"count": 1
},
{
"date": "2016-05-18",
"count": 1
},
{
"date": "2016-06-23",
"count": 1
},
{
"date": "2017-05-26",
"count": 1
},
{
"date": "2019-08-29",
"count": 1
},
{
"date": "2020-09-10",
"count": 1
},
{
"date": "2020-12-25",
"count": 1
},
{
"date": "2021-04-10",
"count": 1
},
{
"date": "2026-02-23",
"count": 1
}
],
"complete": true,
"collected": 11,
"total_forks": 13
},
"star_history": null,
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 40393,
"source_files_sampled": 123,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Gemfile"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 1,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 22,
"direct_affected_count": 0
},
"ecosystems": [
"rubygems"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "addressable",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "byebug",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "climate_control",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "govuk_schemas",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "link_header",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "minitest",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "minitest-around",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "mocha",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "null_logger",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pact",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pact-consumer-minitest",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pact-mock_service",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pact_broker-client",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "plek",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rack",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rack-test",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rake",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rdoc",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rest-client",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop-govuk",
"direct": false,
"version": "5.2.1",
"ecosystem": "rubygems"
},
{
"name": "simplecov",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "timecop",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "webmock",
"direct": false,
"version": null,
"ecosystem": "rubygems"
}
],
"collected": true,
"truncated": false,
"total_count": 23,
"direct_count": 0,
"indirect_count": 23
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 1301,
"open_issues": 1,
"closed_ratio": 0.9,
"closed_issues": 9,
"closed_unmerged_prs": 100
},
"bus_factor": 13,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "alext",
"commits": 195,
"avatar_url": "https://avatars.githubusercontent.com/u/5560?v=4"
},
{
"type": "User",
"login": "kevindew",
"commits": 177,
"avatar_url": "https://avatars.githubusercontent.com/u/282717?v=4"
},
{
"type": "User",
"login": "barrucadu",
"commits": 156,
"avatar_url": "https://avatars.githubusercontent.com/u/75235?v=4"
},
{
"type": "User",
"login": "tijmenb",
"commits": 142,
"avatar_url": "https://avatars.githubusercontent.com/u/233676?v=4"
},
{
"type": "User",
"login": "elliotcm",
"commits": 137,
"avatar_url": "https://avatars.githubusercontent.com/u/109225?v=4"
},
{
"type": "User",
"login": "JordanHatch",
"commits": 121,
"avatar_url": "https://avatars.githubusercontent.com/u/71922?v=4"
},
{
"type": "User",
"login": "thomasleese",
"commits": 117,
"avatar_url": "https://avatars.githubusercontent.com/u/510498?v=4"
},
{
"type": "User",
"login": "dhwthompson",
"commits": 111,
"avatar_url": "https://avatars.githubusercontent.com/u/32775?v=4"
},
{
"type": "User",
"login": "jamiecobbett",
"commits": 109,
"avatar_url": "https://avatars.githubusercontent.com/u/93739?v=4"
},
{
"type": "User",
"login": "brucebolt",
"commits": 104,
"avatar_url": "https://avatars.githubusercontent.com/u/6329861?v=4"
}
],
"contributors_sampled": 99,
"top_contributor_share": 0.062
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"actionlint.yml",
"autorelease.yml",
"ci.yml",
"publish.yml"
],
"has_docs_dir": false,
"linter_configs": [
".rubocop.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 8,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 39 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 2,
"reason": "dependency not pinned by hash detected -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d9d389c7ea5eebdb5c6c722245da7749a75de375",
"ran_at": "2026-07-27T10:14:45Z",
"aggregate_score": 7.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T10:08:05Z",
"oldest_open_prs": [
{
"number": 1401,
"created_at": "2026-06-12T14:51:35Z",
"last_comment_at": "2026-07-08T09:03:27Z",
"last_comment_author": "yndajas"
}
],
"last_merged_pr_at": "2026-07-27T10:04:44Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 722,
"created_at": "2017-07-20T17:01:45Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/alphagov/gds-api-adapters",
"host": "github.com",
"name": "gds-api-adapters",
"owner": "alphagov"
},
"metrics": {
"overall": {
"key": "overall",
"band": "exceptional",
"name": "Overall health",
"note": "The weighted overall 79 is calibrated to 93 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 79,
"calibrated": 93,
"calibration": "2026-08-02"
}
}
],
"value": 93,
"inputs": {
"security": 82,
"vitality": 87,
"community": 62,
"governance": 92,
"calibration": "2026-08-02",
"engineering": 76,
"ai_readiness": 44,
"weighted_overall_raw": 79
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 87,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 86,
"inputs": {
"commits_last_year": 126,
"human_commit_share": 0.85,
"days_since_last_push": 0,
"active_weeks_last_year": 32
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "32/52 weeks with commits",
"points": 22.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 32
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "126 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 126
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v103.4.0",
"releases_from_tags": true,
"days_since_latest_release": 0,
"mean_days_between_releases": 24.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~24.7 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 24.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 6,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 6 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 6
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 62,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "weak",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"forks": 13,
"stars": 21,
"watchers": 88,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "21 stars",
"points": 21.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 21
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "13 forks",
"points": 9,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 13
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "88 watchers",
"points": 10.8,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 88
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 82,
"inputs": {
"packages": [
"gds-api-adapters"
],
"dependents": null,
"ecosystems": "rubygems",
"total_downloads": 2174538,
"monthly_downloads": null
},
"components": [
{
"key": "total_downloads",
"name": "Total downloads",
"detail": "2,174,538 downloads all-time across rubygems",
"points": 65.9,
"status": "partial",
"details": [
{
"code": "downloads_total",
"params": {
"count": 2174538,
"ecosystems": "rubygems"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "excellent",
"name": "Sustainability & Governance",
"value": 92,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "exceptional",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"bus_factor": 13,
"contributors_sampled": 99,
"top_contributor_share": 0.062
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "13 contributor(s) cover half of all commits",
"points": 54,
"status": "met",
"details": [
{
"code": "bus_factor",
"params": {
"count": 13
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 6% of commits",
"points": 21.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 6
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "99 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 99
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 39 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "exceptional",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 93,
"inputs": {
"merged_prs": 1301,
"open_issues": 1,
"closed_issues": 9,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.9,
"closed_unmerged_prs": 100,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "90% of issues closed",
"points": 37.8,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 90
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1301/1401 decided PRs merged",
"points": 27.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1301,
"decided": 1401
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"followers": 1576,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "alphagov",
"public_repos": 1528,
"account_age_days": 5653
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,576 followers of alphagov",
"points": 23,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1576,
"login": "alphagov"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "1528 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 1528
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"gds-api-adapters"
],
"ecosystems": "rubygems",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on rubygems",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "rubygems"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "589 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 589
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".rubocop.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"govuk"
],
"has_wiki": false,
"homepage": "http://www.rubydoc.info/github/alphagov/gds-api-adapters",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://www.rubydoc.info/github/alphagov/gds-api-adapters",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "1 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 1
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "excellent",
"name": "Security",
"value": 82,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 78,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 7.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 39 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 1,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 1 resolved dependencies against OSV; 22 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 1
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 22
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 1,
"unassessed_packages": 22,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 1,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 44,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.765,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "65 of 85 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 65,
"sampled": 85
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.15
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".rubocop.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "15 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 15,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Ruby",
"largest_source_bytes": 40393,
"source_files_sampled": 123,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Ruby without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Ruby"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/123 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 123,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:rubygems",
"weight": 6
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-27T10:15:14.238713Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/alphagov/gds-api-adapters.svg",
"full_name": "alphagov/gds-api-adapters",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with alphagov/gds-api-adapters. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.3.1, schema v0.27.0 — full methodology · metrics wiki.
