Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-24 21:51 UTC

arajkumar / cluster-monitoring-operator

Manage the OpenShift monitoring stack

Go · JsonnetApache-2.0★ 1 star⑂ 0 forkssince Dec 2021forkView on GitHub ↗

arajkumar/cluster-monitoring-operator holds a health index of 26 out of 100, placing it in the Critical band. It scores highest on AI Readiness (68/100) and lowest on Community & Adoption (12/100). It was last updated 1514 days ago. 3 contributors account for most of its recent work.

26
overall / 100
Critical

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

26
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Abandonment Policy applies a 85% multiplier to weighted overall health.

Ownership

Arunprasad RajkumarPersonal account
70 followers128 public repossince Mar 2013@Timescale

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
Gogithub.com/openshift/cluster-monitoring-operatorpoints to another repo — not scoredv3.11.0+incompatible-62874 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

20Critical · 22% of overall
How it's scored
0/36Push recency — last push 1,514 days ago
0/36Commit cadence — 0/52 weeks with commits
0/18Commit volume — 0 commits in the last year
0/10OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Inputs used
commits_last_year0
human_commit_share0.96
days_since_last_push1,514
active_weeks_last_year0
How it's scored
16.2/27Ships releases — 6 version tags (no GitHub releases)
0/36Release recency — latest release 2,860 days ago
27/27Release cadence — a release every ~32.2 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count6
latest_release_tagv0.1.1
releases_from_tagsyes
days_since_latest_release2,860
mean_days_between_releases32.2
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

12Critical · 18% of overall
How it's scored
0/60Stars — 1 stars
0/25Forks — 0 forks
0/15Watchers — 0 watchers
Inputs used
forks0
stars1
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
0/22.5README
22.5/22.5License — recognized license (Apache-2.0)
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeno
has_licenseno
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

47At risk · 24% of overall
How it's scored
36/54Bus factor — 3 contributor(s) cover half of all commits
14.7/22.5Commit distribution — top contributor authored 35% of commits
13.5/13.5Contributor breadth — 95 contributors
10/10OpenSSF Scorecard: Contributors — project has 47 contributing companies or organizations
Inputs used
bus_factor3
contributors_sampled95
top_contributor_share0.346
How it's scored
0/46.8Issue resolution — no issues or no data
0/38.3PR acceptance — no decided pull requests or no data
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Inputs used
merged_prs0
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs0
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
13.3/25Owner reach — 70 followers of arajkumar
25/25Track record — 128 public repos, account ~13 yr old
Inputs used
followers70
owner_typeUser
is_verified
owner_loginarajkumar
public_repos128
account_age_days4,879
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.

Engineering Quality

Are baseline engineering and documentation practices in place?

45At risk · 20% of overall
How it's scored
0/24CI workflows
24/24Tests present
16/16Linter config — .golangci.yml
0/9.6Pre-commit hooks
6.4/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — no data
Inputs used
has_cino
has_testsyes
has_editorconfigyes
has_linter_configyes
has_precommit_configno
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.

Documentation

25Critical
How it's scored
0/30README
25/25Documentation directory
0/15Documentation / homepage site
0/10Repository description
0/10Topics
0/10Wiki
Inputs used
topics
has_wikino
homepage
has_readmeno
has_docs_diryes
has_descriptionno

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

18Critical · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — no data
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 47 contributing companies or organizations
0/10Dangerous-Workflow — no data
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
0/7.5Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5Packaging — no data
0.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — no data
0/7.5Vulnerabilities — 116 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated13
scorecard_versionv5.5.0
checks_inconclusive5
scorecard_aggregate1.8
Excluded from scoring (no data or not applicable): ci_tests, dangerous_workflow, packaging, signed_releases, token_permissions. Remaining weights renormalized.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

68Moderate · 0% of overall
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 77 of 96 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.802
agent_instruction_files
agent_instruction_max_bytes
How it's scored
18/18One-command bootstrap — Makefile, examples/example-app/Makefile, vendor/github.com/gogo/protobuf/gogoproto/Makefile, vendor/github.com/gogo/protobuf/proto/Makefile, vendor/github.com/gogo/protobuf/protoc-gen-gogo/descriptor/Makefile, vendor/github.com/jmespath/go-jmespath/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/opentracing/opentracing-go/Makefile, vendor/github.com/pkg/errors/Makefile, vendor/github.com/prometheus/common/sigv4/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/github.com/uber/jaeger-client-go/Makefile, vendor/go.uber.org/atomic/Makefile, vendor/go.uber.org/goleak/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile, vendor/sigs.k8s.io/kustomize/kyaml/openapi/Makefile
22/22Automated tests
11/11Lint / format config — .golangci.yml
11/11Static type checking — Go (statically typed)
10/10Reproducible environment — Dockerfile, lockfile
0/10Demonstrated agent practice — no agent-authored commits among the last 100
0/8Automated maintenance — no automated dependency updates observed
1/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1
Inputs used
has_nixno
has_testsyes
lockfilesgo.sum
has_dockerfileyes
typed_languageyes
bootstrap_filesMakefile, examples/example-app/Makefile, vendor/github.com/gogo/protobuf/gogoproto/Makefile, vendor/github.com/gogo/protobuf/proto/Makefile, vendor/github.com/gogo/protobuf/protoc-gen-gogo/descriptor/Makefile, vendor/github.com/jmespath/go-jmespath/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/opentracing/opentracing-go/Makefile, vendor/github.com/pkg/errors/Makefile, vendor/github.com/prometheus/common/sigv4/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/github.com/uber/jaeger-client-go/Makefile, vendor/go.uber.org/atomic/Makefile, vendor/go.uber.org/goleak/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile, vendor/sigs.k8s.io/kustomize/kyaml/openapi/Makefile
has_devcontainerno
has_linter_configyes
typecheck_configs
agent_commit_share0
toolchain_manifestsgo.mod, hack/tools/go.mod, vendor/github.com/Azure/go-ansiterm/go.mod, vendor/github.com/Jeffail/gabs/go.mod, vendor/github.com/Jeffail/gabs/v2/go.mod, vendor/github.com/alecthomas/units/go.mod, vendor/github.com/asaskevich/govalidator/go.mod, vendor/github.com/blang/semver/v4/go.mod, vendor/github.com/cespare/xxhash/v2/go.mod, vendor/github.com/dennwc/varint/go.mod, vendor/github.com/go-kit/log/go.mod, vendor/github.com/go-logfmt/logfmt/go.mod, vendor/github.com/go-logr/logr/go.mod, vendor/github.com/go-openapi/analysis/go.mod, vendor/github.com/go-openapi/errors/go.mod, vendor/github.com/go-openapi/jsonpointer/go.mod, vendor/github.com/go-openapi/jsonreference/go.mod, vendor/github.com/go-openapi/loads/go.mod, vendor/github.com/go-openapi/runtime/go.mod, vendor/github.com/go-openapi/spec/go.mod, vendor/github.com/go-openapi/strfmt/go.mod, vendor/github.com/go-openapi/swag/go.mod, vendor/github.com/go-openapi/validate/go.mod, vendor/github.com/go-stack/stack/go.mod, vendor/github.com/golang/snappy/go.mod, vendor/github.com/google/btree/go.mod, vendor/github.com/google/gofuzz/go.mod, vendor/github.com/google/shlex/go.mod, vendor/github.com/google/uuid/go.mod, vendor/github.com/hashicorp/go-version/go.mod, vendor/github.com/imdario/mergo/go.mod, vendor/github.com/jmespath/go-jmespath/go.mod, vendor/github.com/josharian/intern/go.mod, vendor/github.com/jpillora/backoff/go.mod, vendor/github.com/json-iterator/go/go.mod, vendor/github.com/mitchellh/go-wordwrap/go.mod, vendor/github.com/mitchellh/hashstructure/go.mod, vendor/github.com/mitchellh/mapstructure/go.mod, vendor/github.com/moby/spdystream/go.mod, vendor/github.com/moby/term/go.mod, vendor/github.com/opencontainers/go-digest/go.mod, vendor/github.com/opentracing/opentracing-go/go.mod, vendor/github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/go.mod, vendor/github.com/prometheus/common/sigv4/go.mod, vendor/github.com/prometheus/procfs/go.mod, vendor/github.com/russross/blackfriday/go.mod, vendor/github.com/spf13/cobra/go.mod, vendor/github.com/spf13/pflag/go.mod, vendor/github.com/xlab/treeprint/go.mod, vendor/go.uber.org/atomic/go.mod, vendor/go.uber.org/goleak/go.mod, vendor/golang.org/x/lint/go.mod, vendor/golang.org/x/oauth2/go.mod, vendor/golang.org/x/term/go.mod, vendor/google.golang.org/grpc/go.mod, vendor/gopkg.in/yaml.v2/go.mod, vendor/gopkg.in/yaml.v3/go.mod, vendor/k8s.io/klog/v2/go.mod, vendor/sigs.k8s.io/yaml/go.mod
dependency_bot_commit_share0
How it's scored
45/45Type-checkable code — Go (statically typed)
53.5/55Manageable file sizes — 2/75 source files over 60KB
Inputs used
primary_languageGo
largest_source_bytes132,385
source_files_sampled75
oversized_source_files2
How it's scored
40/40API schema (OpenAPI/GraphQL/proto) — vendor/github.com/gogo/protobuf/gogoproto/gogo.proto, vendor/github.com/googleapis/gnostic/extensions/extension.proto, vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto, vendor/github.com/openshift/api/route/v1/generated.proto, vendor/github.com/openshift/api/security/v1/generated.proto, vendor/github.com/thanos-io/thanos/pkg/store/labelpb/types.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/prompb/remote.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/prompb/types.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/rpc.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/types.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto, vendor/k8s.io/api/admission/v1/generated.proto, vendor/k8s.io/api/admission/v1beta1/generated.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha1/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto, vendor/k8s.io/apiserver/pkg/apis/audit/v1/generated.proto, vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/generated.proto, vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/generated.proto, vendor/k8s.io/metrics/pkg/apis/metrics/v1alpha1/generated.proto, vendor/k8s.io/metrics/pkg/apis/metrics/v1beta1/generated.proto, vendor/sigs.k8s.io/kustomize/kyaml/openapi/kubernetesapi/v1204/swagger.json, vendor/sigs.k8s.io/kustomize/kyaml/openapi/kustomizationapi/swagger.json
0/20MCP server
40/40Runnable examples — examples
Inputs used
example_dirsexamples
has_mcp_signalno
api_schema_filesvendor/github.com/gogo/protobuf/gogoproto/gogo.proto, vendor/github.com/googleapis/gnostic/extensions/extension.proto, vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto, vendor/github.com/openshift/api/route/v1/generated.proto, vendor/github.com/openshift/api/security/v1/generated.proto, vendor/github.com/thanos-io/thanos/pkg/store/labelpb/types.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/prompb/remote.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/prompb/types.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/rpc.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/types.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto, vendor/k8s.io/api/admission/v1/generated.proto, vendor/k8s.io/api/admission/v1beta1/generated.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha1/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto, vendor/k8s.io/apiserver/pkg/apis/audit/v1/generated.proto, vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/generated.proto, vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/generated.proto, vendor/k8s.io/metrics/pkg/apis/metrics/v1alpha1/generated.proto, vendor/k8s.io/metrics/pkg/apis/metrics/v1beta1/generated.proto, vendor/sigs.k8s.io/kustomize/kyaml/openapi/kubernetesapi/v1204/swagger.json, vendor/sigs.k8s.io/kustomize/kyaml/openapi/kustomizationapi/swagger.json

Key facts

1GitHub stars
95contributors
0commits, last 12 months
1,514days since last push
6releases
3bus factor
0open issues
Gopackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • Community profile unavailable
  • go package 'github.com/openshift/cluster-monitoring-operator' points at a different repository (https://github.com/openshift/cluster-monitoring-operator); excluded from ecosystem scoring
  • Could not fetch go package 'github.com/openshift/cluster-monitoring-operator/hack' from its registry
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

More detail

OpenSSF Scorecard 1.8 / 10
1.8aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-24 21:50 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
n/aCI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
10Contributorsproject has 47 contributing companies or organizations
n/aDangerous-Workflowno workflows found
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintained0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
n/aPackagingpackaging workflow not detected
1Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 1
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
n/aToken-PermissionsNo tokens found
0Vulnerabilities116 existing vulnerabilities detected
Direct dependencies 30
RegistryPackageVersion constraintManifest
Gogithub.com/Jeffail/gabsv1.4.0go.mod
Gogithub.com/Jeffail/gabs/v2v2.6.1go.mod
Gogithub.com/ghodss/yamlv1.0.0go.mod
Gogithub.com/imdario/mergov0.3.11go.mod
Gogithub.com/openshift/apiv0.0.0-20210706092853-b63d499a70cego.mod
Gogithub.com/openshift/client-gov0.0.0-20210521082421-73d9475a9142go.mod
Gogithub.com/openshift/library-gov0.0.0-20210720093535-f8ed43828870go.mod
Gogithub.com/pkg/errorsv0.9.1go.mod
Gogithub.com/prometheus-operator/prometheus-operatorv0.52.1go.mod
Gogithub.com/prometheus-operator/prometheus-operator/pkg/apis/monitoringv0.52.1go.mod
Gogithub.com/prometheus-operator/prometheus-operator/pkg/clientv0.52.1go.mod
Gogithub.com/prometheus/client_golangv1.11.0go.mod
Gogithub.com/prometheus/prometheusv1.8.2-0.20211005150130-f29caccc4255go.mod
Gogolang.org/x/cryptov0.0.0-20210616213533-5ff15b29337ego.mod
Gogolang.org/x/syncv0.0.0-20210220032951-036812b2e83cgo.mod
Gogopkg.in/yaml.v2v2.4.0go.mod
Gok8s.io/apiv0.22.3go.mod
Gok8s.io/apiextensions-apiserverv0.22.3go.mod
Gok8s.io/apimachineryv0.22.3go.mod
Gok8s.io/apiserverv0.22.3go.mod
Gok8s.io/client-gov12.0.0+incompatiblego.mod
Gok8s.io/klog/v2v2.10.0go.mod
Gok8s.io/kube-aggregatorv0.21.1go.mod
Gok8s.io/kubectlv0.22.1go.mod
Gok8s.io/metricsv0.22.1go.mod
Gogithub.com/brancz/gojsontoyamlv0.0.0-20201216083616-202f76bf8c1fhack/tools/go.mod
Gogithub.com/campoy/embedmdv1.0.0hack/tools/go.mod
Gogithub.com/google/go-jsonnetv0.17.1-0.20210520122306-7373f5b60678hack/tools/go.mod
Gogithub.com/jsonnet-bundler/jsonnet-bundlerv0.4.0hack/tools/go.mod
Gogithub.com/prometheus/prometheusv1.8.2-0.20210701133801-b0944590a1c9hack/tools/go.mod
All dependencies not collected

The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 52153,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 842645,
        "Shell": 32510,
        "Jsonnet": 222615,
        "Makefile": 6056,
        "Dockerfile": 1046
      },
      "pushed_at": "2022-06-01T10:56:38Z",
      "created_at": "2021-12-17T10:18:20Z",
      "owner_type": "User",
      "updated_at": "2023-03-04T09:06:07Z",
      "description": "Manage the OpenShift monitoring stack",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "master",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go",
        "Jsonnet"
      ]
    },
    "owner": {
      "blog": "https://keybase.io/arajkumar",
      "name": "Arunprasad Rajkumar",
      "type": "User",
      "login": "arajkumar",
      "company": "@Timescale",
      "location": "Coimbatore, India",
      "followers": 70,
      "avatar_url": "https://avatars.githubusercontent.com/u/3874763?v=4",
      "created_at": "2013-03-15T12:46:49Z",
      "is_verified": null,
      "public_repos": 128,
      "account_age_days": 4879
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v3.11.0",
          "kind": "minor",
          "published_at": "2018-09-10T18:51:04Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2018-09-24T19:19:20Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2018-07-19T08:28:12Z"
        },
        {
          "tag": "v0.0.4",
          "kind": "patch",
          "published_at": "2018-05-25T15:05:15Z"
        },
        {
          "tag": "v0.0.3",
          "kind": "patch",
          "published_at": "2018-05-23T14:41:47Z"
        },
        {
          "tag": "v0.0.1",
          "kind": "patch",
          "published_at": "2018-04-16T17:37:51Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "bf7b4b0fe8e263ace7fcdd3db2d90365dd937bb1",
          "body": "…-generate\n\n[bot] Automated dependencies version update",
          "is_bot": false,
          "headline": "Merge pull request #1515 from rhobs/automated-updates-master-versions…",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-12-16T11:35:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea39fb4df9abc010b4d105806d68406cef8234e6",
          "body": "Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "[bot] Automated dependencies version update",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2021-12-16T09:41:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d17def1e9a767b6482bcd4fb433ec6af7a49c72",
          "body": "…-generate\n\n[bot] Automated dependencies version update",
          "is_bot": false,
          "headline": "Merge pull request #1511 from rhobs/automated-updates-master-versions…",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-12-14T13:15:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27c6fa9a6b4148b34201e13f60f137c750bbfc92",
          "body": "Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "[bot] Automated dependencies version update",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2021-12-14T09:56:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1824f9c9a39f54734298dd10e5d20d42c8247995",
          "body": "Bug 2027272: Humanize bytes value for KubeMemoryOvercommit",
          "is_bot": false,
          "headline": "Merge pull request #1506 from PhilipGough/bz-2027272",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-12-08T11:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d038366868cc80a9960018b26f65efa1821c0d3",
          "body": "test/e2e/framework: retry configmap actions",
          "is_bot": false,
          "headline": "Merge pull request #1507 from simonpasquier/fix-flaky-test",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-12-08T05:20:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49960048ab89409fbe70f0c7cbf3b0a53895c681",
          "body": "* *: enable hard-anti affinity and PDB for Alertmanager\n\nThis change introduces hard pod anti-affinity rules and pod disruption\nbudgets for Alertmanager to ensure the maximum availability for the\nAlertmanager cluster in the event of nodes going down (either due to\nupgrades or unexpected outages). Th\n[…]\n regenerate\n\n* jsonnet,pkg: configure startupProbe only when no storage\n\n* assets: regenerate\n\n* test/e2e: add TestAlertmanagerDataReplication test\n\nSigned-off-by: Simon Pasquier <spasquie@redhat.com>",
          "is_bot": false,
          "headline": "Bug 1955489: enable hard-anti affinity and PDB for Alertmanager (#1489)",
          "author_name": "Simon Pasquier",
          "author_login": "simonpasquier",
          "committed_at": "2021-12-07T14:03:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "95c99261d5a2b173d63197344ddc2b32a55c3270",
          "body": null,
          "is_bot": false,
          "headline": "test/e2e/framework: retry configmap actions",
          "author_name": "Simon Pasquier",
          "author_login": "simonpasquier",
          "committed_at": "2021-12-07T09:01:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "194819c7ca5b42cb0716eab5f5f05d3af98e3cfc",
          "body": null,
          "is_bot": false,
          "headline": "make: generate assets for kube-prom/mixin",
          "author_name": "Philip Gough",
          "author_login": "philipgough",
          "committed_at": "2021-12-06T14:20:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5967915cb7e710d92ffb60adc53a0c1cf3cec9b",
          "body": null,
          "is_bot": false,
          "headline": "jsonnet: Sync kube-prometheus",
          "author_name": "Philip Gough",
          "author_login": "philipgough",
          "committed_at": "2021-12-06T14:18:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8469124b385d6e9bef0cbad27f65e26f8afc6d1b",
          "body": "[MON-1851] upgrade unused rule checking script",
          "is_bot": false,
          "headline": "Merge pull request #1354 from raptorsun/feature/MON-1851",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-12-06T12:29:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "206b4a5cbb9af1a52a8b6de722f19108626b0c0c",
          "body": "fix test go-fmt for go 1.17",
          "is_bot": false,
          "headline": "Merge pull request #1497 from raptorsun/bugfix/go_fmt_1.17",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-12-03T17:28:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0819def21e2eb353923e504a43eb86c10b75faa7",
          "body": null,
          "is_bot": false,
          "headline": "upgrade rule checking script",
          "author_name": "Haoyu Sun",
          "author_login": "raptorsun",
          "committed_at": "2021-12-03T16:23:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b1d101f0031c4b12b0da7acd4d083d47c5e2389",
          "body": null,
          "is_bot": false,
          "headline": "fix for go-fmt with go 1.17",
          "author_name": "Haoyu Sun",
          "author_login": "raptorsun",
          "committed_at": "2021-12-03T13:41:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d9983a3ce6f72d5cbdd977acb6af1791665858c",
          "body": "…-generate\n\n[bot] Automated dependencies version update",
          "is_bot": false,
          "headline": "Merge pull request #1504 from rhobs/automated-updates-master-versions…",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-12-02T16:22:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "578a78e51ab5c828e6c9a93c8ed0fdaf2c0cad73",
          "body": "Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "[bot] Automated dependencies version update",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2021-12-02T02:07:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d097e7095cf0c4a193935c2f58d4973a18a2c7db",
          "body": "MON-1656: removing all the check tasks from other targets",
          "is_bot": false,
          "headline": "Merge pull request #1499 from prashbnair/mon-1656",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-12-01T11:16:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6074771d2f025e819b90369c071964887e4a8010",
          "body": "…in the verify target",
          "is_bot": false,
          "headline": "removing all the check tasks from other targets and consolidating it …",
          "author_name": "Prashant Balachandran",
          "author_login": null,
          "committed_at": "2021-12-01T05:07:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c44b601d539bb8695fb1ae7363760190dcb63fc4",
          "body": "hack/local-cmo.sh: fix CVO override",
          "is_bot": false,
          "headline": "Merge pull request #1498 from simonpasquier/fix-cvo-overrides",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-30T21:09:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d993e84771eb511d3fd98573c67b96fd86b26fb8",
          "body": "client: check all OwnerRefs on a service",
          "is_bot": false,
          "headline": "Merge pull request #1496 from jan--f/retain-tls-data-on-update-followup",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-30T17:07:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f71da6964a0c42209a53911f06b4e3677bd7339",
          "body": "Bug 2018880: Bug 2021021 Bug 2022612 [bot] Automated jsonnet dependencies update",
          "is_bot": false,
          "headline": "Merge pull request #1491 from rhobs/automated-updates-master",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-30T12:18:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e690428a1066ec7ab3997123ec8c265a24f0cb4",
          "body": "Since [1] got merged, CVO checks that the manifest's group matches with\nthe override definition hence the `/v1` needs to be removed.\n\n[1] https://github.com/openshift/cluster-version-operator/pull/689\n\nSigned-off-by: Simon Pasquier <spasquie@redhat.com>",
          "is_bot": false,
          "headline": "hack/local-cmo.sh: fix CVO override",
          "author_name": "Simon Pasquier",
          "author_login": "simonpasquier",
          "committed_at": "2021-11-30T10:15:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4bce339c53945a39ecbb5c0942a4683b88e7f2b",
          "body": "[MON-1786] Document Prometheus Adapter audit log configuration",
          "is_bot": false,
          "headline": "Merge pull request #1490 from sthaha/doc-adapter-auditing",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-30T10:14:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66be4fb1eefbfb173d00966b2b369d5b0c86eda7",
          "body": "In maybeHasServiceCAData we shouldn't return false if a particular\nowning Service can't be retrieved, but rather continue to loop throught\nthe OwnerReferences. There could be a valid one and if not the function\nstill returns false.\n\nSigned-off-by: Jan Fajerski <jfajersk@redhat.com>",
          "is_bot": false,
          "headline": "client: check all OwnerRefs on a service",
          "author_name": "Jan Fajerski",
          "author_login": "jan--f",
          "committed_at": "2021-11-30T08:54:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25aa7dcdce0b3e64784ca0ab54fa7f3f597f84bb",
          "body": "Bug 1953264: client: don't update resource fields that are managed externally",
          "is_bot": false,
          "headline": "Merge pull request #1495 from jan--f/retain-tls-data-on-update",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-30T08:02:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f0038954e30defa4b5fd2b0e92f6277fdcaec6d",
          "body": "Some resources (ConfigMaps, Secrets, ValidatingWebhookConfigurations)\nhave fields, that are managed by the service-ca-operator. If we find\nthese fields populated we want to retain those values.\nOtherwise CMO and service-ca-operator will compete on every sync loop\nthat CMO runs. While we don't watch \n[…]\n but until then\nthis causes unnecessary churn and can cause TLS errors during times when\nCMO removes the TLS data that service-ca-operator populates.\n\nSigned-off-by: Jan Fajerski <jfajersk@redhat.com>",
          "is_bot": false,
          "headline": "client: don't update resource fields that are managed externally",
          "author_name": "Jan Fajerski",
          "author_login": "jan--f",
          "committed_at": "2021-11-29T19:35:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d3a542e35763653810fb2936474d37efed742231",
          "body": "fix generate-versions.sh to fetch version from packages.json",
          "is_bot": false,
          "headline": "Merge pull request #1485 from raptorsun/bugfix/versionGenerate",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-29T08:48:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b85b557c8cbd4e944a5a70fbfd9f53d84218f5b",
          "body": "Signed-off-by: Arunprasad Rajkumar <arajkuma@redhat.com>",
          "is_bot": false,
          "headline": "Add changelog for AggregatedAPI alert renames",
          "author_name": "Arunprasad Rajkumar",
          "author_login": "arajkumar",
          "committed_at": "2021-11-29T06:36:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "faf71ad227178b5bfd24428be74f81fc0172392c",
          "body": "Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "[bot] Automated jsonnet dependencies update",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2021-11-29T01:12:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7df2cd6d1a9665e237e31d406177ee2575571cbb",
          "body": "…es.json",
          "is_bot": false,
          "headline": "fix generate-versions.sh with a fallback to fetch version from packag…",
          "author_name": "Haoyu Sun",
          "author_login": "raptorsun",
          "committed_at": "2021-11-26T16:17:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38f820763c2f177d4f82ff8e7f9f529265ed387e",
          "body": "pkg/operator: move config sharing task at the end",
          "is_bot": false,
          "headline": "Merge pull request #1494 from simonpasquier/move-config-sharing-last",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-26T12:57:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d70072de6408633dd1e63e1ae5f8fa5270e76dc0",
          "body": "The config sharing task depends on resources that are created by other\ntasks (like Prometheus, Alertmanager, ...). It makes sense to move it as\nthe last task being executed by the operator.\n\nSigned-off-by: Simon Pasquier <spasquie@redhat.com>",
          "is_bot": false,
          "headline": "pkg/operator: move config sharing task at the end",
          "author_name": "Simon Pasquier",
          "author_login": "simonpasquier",
          "committed_at": "2021-11-25T15:37:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a1891d501edec073376468df24cb8bd64caccea",
          "body": "MON-1656: adding new target to makefile for verification",
          "is_bot": false,
          "headline": "Merge pull request #1492 from prashbnair/mon-1656",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-25T09:19:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d03fc2424b298c735cd09c2257f5d4e45f24b2fd",
          "body": null,
          "is_bot": false,
          "headline": "adding new target to makefile for verification",
          "author_name": "Prashant Balachandran",
          "author_login": null,
          "committed_at": "2021-11-25T06:49:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5efe38173c590eb0dca89ff5934d2c81be2ec53d",
          "body": "Support enabling the `query_log_file` config for Prometheus",
          "is_bot": false,
          "headline": "Merge pull request #1373 from PhilipGough/mon-1787",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-24T13:49:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb6307c22648cfaf7faebd4bde66500daf42540f",
          "body": "Update list of metrics used by openshift-team-cluster-manager",
          "is_bot": false,
          "headline": "Merge pull request #1487 from gshilin-sdb/cluster-manager-update",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-23T16:55:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e7e0da4c2bdfcf6ca9b039af71ad10b3260ef7a",
          "body": null,
          "is_bot": false,
          "headline": "Update list of metrics used by openshift-team-cluster-manager",
          "author_name": "Gregory Shilin",
          "author_login": "gshilin-sdb",
          "committed_at": "2021-11-23T12:42:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72d5dacd8d66d6066e01673292a04d009cdf0186",
          "body": "MON-1872: Use kube-thanos jsonnet libs for thanos ruler",
          "is_bot": false,
          "headline": "Merge pull request #1478 from PhilipGough/mon-1872",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-23T11:55:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9db5470ac6a08bef37c68fef935dfbeb9400a633",
          "body": "Signed-off-by: Sunil Thaha <sthaha@redhat.com>",
          "is_bot": false,
          "headline": "[MON-1786] Document Prometheus Adapter audit log configuration",
          "author_name": "Sunil Thaha",
          "author_login": null,
          "committed_at": "2021-11-23T03:10:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f664d7416349084a49ca7948be0c4a3ba6b84f5",
          "body": "[MON-1838] Upgrade Prometheus-Operator to 0.52",
          "is_bot": false,
          "headline": "Merge pull request #1468 from raptorsun/feature/MON-1838-dep",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-22T18:50:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d300d9eef3c1efa958eda6f9e4153233102ea9b0",
          "body": null,
          "is_bot": false,
          "headline": "make: generate assets for thanos ruler uwm from kube-thanos",
          "author_name": "Philip Gough",
          "author_login": "philipgough",
          "committed_at": "2021-11-22T14:51:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64ceb0e640b2cd7a3245086bc9bca61a3df63f31",
          "body": null,
          "is_bot": false,
          "headline": "jsonnet: Use upstream kube-thanos lib for ruler",
          "author_name": "Philip Gough",
          "author_login": "philipgough",
          "committed_at": "2021-11-22T14:51:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8dc30ce041fb1c8786279db217d3994744594d8f",
          "body": null,
          "is_bot": false,
          "headline": "jsonnet: Set variables for thanos ruler from kube-thanos",
          "author_name": "Philip Gough",
          "author_login": "philipgough",
          "committed_at": "2021-11-22T14:51:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9070ffb90ea71eb6139a4d86a31130fa17c0ef34",
          "body": "Bug 1933847: enable hard affinity + PodDisruptionBudget for Prometheus and Thanos Ruler pods",
          "is_bot": false,
          "headline": "Merge pull request #1341 from simonpasquier/bz1933847",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-22T12:33:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "227ad30a2ea8087f947f05f66d1eaabc45a05560",
          "body": "Add metrics for Node Tuning Operator to telemetry",
          "is_bot": false,
          "headline": "Merge pull request #1484 from dagrayvid/add-nto-telemetry",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-22T10:45:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0dad76692e5b884ef755ab9affd381d8dfde01a",
          "body": null,
          "is_bot": false,
          "headline": "jsonnet: upgrade prometheus-operator to 0.52",
          "author_name": "Haoyu Sun",
          "author_login": "raptorsun",
          "committed_at": "2021-11-22T08:09:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4908a040adc731a5afda524bcdcbb460dca4d6ff",
          "body": null,
          "is_bot": false,
          "headline": "go module: upgrade prometheus-operator to 0.52.0 with its dependencies",
          "author_name": "Haoyu Sun",
          "author_login": "raptorsun",
          "committed_at": "2021-11-22T08:09:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3084f796ce16bcb08a9fb1a7008f911274f2dfb",
          "body": "MON-1659: adding relatedObjects to cluster operator manifest",
          "is_bot": false,
          "headline": "Merge pull request #1483 from prashbnair/mon-1659",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-19T13:18:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd2cbc333d5a89c816db3f5dead99dec6d1e6a7f",
          "body": "…e2e-test\n\ntest/e2e: fix assertTenancyForLabels test",
          "is_bot": false,
          "headline": "Merge pull request #1480 from simonpasquier/fix-assert-tenancy-label-…",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-18T03:18:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b405fcdf7ff9d1ea1494ad03065ceaecbd7051a1",
          "body": "Signed-off-by: David Gray <dagray@redhat.com>",
          "is_bot": false,
          "headline": "Add custom profile metric for Node Tuning Operator to telemetry",
          "author_name": "David Gray",
          "author_login": "dagrayvid",
          "committed_at": "2021-11-17T17:12:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e1a58e689c0813979ab9af23f33721489ca31b8",
          "body": "…perator\n\nFix TestUserWorkloadMonitoringAlerting for Prometheus Operator v0.52",
          "is_bot": false,
          "headline": "Merge pull request #1479 from raptorsun/bugfix/unit-test-prometheus-o…",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-17T16:46:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0dc32c4b9ae4d55beef48158599018d34af3abbf",
          "body": "Update make target name for Documentation/telemetry/telemeter_query",
          "is_bot": false,
          "headline": "Merge pull request #1482 from dagrayvid/makefile-telemetry-docs-fix",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-17T12:51:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0da2132b1e41b833fb5a5792c24917cdecf4934c",
          "body": "We want to allow cluster admins to enable the query log,\nhowever it should be noted that this is a temporary solution\nfor debugging situations ad-hoc and should not be enabled\npermanently.\n\nhttps://prometheus.io/docs/guides/query-log/",
          "is_bot": false,
          "headline": "docs: Describe the `queryLogFile` setting",
          "author_name": "Philip Gough",
          "author_login": "philipgough",
          "committed_at": "2021-11-17T10:37:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71a1ea6991a075781e404d32c993ee0e15d4b9af",
          "body": null,
          "is_bot": false,
          "headline": "test:e2e: Ensure QueryLogFile is set in spec",
          "author_name": "Philip Gough",
          "author_login": "philipgough",
          "committed_at": "2021-11-17T10:37:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8baa71708c4200be41117f4e3e682754935745d3",
          "body": "Prometheus and via prometheus-operator, provide the ability to\nlog all PromQL queries to a file.\n\nThis change enables CMO to support passing through that feature\nto Prometheus CR and the Prometheus pod for both platform\nmonitoring and UWM.\n\nhttps://prometheus.io/docs/guides/query-log/",
          "is_bot": false,
          "headline": "manifests: Enable query log file config for Prometheus",
          "author_name": "Philip Gough",
          "author_login": "philipgough",
          "committed_at": "2021-11-17T10:37:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e19a2354a6d85210af1f117057799c3efe7d3895",
          "body": null,
          "is_bot": false,
          "headline": "adding relatedObjects to cluster operator manifest",
          "author_name": "Prashant Balachandran",
          "author_login": null,
          "committed_at": "2021-11-17T06:25:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2acb4d566d20a0a2fcd7bb92d13f7250bcadf33f",
          "body": null,
          "is_bot": false,
          "headline": "Update make target name for Documentation/telemetry/telemeter_query",
          "author_name": "David Gray",
          "author_login": "dagrayvid",
          "committed_at": "2021-11-16T18:33:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9534afc81bc1f687bcabf3183f878a338d604f55",
          "body": "Bug 2016435: Removing one of the AlertmanagerClusterFailedToSendAlerts alerts",
          "is_bot": false,
          "headline": "Merge pull request #1481 from prashbnair/bz-2016435",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-16T17:02:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2aa44f0b39c85ec9e33878a58fbb79930700e8a",
          "body": "The test didn't check the last returned error.\n\nSigned-off-by: Simon Pasquier <spasquie@redhat.com>",
          "is_bot": false,
          "headline": "test/e2e: fix assertTenancyForLabels test",
          "author_name": "Simon Pasquier",
          "author_login": "simonpasquier",
          "committed_at": "2021-11-16T14:27:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2fe6f0b90899ddd5bc82da46248659bcad43d91",
          "body": "adding details in changelog",
          "is_bot": false,
          "headline": "Removing one of the AlertmanagerClusterFailedToSendAlerts alerts",
          "author_name": "Prashant Balachandran",
          "author_login": null,
          "committed_at": "2021-11-16T13:36:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de3680b929c43d98413608ee3255569938dd4a1a",
          "body": "…s a postfix to avoid name collision",
          "is_bot": false,
          "headline": "fix e2e test TestUserWorkloadMonitoringAlerting allowing rule file ha…",
          "author_name": "Haoyu Sun",
          "author_login": "raptorsun",
          "committed_at": "2021-11-16T09:54:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ac1e0614f9dba6b49c708e82d9ed2abcfd77b9d",
          "body": "…-4.10-cluster-monitoring-operator\n\nUpdating cluster-monitoring-operator images to be consistent with ART",
          "is_bot": false,
          "headline": "Merge pull request #1475 from openshift-bot/art-consistency-openshift…",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-11T17:18:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1dc090abb865d2ce46c8e8697076a800ccccb16",
          "body": "pkg: Implements tlsSecurityProfile to remaining components using kube-rbac-proxy",
          "is_bot": false,
          "headline": "Merge pull request #1474 from slashpai/rbac_proxy_remaining_tls",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-11T06:58:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d5d2c18447604e14182f3fd49bba8c6dd125090",
          "body": "Reconciling with https://github.com/openshift/ocp-build-data/tree/5b89f5b601508a0bcc0399fd3f34b7aa2e86e90e/images/cluster-monitoring-operator.yml",
          "is_bot": false,
          "headline": "Updating cluster-monitoring-operator images to be consistent with ART",
          "author_name": "AOS Automation Release Team",
          "author_login": null,
          "committed_at": "2021-11-10T15:14:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc854a5c5f17dbf10a854363eca3a7c8a86ebdb6",
          "body": "Signed-off-by: Simon Pasquier <spasquie@redhat.com>",
          "is_bot": false,
          "headline": "assets: regenerate",
          "author_name": "Simon Pasquier",
          "author_login": "simonpasquier",
          "committed_at": "2021-11-10T10:34:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9b7644e3ccaab6629de1e5b4eda1a554daf93ea",
          "body": "This change introduces back hard pod anti-affinity rules and pod\ndisruption budgets for Prometheus (both k8s and user-workload) as well\nas Thanos Ruler. The cluster monitoring operator updates the\n`Upgradeable` condition to false when it detects that the pods aren't\ncorrectly spread to ensure that a\n[…]\n fresh cluster with hard anti-affinity rules, it isn't possible anymore\nto trigger a situation where both pods would be scheduled on the same\nnode.\n\nSigned-off-by: Simon Pasquier <spasquie@redhat.com>",
          "is_bot": false,
          "headline": "*: enable hard anti-affinity + PDB for Prometheus and Ruler",
          "author_name": "Simon Pasquier",
          "author_login": "simonpasquier",
          "committed_at": "2021-11-10T10:32:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4ecf1715bf3f572edb1c424cf3185f37719521fe",
          "body": "Bug 2019992: Bump jsonnet dependencies to latest",
          "is_bot": false,
          "headline": "Merge pull request #1455 from arajkumar/sync-jsonnet-deps",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-10T10:13:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04220ebecdfcb71706b761ce2b123e165e56c3ce",
          "body": null,
          "is_bot": false,
          "headline": "test/e2e: Fix nit",
          "author_name": "Jayapriya Pai",
          "author_login": "slashpai",
          "committed_at": "2021-11-10T08:26:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2197c9c0f16d646654220f2b9a5f03d77606ace",
          "body": "This commit implements TLS security profile for kube-rbac-proxy in prometheus\n\nSigned-off-by: Jayapriya Pai <janantha@redhat.com>",
          "is_bot": false,
          "headline": "pkg: add tlsSecurityProfile to kube-rbac-proxy in prometheus",
          "author_name": "Jayapriya Pai",
          "author_login": "slashpai",
          "committed_at": "2021-11-10T07:48:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8280024b4c2dd99f8e637c53f399dfb41ea7268f",
          "body": "This commit implements TLS security profile for kube-rbac-proxy in alertmanager\n\nSigned-off-by: Jayapriya Pai <janantha@redhat.com>",
          "is_bot": false,
          "headline": "pkg:add tlsSecurityProfile to kube-rbac-proxy in  alertmanager",
          "author_name": "Jayapriya Pai",
          "author_login": "slashpai",
          "committed_at": "2021-11-10T07:20:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec2752de0adb37d964c9efb878118a05a5437464",
          "body": "Signed-off-by: Arunprasad Rajkumar <arajkuma@redhat.com>",
          "is_bot": false,
          "headline": "fix: Handle alertmanager servicemonitor rename",
          "author_name": "Arunprasad Rajkumar",
          "author_login": "arajkumar",
          "committed_at": "2021-11-10T07:17:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89842b3aa1d653ef198a24e12b0a4b6539b6aeae",
          "body": "Signed-off-by: Arunprasad Rajkumar <arajkuma@redhat.com>",
          "is_bot": false,
          "headline": "assets: regenerate",
          "author_name": "Arunprasad Rajkumar",
          "author_login": "arajkumar",
          "committed_at": "2021-11-10T07:17:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89dd3b77a0854085ebb424875d68c7352fee7c1d",
          "body": "Refer https://github.com/openshift/cluster-monitoring-operator/pull/1444/files#r732821044 for more details.\n\nSigned-off-by: Arunprasad Rajkumar <arajkuma@redhat.com>",
          "is_bot": false,
          "headline": "fix: Ignore alert rules related to kube-proxy",
          "author_name": "Arunprasad Rajkumar",
          "author_login": "arajkumar",
          "committed_at": "2021-11-10T07:17:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d24b1ceae4ae0e6aec343e577fe70d2ea340c03a",
          "body": "Signed-off-by: Arunprasad Rajkumar <arajkuma@redhat.com>",
          "is_bot": false,
          "headline": "chore: Update jsonnet deps to latest",
          "author_name": "Arunprasad Rajkumar",
          "author_login": "arajkumar",
          "committed_at": "2021-11-10T07:17:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26667cef078641921758c5601ef96fd595d6e8c4",
          "body": "This commit implements TLS security profile for kube-rbac-proxy in grafana\n\nSigned-off-by: Jayapriya Pai <janantha@redhat.com>",
          "is_bot": false,
          "headline": "pkg: add tlsSecurityProfile to kube-rbac-proxy in grafana",
          "author_name": "Jayapriya Pai",
          "author_login": "slashpai",
          "committed_at": "2021-11-10T06:56:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9a921db69b4b00d734f5585040b5ee6650db0fe",
          "body": "This commit implements TLS security profile for kube-rbac-proxy in thanos-querier\n\nSigned-off-by: Jayapriya Pai <janantha@redhat.com>",
          "is_bot": false,
          "headline": "pkg: add tlsSecurityProfile to kube-rbac-proxy in thanos-querier",
          "author_name": "Jayapriya Pai",
          "author_login": "slashpai",
          "committed_at": "2021-11-10T06:50:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b440ce26cacf129b9d255f7edb7d0a9c9bef7026",
          "body": "This commit implements TLS security profile for kube-rbac-proxy in telemeter-client\n\nSigned-off-by: Jayapriya Pai <janantha@redhat.com>",
          "is_bot": false,
          "headline": "pkg: add tlsSecurityProfile to kube-rbac-proxy in telemeter-client",
          "author_name": "Jayapriya Pai",
          "author_login": "slashpai",
          "committed_at": "2021-11-10T06:30:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32334d9199cb9997f846895098f96521ce2fd6ce",
          "body": "[MON-1786] Enable audit logs by default for Prometheus Adapter",
          "is_bot": false,
          "headline": "Merge pull request #1377 from sthaha/audit-prom-adapter",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-09T16:08:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42371f83e1e34efb1d8fbc9c43bc9505c412ef06",
          "body": "pkg: add tlsSecurityProfile to kube-rbac-proxy in node-exporter",
          "is_bot": false,
          "headline": "Merge pull request #1470 from slashpai/tls_nodeexp",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-09T10:13:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66f154a722c8da1c573117bcc83a81ad955f260b",
          "body": "This commit implements TLS security profile for kube-rbac-proxy in node-exporter\n\nSigned-off-by: Jayapriya Pai <janantha@redhat.com>",
          "is_bot": false,
          "headline": "pkg:add tlsSecurityProfile to kube-rbac-proxy in node-exporter",
          "author_name": "Jayapriya Pai",
          "author_login": "slashpai",
          "committed_at": "2021-11-09T06:24:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce499efbe133b2eba61f92d82656c5727ff01021",
          "body": "Enabling audit logs helps troubleshoot issues in Prometheus Adapter. The\ndetails of the audit level can be tweaked by selecting an audit profile\nwhich corresponds to audit Log Level.\nSee: https://kubernetes.io/docs/tasks/debug-application-cluster/audit/#audit-policy\n\nThe following profiles are provi\n[…]\n: cluster-monitoring-config\n  namespace: openshift-monitoring\ndata:\n  config.yaml: |\n    k8sPrometheusAdapter:\n      audit:\n        profile: Request\n```\n\nSigned-off-by: Sunil Thaha <sthaha@redhat.com>",
          "is_bot": false,
          "headline": "[MON-1786] Enable audit logs by default for Prometheus Adapter",
          "author_name": "Sunil Thaha",
          "author_login": null,
          "committed_at": "2021-11-09T01:48:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f8ce6f8cc4e872d199c70f2a789d0d70b6acff7f",
          "body": "pkg: add tlsSecurityProfile to kube-rbac-proxy in prometheus-operator",
          "is_bot": false,
          "headline": "Merge pull request #1466 from slashpai/tls_po",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-08T16:42:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5c8858dad730a04e39668898ba248677851f0f7",
          "body": "add E2E test checking image registry is well replaced for containers.",
          "is_bot": false,
          "headline": "Merge pull request #1430 from raptorsun/feature/testImageRegistry",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-08T10:20:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9dc8a933a295916eacf8c016f6c0068385c7a54b",
          "body": null,
          "is_bot": false,
          "headline": "pkg: Enhance manifest_test.go for better readability",
          "author_name": "Jayapriya Pai",
          "author_login": "slashpai",
          "committed_at": "2021-11-08T09:00:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85482195f2cf2ccf1414c36fcb2493bd1751039b",
          "body": "CMO and UWM.",
          "is_bot": false,
          "headline": "add E2E test checking image registry is well replaced for containers in",
          "author_name": "Haoyu Sun",
          "author_login": "raptorsun",
          "committed_at": "2021-11-05T08:40:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8500e0f812d34643a5e7c33cee763d4b00a171b2",
          "body": "… spread (#1431)\n\n* Merge pull request #1330 from dgrisonnet/ha-upgradeable\n\nBug 1995924: Set `Upgradeable: false` when HA workloads are incorrectly spread\n\n* pkg/rebalancer: sort resources for deletion\n\nThe resources that are marked for deletion are sorted by their PVC\ncreation timestamp, from the \n[…]\nrisonnet <dgrisonn@redhat.com>\n\n* test/e2e: fix framework\n\nSigned-off-by: Damien Grisonnet <dgrisonn@redhat.com>\n\nCo-authored-by: OpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Bug 1995924: Set Upgradeable: false when HA workloads are incorrectly…",
          "author_name": "Damien Grisonnet",
          "author_login": "dgrisonnet",
          "committed_at": "2021-11-04T12:48:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "542e316c9b5d0badbc5dc506bf99eec114dcf641",
          "body": "This commit implements TLS security profile for kube-rbac-proxy in prometheus-operator in platform and uwm\n\nSigned-off-by: Jayapriya Pai <janantha@redhat.com>",
          "is_bot": false,
          "headline": "pkg:add tlsSecurityProfile to kube-rbac-proxy in prometheus-operator",
          "author_name": "Jayapriya Pai",
          "author_login": "slashpai",
          "committed_at": "2021-11-03T16:33:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee3ff9bcef97e5de2c19373e7c249857c44e94b2",
          "body": "run-local: harden -images switch retrieval",
          "is_bot": false,
          "headline": "Merge pull request #1465 from arajkumar/harden-run-local",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-03T11:27:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "361da15b129da47a19ef4f2ae7c5b28eebabdd8c",
          "body": "pkg: add tlsSecurityProfile to kube-rbac-proxy in OSM",
          "is_bot": false,
          "headline": "Merge pull request #1464 from slashpai/tls_osm",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-03T09:33:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c91a0b91b3a66f001b9110e440406288f90c37e8",
          "body": "Bug 2015386: jsonnet: Add PodDisruptionBudget to KSM metric allow list",
          "is_bot": false,
          "headline": "Merge pull request #1439 from PhilipGough/bz-2015386",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-03T01:25:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37b26d3662c301179cc32e67885b448217109405",
          "body": "Signed-off-by: Arunprasad Rajkumar <arajkuma@redhat.com>",
          "is_bot": false,
          "headline": "run-local: harden -images switch retrieval",
          "author_name": "Arunprasad Rajkumar",
          "author_login": "arajkumar",
          "committed_at": "2021-11-02T11:50:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64c1751838cce5ffd6fe3659738dec5ac76a7f9e",
          "body": "test: Add tests for osm-rbacproxy tlssecurityprofile\n\nThis commit implements TLS security profile for kube-rbac-proxy in openshift-state-metrics\n\nSigned-off-by: Jayapriya Pai <janantha@redhat.com>",
          "is_bot": false,
          "headline": "pkg: add tlsSecurityProfile to kube-rbac-proxy in OSM",
          "author_name": "Jayapriya Pai",
          "author_login": "slashpai",
          "committed_at": "2021-11-02T10:49:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51d55983a591f925a71b4f1feca3cf8b5d51d055",
          "body": "pkg: add tlsSecurityProfile to kube-rbac-proxy in KSM",
          "is_bot": false,
          "headline": "Merge pull request #1454 from slashpai/tls_ksm",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-11-02T10:25:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d3ad205430b22cb8351b86240f3c5b526e43cbd",
          "body": null,
          "is_bot": false,
          "headline": "jsonnet: Add PodDisruptionBudget to KSM metric allow list",
          "author_name": "Philip Gough",
          "author_login": "philipgough",
          "committed_at": "2021-11-01T11:14:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75c27a12380e33faef12b5ada88fda31a02a730a",
          "body": "Bug 2015418: Keep container_fs_usage_bytes metric",
          "is_bot": false,
          "headline": "Merge pull request #1460 from PhilipGough/bz-2015418",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-10-29T13:26:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "078c590b7292dd1e3d46871caed6e02562dbca2e",
          "body": null,
          "is_bot": false,
          "headline": "jsonnet: Keep container_fs_usage_bytes metric",
          "author_name": "Philip Gough",
          "author_login": "philipgough",
          "committed_at": "2021-10-29T11:31:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "40bc810ae6cfe8862bd0d547afc703eff8e0d091",
          "body": "test: Add tests for ksm-rbacproxy tlssecurityprofile\n\nThis commit implements TLS security profile for kube-rbac-proxy in kube-state-metrics\n\nSigned-off-by: Jayapriya Pai <janantha@redhat.com>",
          "is_bot": false,
          "headline": "pkg: add tlsSecurityProfile to kube-rbac-proxy in KSM",
          "author_name": "Jayapriya Pai",
          "author_login": "slashpai",
          "committed_at": "2021-10-29T05:41:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddbcdc9524defc8e82126c5356472044858b8262",
          "body": "Bug 1939401: Add app.kubernetes.io/managed-by label for pods",
          "is_bot": false,
          "headline": "Merge pull request #1442 from slashpai/add_req_labels",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-10-28T19:48:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf5c335f7912b78d9468dc3d1a356001107177c2",
          "body": "Bug 2016352: Fix cert injection",
          "is_bot": false,
          "headline": "Merge pull request #1451 from jan--f/fix-cert-injection",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-10-28T17:41:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb0f3a792c3cc517ca2017f3f3ca4f4da9f2082e",
          "body": "changes for prometheus-adapter to honor global tlsSecurityProfile",
          "is_bot": false,
          "headline": "Merge pull request #1453 from prashbnair/mon-1785",
          "author_name": "OpenShift Merge Robot",
          "author_login": "openshift-merge-robot",
          "committed_at": "2021-10-28T12:15:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 6,
      "commits_last_year": 0,
      "latest_release_at": "2018-09-24T19:19:20Z",
      "latest_release_tag": "v0.1.1",
      "releases_from_tags": true,
      "days_since_last_push": 1514,
      "active_weeks_last_year": 0,
      "days_since_latest_release": 2860,
      "mean_days_between_releases": 32.2
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/openshift/cluster-monitoring-operator",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": false,
          "registry_url": "https://pkg.go.dev/github.com/openshift/cluster-monitoring-operator",
          "is_deprecated": false,
          "latest_version": "v3.11.0+incompatible",
          "repository_url": "https://github.com/openshift/cluster-monitoring-operator",
          "versions_count": 6,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2018-09-10T18:51:04Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 2874
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile",
        "examples/example-app/Makefile",
        "vendor/github.com/gogo/protobuf/gogoproto/Makefile",
        "vendor/github.com/gogo/protobuf/proto/Makefile",
        "vendor/github.com/gogo/protobuf/protoc-gen-gogo/descriptor/Makefile",
        "vendor/github.com/jmespath/go-jmespath/Makefile",
        "vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile",
        "vendor/github.com/opentracing/opentracing-go/Makefile",
        "vendor/github.com/pkg/errors/Makefile",
        "vendor/github.com/prometheus/common/sigv4/Makefile",
        "vendor/github.com/prometheus/procfs/Makefile",
        "vendor/github.com/spf13/cobra/Makefile",
        "vendor/github.com/uber/jaeger-client-go/Makefile",
        "vendor/go.uber.org/atomic/Makefile",
        "vendor/go.uber.org/goleak/Makefile",
        "vendor/golang.org/x/net/http2/Makefile",
        "vendor/google.golang.org/grpc/Makefile",
        "vendor/sigs.k8s.io/kustomize/kyaml/openapi/Makefile"
      ],
      "api_schema_files": [
        "vendor/github.com/gogo/protobuf/gogoproto/gogo.proto",
        "vendor/github.com/googleapis/gnostic/extensions/extension.proto",
        "vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto",
        "vendor/github.com/openshift/api/route/v1/generated.proto",
        "vendor/github.com/openshift/api/security/v1/generated.proto",
        "vendor/github.com/thanos-io/thanos/pkg/store/labelpb/types.proto",
        "vendor/github.com/thanos-io/thanos/pkg/store/storepb/prompb/remote.proto",
        "vendor/github.com/thanos-io/thanos/pkg/store/storepb/prompb/types.proto",
        "vendor/github.com/thanos-io/thanos/pkg/store/storepb/rpc.proto",
        "vendor/github.com/thanos-io/thanos/pkg/store/storepb/types.proto",
        "vendor/google.golang.org/appengine/internal/base/api_base.proto",
        "vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto",
        "vendor/google.golang.org/appengine/internal/log/log_service.proto",
        "vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto",
        "vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto",
        "vendor/k8s.io/api/admission/v1/generated.proto",
        "vendor/k8s.io/api/admission/v1beta1/generated.proto",
        "vendor/k8s.io/api/admissionregistration/v1/generated.proto",
        "vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto",
        "vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto",
        "vendor/k8s.io/api/apps/v1/generated.proto",
        "vendor/k8s.io/api/apps/v1beta1/generated.proto",
        "vendor/k8s.io/api/apps/v1beta2/generated.proto",
        "vendor/k8s.io/api/authentication/v1/generated.proto",
        "vendor/k8s.io/api/authentication/v1beta1/generated.proto",
        "vendor/k8s.io/api/authorization/v1/generated.proto",
        "vendor/k8s.io/api/authorization/v1beta1/generated.proto",
        "vendor/k8s.io/api/autoscaling/v1/generated.proto",
        "vendor/k8s.io/api/autoscaling/v2beta1/generated.proto",
        "vendor/k8s.io/api/autoscaling/v2beta2/generated.proto",
        "vendor/k8s.io/api/batch/v1/generated.proto",
        "vendor/k8s.io/api/batch/v1beta1/generated.proto",
        "vendor/k8s.io/api/certificates/v1/generated.proto",
        "vendor/k8s.io/api/certificates/v1beta1/generated.proto",
        "vendor/k8s.io/api/coordination/v1/generated.proto",
        "vendor/k8s.io/api/coordination/v1beta1/generated.proto",
        "vendor/k8s.io/api/core/v1/generated.proto",
        "vendor/k8s.io/api/discovery/v1/generated.proto",
        "vendor/k8s.io/api/discovery/v1beta1/generated.proto",
        "vendor/k8s.io/api/events/v1/generated.proto",
        "vendor/k8s.io/api/events/v1beta1/generated.proto",
        "vendor/k8s.io/api/extensions/v1beta1/generated.proto",
        "vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto",
        "vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto",
        "vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto",
        "vendor/k8s.io/api/networking/v1/generated.proto",
        "vendor/k8s.io/api/networking/v1beta1/generated.proto",
        "vendor/k8s.io/api/node/v1/generated.proto",
        "vendor/k8s.io/api/node/v1alpha1/generated.proto",
        "vendor/k8s.io/api/node/v1beta1/generated.proto",
        "vendor/k8s.io/api/policy/v1/generated.proto",
        "vendor/k8s.io/api/policy/v1beta1/generated.proto",
        "vendor/k8s.io/api/rbac/v1/generated.proto",
        "vendor/k8s.io/api/rbac/v1alpha1/generated.proto",
        "vendor/k8s.io/api/rbac/v1beta1/generated.proto",
        "vendor/k8s.io/api/scheduling/v1/generated.proto",
        "vendor/k8s.io/api/scheduling/v1alpha1/generated.proto",
        "vendor/k8s.io/api/scheduling/v1beta1/generated.proto",
        "vendor/k8s.io/api/storage/v1/generated.proto",
        "vendor/k8s.io/api/storage/v1alpha1/generated.proto",
        "vendor/k8s.io/api/storage/v1beta1/generated.proto",
        "vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto",
        "vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/runtime/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto",
        "vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto",
        "vendor/k8s.io/apiserver/pkg/apis/audit/v1/generated.proto",
        "vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/generated.proto",
        "vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/generated.proto",
        "vendor/k8s.io/metrics/pkg/apis/metrics/v1alpha1/generated.proto",
        "vendor/k8s.io/metrics/pkg/apis/metrics/v1beta1/generated.proto",
        "vendor/sigs.k8s.io/kustomize/kyaml/openapi/kubernetesapi/v1204/swagger.json",
        "vendor/sigs.k8s.io/kustomize/kyaml/openapi/kustomizationapi/swagger.json"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod",
        "hack/tools/go.mod",
        "vendor/github.com/Azure/go-ansiterm/go.mod",
        "vendor/github.com/Jeffail/gabs/go.mod",
        "vendor/github.com/Jeffail/gabs/v2/go.mod",
        "vendor/github.com/alecthomas/units/go.mod",
        "vendor/github.com/asaskevich/govalidator/go.mod",
        "vendor/github.com/blang/semver/v4/go.mod",
        "vendor/github.com/cespare/xxhash/v2/go.mod",
        "vendor/github.com/dennwc/varint/go.mod",
        "vendor/github.com/go-kit/log/go.mod",
        "vendor/github.com/go-logfmt/logfmt/go.mod",
        "vendor/github.com/go-logr/logr/go.mod",
        "vendor/github.com/go-openapi/analysis/go.mod",
        "vendor/github.com/go-openapi/errors/go.mod",
        "vendor/github.com/go-openapi/jsonpointer/go.mod",
        "vendor/github.com/go-openapi/jsonreference/go.mod",
        "vendor/github.com/go-openapi/loads/go.mod",
        "vendor/github.com/go-openapi/runtime/go.mod",
        "vendor/github.com/go-openapi/spec/go.mod",
        "vendor/github.com/go-openapi/strfmt/go.mod",
        "vendor/github.com/go-openapi/swag/go.mod",
        "vendor/github.com/go-openapi/validate/go.mod",
        "vendor/github.com/go-stack/stack/go.mod",
        "vendor/github.com/golang/snappy/go.mod",
        "vendor/github.com/google/btree/go.mod",
        "vendor/github.com/google/gofuzz/go.mod",
        "vendor/github.com/google/shlex/go.mod",
        "vendor/github.com/google/uuid/go.mod",
        "vendor/github.com/hashicorp/go-version/go.mod",
        "vendor/github.com/imdario/mergo/go.mod",
        "vendor/github.com/jmespath/go-jmespath/go.mod",
        "vendor/github.com/josharian/intern/go.mod",
        "vendor/github.com/jpillora/backoff/go.mod",
        "vendor/github.com/json-iterator/go/go.mod",
        "vendor/github.com/mitchellh/go-wordwrap/go.mod",
        "vendor/github.com/mitchellh/hashstructure/go.mod",
        "vendor/github.com/mitchellh/mapstructure/go.mod",
        "vendor/github.com/moby/spdystream/go.mod",
        "vendor/github.com/moby/term/go.mod",
        "vendor/github.com/opencontainers/go-digest/go.mod",
        "vendor/github.com/opentracing/opentracing-go/go.mod",
        "vendor/github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/go.mod",
        "vendor/github.com/prometheus/common/sigv4/go.mod",
        "vendor/github.com/prometheus/procfs/go.mod",
        "vendor/github.com/russross/blackfriday/go.mod",
        "vendor/github.com/spf13/cobra/go.mod",
        "vendor/github.com/spf13/pflag/go.mod",
        "vendor/github.com/xlab/treeprint/go.mod",
        "vendor/go.uber.org/atomic/go.mod",
        "vendor/go.uber.org/goleak/go.mod",
        "vendor/golang.org/x/lint/go.mod",
        "vendor/golang.org/x/oauth2/go.mod",
        "vendor/golang.org/x/term/go.mod",
        "vendor/google.golang.org/grpc/go.mod",
        "vendor/gopkg.in/yaml.v2/go.mod",
        "vendor/gopkg.in/yaml.v3/go.mod",
        "vendor/k8s.io/klog/v2/go.mod",
        "vendor/sigs.k8s.io/yaml/go.mod"
      ],
      "largest_source_bytes": 132385,
      "source_files_sampled": 75,
      "oversized_source_files": 2,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/Jeffail/gabs",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.0"
        },
        {
          "name": "github.com/Jeffail/gabs/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.6.1"
        },
        {
          "name": "github.com/ghodss/yaml",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/imdario/mergo",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.11"
        },
        {
          "name": "github.com/openshift/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20210706092853-b63d499a70ce"
        },
        {
          "name": "github.com/openshift/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20210521082421-73d9475a9142"
        },
        {
          "name": "github.com/openshift/library-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20210720093535-f8ed43828870"
        },
        {
          "name": "github.com/pkg/errors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.1"
        },
        {
          "name": "github.com/prometheus-operator/prometheus-operator",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.52.1"
        },
        {
          "name": "github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.52.1"
        },
        {
          "name": "github.com/prometheus-operator/prometheus-operator/pkg/client",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.52.1"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.0"
        },
        {
          "name": "github.com/prometheus/prometheus",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.2-0.20211005150130-f29caccc4255"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20210616213533-5ff15b29337e"
        },
        {
          "name": "golang.org/x/sync",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20210220032951-036812b2e83c"
        },
        {
          "name": "gopkg.in/yaml.v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.0"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.22.3"
        },
        {
          "name": "k8s.io/apiextensions-apiserver",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.22.3"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.22.3"
        },
        {
          "name": "k8s.io/apiserver",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.22.3"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v12.0.0+incompatible"
        },
        {
          "name": "k8s.io/klog/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.10.0"
        },
        {
          "name": "k8s.io/kube-aggregator",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.21.1"
        },
        {
          "name": "k8s.io/kubectl",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.22.1"
        },
        {
          "name": "k8s.io/metrics",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.22.1"
        },
        {
          "name": "github.com/brancz/gojsontoyaml",
          "manifest": "hack/tools/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20201216083616-202f76bf8c1f"
        },
        {
          "name": "github.com/campoy/embedmd",
          "manifest": "hack/tools/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/google/go-jsonnet",
          "manifest": "hack/tools/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.17.1-0.20210520122306-7373f5b60678"
        },
        {
          "name": "github.com/jsonnet-bundler/jsonnet-bundler",
          "manifest": "hack/tools/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.0"
        },
        {
          "name": "github.com/prometheus/prometheus",
          "manifest": "hack/tools/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.2-0.20210701133801-b0944590a1c9"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 3,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "openshift-merge-robot",
          "commits": 931,
          "avatar_url": "https://avatars.githubusercontent.com/u/30189218?v=4"
        },
        {
          "type": "User",
          "login": "paulfantom",
          "commits": 218,
          "avatar_url": "https://avatars.githubusercontent.com/u/3531758?v=4"
        },
        {
          "type": "User",
          "login": "lilic",
          "commits": 217,
          "avatar_url": "https://avatars.githubusercontent.com/u/6232346?v=4"
        },
        {
          "type": "User",
          "login": "s-urbaniak",
          "commits": 199,
          "avatar_url": "https://avatars.githubusercontent.com/u/375856?v=4"
        },
        {
          "type": "User",
          "login": "simonpasquier",
          "commits": 194,
          "avatar_url": "https://avatars.githubusercontent.com/u/2587585?v=4"
        },
        {
          "type": "User",
          "login": "brancz",
          "commits": 155,
          "avatar_url": "https://avatars.githubusercontent.com/u/4546722?v=4"
        },
        {
          "type": "User",
          "login": "dgrisonnet",
          "commits": 106,
          "avatar_url": "https://avatars.githubusercontent.com/u/22327577?v=4"
        },
        {
          "type": "User",
          "login": "squat",
          "commits": 79,
          "avatar_url": "https://avatars.githubusercontent.com/u/20484159?v=4"
        },
        {
          "type": "User",
          "login": "slashpai",
          "commits": 63,
          "avatar_url": "https://avatars.githubusercontent.com/u/5638849?v=4"
        },
        {
          "type": "User",
          "login": "philipgough",
          "commits": 54,
          "avatar_url": "https://avatars.githubusercontent.com/u/5781491?v=4"
        }
      ],
      "contributors_sampled": 95,
      "top_contributor_share": 0.346
    },
    "quality_signals": {
      "has_ci": false,
      "has_tests": true,
      "ci_workflows": [],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 47 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": null,
            "reason": "no workflows found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 1,
            "reason": "dependency not pinned by hash detected -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": null,
            "reason": "No tokens found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "116 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "bf7b4b0fe8e263ace7fcdd3db2d90365dd937bb1",
        "ran_at": "2026-07-24T21:50:53Z",
        "aggregate_score": 1.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": null,
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/arajkumar/cluster-monitoring-operator",
    "host": "github.com",
    "name": "cluster-monitoring-operator",
    "owner": "arajkumar"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "critical",
      "name": "Overall health",
      "note": "Abandonment Policy applies a 85% multiplier to weighted overall health.",
      "notes": [
        {
          "code": "abandonment_overall_adjustment",
          "params": {
            "cap": 0,
            "pct": 85
          }
        }
      ],
      "value": 26,
      "inputs": {
        "security": 18,
        "vitality": 20,
        "community": 12,
        "governance": 47,
        "engineering": 45,
        "abandonment_cap": null,
        "abandonment_state": "at_risk",
        "abandonment_multiplier": 85,
        "weighted_overall_before_abandonment": 30,
        "overall_after_abandonment_multiplier": 26
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "critical",
        "name": "Vitality",
        "value": 20,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "commits_last_year": 0,
              "human_commit_share": 0.96,
              "days_since_last_push": 1514,
              "active_weeks_last_year": 0
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1514 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1514
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "0/52 weeks with commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "0 commits in the last year",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 48,
            "inputs": {
              "releases_count": 6,
              "latest_release_tag": "v0.1.1",
              "releases_from_tags": true,
              "days_since_latest_release": 2860,
              "mean_days_between_releases": 32.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "6 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2860 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2860
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~32.2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 32.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "cap": null,
              "state": "at_risk",
              "guards": [
                "no_open_demand"
              ],
              "signals": [
                "release_stall",
                "scorecard_unmaintained"
              ],
              "red_flag": true,
              "multiplier_pct": 85,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": 0,
              "unanswered_open_issues": 0,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1681,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "no human commit for 1681 days; 2 unmet obligation(s): releases stalled, Scorecard reports it unmaintained",
                "points": 85,
                "status": "partial",
                "details": [
                  {
                    "code": "abandonment_flagged",
                    "params": {
                      "days": 1681,
                      "count": 2,
                      "signals": "releases stalled, Scorecard reports it unmaintained"
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 12,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 47,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "good",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "bus_factor": 3,
              "contributors_sampled": 95,
              "top_contributor_share": 0.346
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "3 contributor(s) cover half of all commits",
                "points": 36,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 35% of commits",
                "points": 14.7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 35
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "95 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 95
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 47 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "followers": 70,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "arajkumar",
              "public_repos": 128,
              "account_age_days": 4879
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "70 followers of arajkumar",
                "points": 13.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 70,
                      "login": "arajkumar"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "128 public repos, account ~13 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 128
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 13
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 45,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "has_ci": false,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "critical",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": false,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "critical",
        "name": "Security",
        "value": 18,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "dangerous_workflow",
                    "packaging",
                    "signed_releases",
                    "token_permissions"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 18,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 13,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 5,
              "scorecard_aggregate": 1.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 47 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no workflows found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 0.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "No tokens found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "116 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 15
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 68,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.802,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "77 of 96 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 77,
                      "sampled": 96
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 73,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile",
                "examples/example-app/Makefile",
                "vendor/github.com/gogo/protobuf/gogoproto/Makefile",
                "vendor/github.com/gogo/protobuf/proto/Makefile",
                "vendor/github.com/gogo/protobuf/protoc-gen-gogo/descriptor/Makefile",
                "vendor/github.com/jmespath/go-jmespath/Makefile",
                "vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile",
                "vendor/github.com/opentracing/opentracing-go/Makefile",
                "vendor/github.com/pkg/errors/Makefile",
                "vendor/github.com/prometheus/common/sigv4/Makefile",
                "vendor/github.com/prometheus/procfs/Makefile",
                "vendor/github.com/spf13/cobra/Makefile",
                "vendor/github.com/uber/jaeger-client-go/Makefile",
                "vendor/go.uber.org/atomic/Makefile",
                "vendor/go.uber.org/goleak/Makefile",
                "vendor/golang.org/x/net/http2/Makefile",
                "vendor/google.golang.org/grpc/Makefile",
                "vendor/sigs.k8s.io/kustomize/kyaml/openapi/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod",
                "hack/tools/go.mod",
                "vendor/github.com/Azure/go-ansiterm/go.mod",
                "vendor/github.com/Jeffail/gabs/go.mod",
                "vendor/github.com/Jeffail/gabs/v2/go.mod",
                "vendor/github.com/alecthomas/units/go.mod",
                "vendor/github.com/asaskevich/govalidator/go.mod",
                "vendor/github.com/blang/semver/v4/go.mod",
                "vendor/github.com/cespare/xxhash/v2/go.mod",
                "vendor/github.com/dennwc/varint/go.mod",
                "vendor/github.com/go-kit/log/go.mod",
                "vendor/github.com/go-logfmt/logfmt/go.mod",
                "vendor/github.com/go-logr/logr/go.mod",
                "vendor/github.com/go-openapi/analysis/go.mod",
                "vendor/github.com/go-openapi/errors/go.mod",
                "vendor/github.com/go-openapi/jsonpointer/go.mod",
                "vendor/github.com/go-openapi/jsonreference/go.mod",
                "vendor/github.com/go-openapi/loads/go.mod",
                "vendor/github.com/go-openapi/runtime/go.mod",
                "vendor/github.com/go-openapi/spec/go.mod",
                "vendor/github.com/go-openapi/strfmt/go.mod",
                "vendor/github.com/go-openapi/swag/go.mod",
                "vendor/github.com/go-openapi/validate/go.mod",
                "vendor/github.com/go-stack/stack/go.mod",
                "vendor/github.com/golang/snappy/go.mod",
                "vendor/github.com/google/btree/go.mod",
                "vendor/github.com/google/gofuzz/go.mod",
                "vendor/github.com/google/shlex/go.mod",
                "vendor/github.com/google/uuid/go.mod",
                "vendor/github.com/hashicorp/go-version/go.mod",
                "vendor/github.com/imdario/mergo/go.mod",
                "vendor/github.com/jmespath/go-jmespath/go.mod",
                "vendor/github.com/josharian/intern/go.mod",
                "vendor/github.com/jpillora/backoff/go.mod",
                "vendor/github.com/json-iterator/go/go.mod",
                "vendor/github.com/mitchellh/go-wordwrap/go.mod",
                "vendor/github.com/mitchellh/hashstructure/go.mod",
                "vendor/github.com/mitchellh/mapstructure/go.mod",
                "vendor/github.com/moby/spdystream/go.mod",
                "vendor/github.com/moby/term/go.mod",
                "vendor/github.com/opencontainers/go-digest/go.mod",
                "vendor/github.com/opentracing/opentracing-go/go.mod",
                "vendor/github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/go.mod",
                "vendor/github.com/prometheus/common/sigv4/go.mod",
                "vendor/github.com/prometheus/procfs/go.mod",
                "vendor/github.com/russross/blackfriday/go.mod",
                "vendor/github.com/spf13/cobra/go.mod",
                "vendor/github.com/spf13/pflag/go.mod",
                "vendor/github.com/xlab/treeprint/go.mod",
                "vendor/go.uber.org/atomic/go.mod",
                "vendor/go.uber.org/goleak/go.mod",
                "vendor/golang.org/x/lint/go.mod",
                "vendor/golang.org/x/oauth2/go.mod",
                "vendor/golang.org/x/term/go.mod",
                "vendor/google.golang.org/grpc/go.mod",
                "vendor/gopkg.in/yaml.v2/go.mod",
                "vendor/gopkg.in/yaml.v3/go.mod",
                "vendor/k8s.io/klog/v2/go.mod",
                "vendor/sigs.k8s.io/yaml/go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile, examples/example-app/Makefile, vendor/github.com/gogo/protobuf/gogoproto/Makefile, vendor/github.com/gogo/protobuf/proto/Makefile, vendor/github.com/gogo/protobuf/protoc-gen-gogo/descriptor/Makefile, vendor/github.com/jmespath/go-jmespath/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/opentracing/opentracing-go/Makefile, vendor/github.com/pkg/errors/Makefile, vendor/github.com/prometheus/common/sigv4/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/github.com/uber/jaeger-client-go/Makefile, vendor/go.uber.org/atomic/Makefile, vendor/go.uber.org/goleak/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile, vendor/sigs.k8s.io/kustomize/kyaml/openapi/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile, examples/example-app/Makefile, vendor/github.com/gogo/protobuf/gogoproto/Makefile, vendor/github.com/gogo/protobuf/proto/Makefile, vendor/github.com/gogo/protobuf/protoc-gen-gogo/descriptor/Makefile, vendor/github.com/jmespath/go-jmespath/Makefile, vendor/github.com/matttproud/golang_protobuf_extensions/pbutil/Makefile, vendor/github.com/opentracing/opentracing-go/Makefile, vendor/github.com/pkg/errors/Makefile, vendor/github.com/prometheus/common/sigv4/Makefile, vendor/github.com/prometheus/procfs/Makefile, vendor/github.com/spf13/cobra/Makefile, vendor/github.com/uber/jaeger-client-go/Makefile, vendor/go.uber.org/atomic/Makefile, vendor/go.uber.org/goleak/Makefile, vendor/golang.org/x/net/http2/Makefile, vendor/google.golang.org/grpc/Makefile, vendor/sigs.k8s.io/kustomize/kyaml/openapi/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 132385,
              "source_files_sampled": 75,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/75 source files over 60KB",
                "points": 53.5,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 75,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "good",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": [
                "vendor/github.com/gogo/protobuf/gogoproto/gogo.proto",
                "vendor/github.com/googleapis/gnostic/extensions/extension.proto",
                "vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto",
                "vendor/github.com/openshift/api/route/v1/generated.proto",
                "vendor/github.com/openshift/api/security/v1/generated.proto",
                "vendor/github.com/thanos-io/thanos/pkg/store/labelpb/types.proto",
                "vendor/github.com/thanos-io/thanos/pkg/store/storepb/prompb/remote.proto",
                "vendor/github.com/thanos-io/thanos/pkg/store/storepb/prompb/types.proto",
                "vendor/github.com/thanos-io/thanos/pkg/store/storepb/rpc.proto",
                "vendor/github.com/thanos-io/thanos/pkg/store/storepb/types.proto",
                "vendor/google.golang.org/appengine/internal/base/api_base.proto",
                "vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto",
                "vendor/google.golang.org/appengine/internal/log/log_service.proto",
                "vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto",
                "vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto",
                "vendor/k8s.io/api/admission/v1/generated.proto",
                "vendor/k8s.io/api/admission/v1beta1/generated.proto",
                "vendor/k8s.io/api/admissionregistration/v1/generated.proto",
                "vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto",
                "vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto",
                "vendor/k8s.io/api/apps/v1/generated.proto",
                "vendor/k8s.io/api/apps/v1beta1/generated.proto",
                "vendor/k8s.io/api/apps/v1beta2/generated.proto",
                "vendor/k8s.io/api/authentication/v1/generated.proto",
                "vendor/k8s.io/api/authentication/v1beta1/generated.proto",
                "vendor/k8s.io/api/authorization/v1/generated.proto",
                "vendor/k8s.io/api/authorization/v1beta1/generated.proto",
                "vendor/k8s.io/api/autoscaling/v1/generated.proto",
                "vendor/k8s.io/api/autoscaling/v2beta1/generated.proto",
                "vendor/k8s.io/api/autoscaling/v2beta2/generated.proto",
                "vendor/k8s.io/api/batch/v1/generated.proto",
                "vendor/k8s.io/api/batch/v1beta1/generated.proto",
                "vendor/k8s.io/api/certificates/v1/generated.proto",
                "vendor/k8s.io/api/certificates/v1beta1/generated.proto",
                "vendor/k8s.io/api/coordination/v1/generated.proto",
                "vendor/k8s.io/api/coordination/v1beta1/generated.proto",
                "vendor/k8s.io/api/core/v1/generated.proto",
                "vendor/k8s.io/api/discovery/v1/generated.proto",
                "vendor/k8s.io/api/discovery/v1beta1/generated.proto",
                "vendor/k8s.io/api/events/v1/generated.proto",
                "vendor/k8s.io/api/events/v1beta1/generated.proto",
                "vendor/k8s.io/api/extensions/v1beta1/generated.proto",
                "vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto",
                "vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto",
                "vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto",
                "vendor/k8s.io/api/networking/v1/generated.proto",
                "vendor/k8s.io/api/networking/v1beta1/generated.proto",
                "vendor/k8s.io/api/node/v1/generated.proto",
                "vendor/k8s.io/api/node/v1alpha1/generated.proto",
                "vendor/k8s.io/api/node/v1beta1/generated.proto",
                "vendor/k8s.io/api/policy/v1/generated.proto",
                "vendor/k8s.io/api/policy/v1beta1/generated.proto",
                "vendor/k8s.io/api/rbac/v1/generated.proto",
                "vendor/k8s.io/api/rbac/v1alpha1/generated.proto",
                "vendor/k8s.io/api/rbac/v1beta1/generated.proto",
                "vendor/k8s.io/api/scheduling/v1/generated.proto",
                "vendor/k8s.io/api/scheduling/v1alpha1/generated.proto",
                "vendor/k8s.io/api/scheduling/v1beta1/generated.proto",
                "vendor/k8s.io/api/storage/v1/generated.proto",
                "vendor/k8s.io/api/storage/v1alpha1/generated.proto",
                "vendor/k8s.io/api/storage/v1beta1/generated.proto",
                "vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto",
                "vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/runtime/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto",
                "vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto",
                "vendor/k8s.io/apiserver/pkg/apis/audit/v1/generated.proto",
                "vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/generated.proto",
                "vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/generated.proto",
                "vendor/k8s.io/metrics/pkg/apis/metrics/v1alpha1/generated.proto",
                "vendor/k8s.io/metrics/pkg/apis/metrics/v1beta1/generated.proto",
                "vendor/sigs.k8s.io/kustomize/kyaml/openapi/kubernetesapi/v1204/swagger.json",
                "vendor/sigs.k8s.io/kustomize/kyaml/openapi/kustomizationapi/swagger.json"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "vendor/github.com/gogo/protobuf/gogoproto/gogo.proto, vendor/github.com/googleapis/gnostic/extensions/extension.proto, vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto, vendor/github.com/openshift/api/route/v1/generated.proto, vendor/github.com/openshift/api/security/v1/generated.proto, vendor/github.com/thanos-io/thanos/pkg/store/labelpb/types.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/prompb/remote.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/prompb/types.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/rpc.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/types.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto, vendor/k8s.io/api/admission/v1/generated.proto, vendor/k8s.io/api/admission/v1beta1/generated.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha1/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto, vendor/k8s.io/apiserver/pkg/apis/audit/v1/generated.proto, vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/generated.proto, vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/generated.proto, vendor/k8s.io/metrics/pkg/apis/metrics/v1alpha1/generated.proto, vendor/k8s.io/metrics/pkg/apis/metrics/v1beta1/generated.proto, vendor/sigs.k8s.io/kustomize/kyaml/openapi/kubernetesapi/v1204/swagger.json, vendor/sigs.k8s.io/kustomize/kyaml/openapi/kustomizationapi/swagger.json",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "vendor/github.com/gogo/protobuf/gogoproto/gogo.proto, vendor/github.com/googleapis/gnostic/extensions/extension.proto, vendor/github.com/googleapis/gnostic/openapiv2/OpenAPIv2.proto, vendor/github.com/openshift/api/route/v1/generated.proto, vendor/github.com/openshift/api/security/v1/generated.proto, vendor/github.com/thanos-io/thanos/pkg/store/labelpb/types.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/prompb/remote.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/prompb/types.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/rpc.proto, vendor/github.com/thanos-io/thanos/pkg/store/storepb/types.proto, vendor/google.golang.org/appengine/internal/base/api_base.proto, vendor/google.golang.org/appengine/internal/datastore/datastore_v3.proto, vendor/google.golang.org/appengine/internal/log/log_service.proto, vendor/google.golang.org/appengine/internal/remote_api/remote_api.proto, vendor/google.golang.org/appengine/internal/urlfetch/urlfetch_service.proto, vendor/k8s.io/api/admission/v1/generated.proto, vendor/k8s.io/api/admission/v1beta1/generated.proto, vendor/k8s.io/api/admissionregistration/v1/generated.proto, vendor/k8s.io/api/admissionregistration/v1beta1/generated.proto, vendor/k8s.io/api/apiserverinternal/v1alpha1/generated.proto, vendor/k8s.io/api/apps/v1/generated.proto, vendor/k8s.io/api/apps/v1beta1/generated.proto, vendor/k8s.io/api/apps/v1beta2/generated.proto, vendor/k8s.io/api/authentication/v1/generated.proto, vendor/k8s.io/api/authentication/v1beta1/generated.proto, vendor/k8s.io/api/authorization/v1/generated.proto, vendor/k8s.io/api/authorization/v1beta1/generated.proto, vendor/k8s.io/api/autoscaling/v1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta1/generated.proto, vendor/k8s.io/api/autoscaling/v2beta2/generated.proto, vendor/k8s.io/api/batch/v1/generated.proto, vendor/k8s.io/api/batch/v1beta1/generated.proto, vendor/k8s.io/api/certificates/v1/generated.proto, vendor/k8s.io/api/certificates/v1beta1/generated.proto, vendor/k8s.io/api/coordination/v1/generated.proto, vendor/k8s.io/api/coordination/v1beta1/generated.proto, vendor/k8s.io/api/core/v1/generated.proto, vendor/k8s.io/api/discovery/v1/generated.proto, vendor/k8s.io/api/discovery/v1beta1/generated.proto, vendor/k8s.io/api/events/v1/generated.proto, vendor/k8s.io/api/events/v1beta1/generated.proto, vendor/k8s.io/api/extensions/v1beta1/generated.proto, vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto, vendor/k8s.io/api/flowcontrol/v1beta1/generated.proto, vendor/k8s.io/api/imagepolicy/v1alpha1/generated.proto, vendor/k8s.io/api/networking/v1/generated.proto, vendor/k8s.io/api/networking/v1beta1/generated.proto, vendor/k8s.io/api/node/v1/generated.proto, vendor/k8s.io/api/node/v1alpha1/generated.proto, vendor/k8s.io/api/node/v1beta1/generated.proto, vendor/k8s.io/api/policy/v1/generated.proto, vendor/k8s.io/api/policy/v1beta1/generated.proto, vendor/k8s.io/api/rbac/v1/generated.proto, vendor/k8s.io/api/rbac/v1alpha1/generated.proto, vendor/k8s.io/api/rbac/v1beta1/generated.proto, vendor/k8s.io/api/scheduling/v1/generated.proto, vendor/k8s.io/api/scheduling/v1alpha1/generated.proto, vendor/k8s.io/api/scheduling/v1beta1/generated.proto, vendor/k8s.io/api/storage/v1/generated.proto, vendor/k8s.io/api/storage/v1alpha1/generated.proto, vendor/k8s.io/api/storage/v1beta1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.proto, vendor/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/api/resource/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto, vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/generated.proto, vendor/k8s.io/apimachinery/pkg/runtime/schema/generated.proto, vendor/k8s.io/apimachinery/pkg/util/intstr/generated.proto, vendor/k8s.io/apiserver/pkg/apis/audit/v1/generated.proto, vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/generated.proto, vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/generated.proto, vendor/k8s.io/metrics/pkg/apis/metrics/v1alpha1/generated.proto, vendor/k8s.io/metrics/pkg/apis/metrics/v1beta1/generated.proto, vendor/sigs.k8s.io/kustomize/kyaml/openapi/kubernetesapi/v1204/swagger.json, vendor/sigs.k8s.io/kustomize/kyaml/openapi/kustomizationapi/swagger.json"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Community profile unavailable",
    "go package 'github.com/openshift/cluster-monitoring-operator' points at a different repository (https://github.com/openshift/cluster-monitoring-operator); excluded from ecosystem scoring",
    "Could not fetch go package 'github.com/openshift/cluster-monitoring-operator/hack' from its registry",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T21:51:16.993708Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/arajkumar/cluster-monitoring-operator.svg",
  "full_name": "arajkumar/cluster-monitoring-operator",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsGo.