Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-30 19:41 UTC
balena-io-modules / mahler-rs
An automated job orchestration library to build and execute dynamic workflows.
balena-io-modules/mahler-rs holds a health index of 62 out of 100, placing it in the Moderate band. It scores highest on Vitality (89/100) and lowest on Community & Adoption (37/100). It was last updated 1 day ago. A single contributor accounts for most of its recent work.
62
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
62
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
balena-io-modulesOrganization
15 followers298 public repossince Mar 2016
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| crates.io | mahler | 0.26.0 | 2,178 | 41 | 1 day ago | automationworkflowplanningorchestrationhtn |
| crates.io | mahler-core | 0.26.0 | 2,179 | 24 | 1 day ago | libraryjobworkfloworchestration |
| crates.io | mahler-derive | 0.26.0 | 2,181 | 24 | 1 day ago | macroderivejobworkfloworchestration |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
89
Development activity
82Good
How it's scored
| 36/36 | Push recency — last push 1 days ago |
| 18.7/36 | Commit cadence — 27/52 weeks with commits |
| 18/18 | Commit volume — 167 commits in the last year |
| 9/10 | OpenSSF Scorecard: Maintained — 11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9 |
Inputs used
| commits_last_year | 167 |
| human_commit_share | 0.63 |
| days_since_last_push | 1 |
| active_weeks_last_year | 27 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 69 releases published |
| 36/36 | Release recency — latest release 1 days ago |
| 27/27 | Release cadence — a release every ~17.7 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 69 |
| latest_release_tag | v0.26.0 |
| releases_from_tags | no |
| days_since_latest_release | 1 |
| mean_days_between_releases | 17.7 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
37
Popularity & adoption
8Critical
How it's scored
| 7.7/60 | Stars — 4 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 1 watchers |
Inputs used
| forks | 0 |
| stars | 4 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
64Moderate
How it's scored
| 50.9/80 | Monthly downloads — 6,538 downloads/month across crates |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | mahler, mahler-core, mahler-derive |
| dependents | — |
| ecosystems | crates |
| total_downloads | 57,878 |
| monthly_downloads | 6,538 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
60
Maintainer resilience (bus factor)
13Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
How it's scored
| 38.9/46.8 | Issue resolution — 83% of issues closed |
| 35.7/38.3 | PR acceptance — 69/74 decided PRs merged |
| 7.5/15 | OpenSSF Scorecard: Code-Review — Found 8/16 approved changesets -- score normalized to 5 |
Inputs used
| merged_prs | 69 |
| open_issues | 2 |
| closed_issues | 10 |
| issue_closed_ratio | 0.833 |
| closed_unmerged_prs | 5 |
Ownership & stewardship
64Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 8.7/25 | Owner reach — 15 followers of balena-io-modules |
| 25/25 | Track record — 298 public repos, account ~10 yr old |
Inputs used
| followers | 15 |
| owner_type | Organization |
| is_verified | — |
| owner_login | balena-io-modules |
| public_repos | 298 |
| account_age_days | 3,796 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 3 package(s) on crates |
| 35/35 | Publish recency — latest publish 1 days ago |
| 20/20 | Version history — 41 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | mahler, mahler-core, mahler-derive |
| ecosystems | crates |
| any_deprecated | no |
| min_days_since_publish | 1 |
Engineering Quality
Are baseline engineering and documentation practices in place?
65
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 8 out of 8 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
60Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 10/10 | Topics — 6 topics |
| 10/10 | Wiki |
Inputs used
| topics | automation, orchestration, planning, workflows, pipelines, htn |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
50
Security posture
50Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 8 out of 8 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 3.8/7.5 | Code-Review — Found 8/16 approved changesets -- score normalized to 5 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 6.8/7.5 | Maintained — 11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool is run on all commits |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 5 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
54
Agent context & guidance
36At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 36.4/40 | Legible commit history — 43 of 63 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.683 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
56Moderate
How it's scored
| 12.6/18 | One-command bootstrap — Cargo.toml, examples/composer/Cargo.toml, examples/readme/Cargo.toml (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Rust (statically typed) |
| 10/10 | Reproducible environment — Dockerfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | Cargo.toml, examples/composer/Cargo.toml, examples/readme/Cargo.toml, mahler-core/Cargo.toml, mahler-derive/Cargo.toml, mahler/Cargo.toml |
| dependency_bot_commit_share | 0 |
Code legibility for models
98Excellent
How it's scored
| 45/45 | Type-checkable code — Rust (statically typed) |
| 53.2/55 | Manageable file sizes — 2/62 source files over 60KB |
Inputs used
| primary_language | Rust |
| largest_source_bytes | 91,447 |
| source_files_sampled | 62 |
| oversized_source_files | 2 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
4GitHub stars
1contributors
167commits, last 12 months
1days since last push
69releases
1bus factor
2open issues
crates.iopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- No resolved dependencies carried a version and a supported ecosystem
More detail
OpenSSF Scorecard 5.0 / 10
5.0aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 8 out of 8 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 5 | Code-Review | Found 8/16 approved changesets -- score normalized to 5 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 9 | Maintained | 11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool is run on all commits |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 22
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| crates.io | async-trait | — | mahler-core/Cargo.toml |
| crates.io | futures | — | mahler-core/Cargo.toml |
| crates.io | json-patch | — | mahler-core/Cargo.toml |
| crates.io | jsonptr | — | mahler-core/Cargo.toml |
| crates.io | matchit | — | mahler-core/Cargo.toml |
| crates.io | serde_core | — | mahler-core/Cargo.toml |
| crates.io | serde_json | — | mahler-core/Cargo.toml |
| crates.io | tokio | — | mahler-core/Cargo.toml |
| crates.io | quote | 1.0 | mahler-derive/Cargo.toml |
| crates.io | proc-macro2 | 1.0 | mahler-derive/Cargo.toml |
| crates.io | syn | 2.0 | mahler-derive/Cargo.toml |
| crates.io | mahler-core | 0 | mahler/Cargo.toml |
| crates.io | mahler-derive | 0 | mahler/Cargo.toml |
| crates.io | async-trait | — | mahler/Cargo.toml |
| crates.io | json-patch | — | mahler/Cargo.toml |
| crates.io | jsonptr | — | mahler/Cargo.toml |
| crates.io | matchit | — | mahler/Cargo.toml |
| crates.io | tokio-stream | — | mahler/Cargo.toml |
| crates.io | serde_json | — | mahler/Cargo.toml |
| crates.io | tracing | — | mahler/Cargo.toml |
| crates.io | tokio | — | mahler/Cargo.toml |
| crates.io | async-stream | 0.3 | mahler/Cargo.toml |
All dependencies 19
Full resolved dependency set from the GitHub dependency graph: 8 direct and 11 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| crates.io | async-stream | — | direct |
| crates.io | mahler-core | — | direct |
| crates.io | mahler-derive | — | direct |
| crates.io | proc-macro2 | — | direct |
| crates.io | quote | — | direct |
| crates.io | serde_json | — | direct |
| crates.io | syn | — | direct |
| crates.io | tokio | — | direct |
| crates.io | anyhow | — | indirect |
| crates.io | assert_cmd | — | indirect |
| crates.io | bollard | — | indirect |
| crates.io | dedent | — | indirect |
| crates.io | futures-util | — | indirect |
| crates.io | predicates | — | indirect |
| crates.io | pretty_assertions | — | indirect |
| crates.io | serde | — | indirect |
| crates.io | thiserror | — | indirect |
| crates.io | tokio-test | — | indirect |
| crates.io | tracing-subscriber | — | indirect |
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"automation",
"orchestration",
"planning",
"workflows",
"pipelines",
"htn"
],
"is_fork": false,
"size_kb": 1161,
"has_wiki": true,
"homepage": null,
"languages": {
"Rust": 574405,
"Dockerfile": 376
},
"pushed_at": "2026-07-29T08:04:04Z",
"created_at": "2023-12-11T14:09:55Z",
"owner_type": "Organization",
"updated_at": "2026-07-29T08:05:08Z",
"description": "An automated job orchestration library to build and execute dynamic workflows.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Rust",
"significant_languages": [
"Rust"
]
},
"owner": {
"blog": "https://www.balena.io",
"name": null,
"type": "Organization",
"login": "balena-io-modules",
"company": null,
"location": null,
"followers": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/17724750?v=4",
"created_at": "2016-03-08T13:41:49Z",
"is_verified": null,
"public_repos": 298,
"account_age_days": 3796
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.26.0",
"kind": "minor",
"published_at": "2026-07-29T08:04:31Z"
},
{
"tag": "v0.25.12",
"kind": "patch",
"published_at": "2026-05-05T19:24:32Z"
},
{
"tag": "v0.25.11",
"kind": "patch",
"published_at": "2026-05-04T21:17:27Z"
},
{
"tag": "v0.25.10",
"kind": "patch",
"published_at": "2026-03-23T21:50:19Z"
},
{
"tag": "v0.25.9",
"kind": "patch",
"published_at": "2026-03-20T18:10:14Z"
},
{
"tag": "v0.25.8",
"kind": "patch",
"published_at": "2026-03-13T18:26:35Z"
},
{
"tag": "v0.25.7",
"kind": "patch",
"published_at": "2026-03-10T23:36:27Z"
},
{
"tag": "v0.25.6",
"kind": "patch",
"published_at": "2026-03-09T21:15:48Z"
},
{
"tag": "v0.25.5",
"kind": "patch",
"published_at": "2026-02-23T22:43:29Z"
},
{
"tag": "v0.25.4",
"kind": "patch",
"published_at": "2026-02-19T18:44:05Z"
},
{
"tag": "v0.25.3",
"kind": "patch",
"published_at": "2026-02-19T18:13:26Z"
},
{
"tag": "v0.25.2",
"kind": "patch",
"published_at": "2026-02-16T22:52:19Z"
},
{
"tag": "v0.25.1",
"kind": "patch",
"published_at": "2026-02-12T00:06:11Z"
},
{
"tag": "v0.25.0",
"kind": "minor",
"published_at": "2026-02-09T22:56:43Z"
},
{
"tag": "v0.24.1",
"kind": "patch",
"published_at": "2026-01-20T08:31:22Z"
},
{
"tag": "v0.24.0",
"kind": "minor",
"published_at": "2026-01-15T19:11:36Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2025-12-22T14:50:55Z"
},
{
"tag": "v0.22.1",
"kind": "patch",
"published_at": "2025-12-06T06:43:45Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2025-11-29T14:02:29Z"
},
{
"tag": "v0.21.4",
"kind": "patch",
"published_at": "2025-10-11T06:44:41Z"
},
{
"tag": "v0.21.3",
"kind": "patch",
"published_at": "2025-10-02T16:12:02Z"
},
{
"tag": "v0.21.2",
"kind": "patch",
"published_at": "2025-10-02T14:29:19Z"
},
{
"tag": "v0.21.1",
"kind": "patch",
"published_at": "2025-10-02T14:19:17Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2025-10-02T08:19:11Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2025-09-11T15:10:33Z"
},
{
"tag": "v0.19.7",
"kind": "patch",
"published_at": "2025-09-09T04:42:49Z"
},
{
"tag": "v0.19.6",
"kind": "patch",
"published_at": "2025-08-26T15:58:29Z"
},
{
"tag": "v0.19.5",
"kind": "patch",
"published_at": "2025-08-26T15:19:21Z"
},
{
"tag": "v0.19.4",
"kind": "patch",
"published_at": "2025-08-13T01:55:21Z"
},
{
"tag": "v0.19.3",
"kind": "patch",
"published_at": "2025-08-11T21:24:48Z"
},
{
"tag": "v0.19.2",
"kind": "patch",
"published_at": "2025-08-08T20:14:16Z"
},
{
"tag": "v0.19.1",
"kind": "patch",
"published_at": "2025-08-08T19:46:38Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2025-08-04T16:00:18Z"
},
{
"tag": "v0.18.2",
"kind": "patch",
"published_at": "2025-08-01T15:28:13Z"
},
{
"tag": "v0.18.1",
"kind": "patch",
"published_at": "2025-08-01T14:21:06Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2025-07-29T15:19:50Z"
},
{
"tag": "v0.17.3",
"kind": "patch",
"published_at": "2025-07-27T19:59:43Z"
},
{
"tag": "v0.17.2",
"kind": "patch",
"published_at": "2025-07-26T05:52:58Z"
},
{
"tag": "v0.17.1",
"kind": "patch",
"published_at": "2025-07-23T21:11:51Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2025-07-05T18:12:53Z"
},
{
"tag": "v0.16.1",
"kind": "patch",
"published_at": "2025-07-02T05:18:41Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2025-06-24T17:55:47Z"
},
{
"tag": "v0.15.2",
"kind": "patch",
"published_at": "2025-06-12T15:13:38Z"
},
{
"tag": "v0.15.1",
"kind": "patch",
"published_at": "2025-06-11T21:46:45Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2025-06-11T20:27:48Z"
},
{
"tag": "v0.14.3",
"kind": "patch",
"published_at": "2025-06-06T18:02:31Z"
},
{
"tag": "v0.14.2",
"kind": "patch",
"published_at": "2025-06-05T19:39:59Z"
},
{
"tag": "v0.14.1",
"kind": "patch",
"published_at": "2025-06-03T21:49:18Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2025-05-19T21:07:43Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2025-05-10T15:44:23Z"
},
{
"tag": "v0.12.2",
"kind": "patch",
"published_at": "2025-04-29T03:05:48Z"
},
{
"tag": "v0.12.1",
"kind": "patch",
"published_at": "2025-04-21T00:29:55Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2025-04-20T23:36:27Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2025-04-11T03:17:58Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2025-04-10T14:46:30Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2025-04-06T01:25:47Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2025-04-05T22:37:32Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2025-04-05T19:59:51Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2025-03-23T18:08:47Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2025-03-21T19:42:25Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2025-02-16T22:51:45Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2025-02-14T18:54:24Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2025-02-14T18:24:07Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2025-02-11T21:39:59Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2025-01-30T19:59:43Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2024-10-29T19:58:51Z"
},
{
"tag": "v0.0.4",
"kind": "patch",
"published_at": "2024-10-29T19:03:19Z"
},
{
"tag": "v0.0.3",
"kind": "patch",
"published_at": "2024-10-25T23:52:38Z"
},
{
"tag": "v0.0.2",
"kind": "patch",
"published_at": "2024-10-25T23:38:58Z"
}
],
"recent_commits": [
{
"oid": "876d8e29b1b4a6dca12e6fcbdff5eda3b4adb35f",
"body": null,
"is_bot": true,
"headline": "v0.26.0",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-07-29T08:04:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d8acd4693c8104cb623546479e53320c7bc2f28",
"body": "Add support for post-workflow hooks",
"is_bot": true,
"headline": "Merge pull request #86 from balena-io-modules/positional-tasks",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-07-29T08:03:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f38f8c79bb67d07ffab6add63bfe025102e0b76",
"body": "This replaces the single `cleanup` hook allowing to define multiple\nhooks. Hooks don't depend on changes on the target state and will fire every\ntime their condition applies, and included in the workflow returned by `find_workflow`\nafter the plan to reach the target state. Hooks will be appended eve\n[…]\nound, even if the plan is empty, but will be skipped if a plan cannot\nbe found.\n\nWorker also has a new `find_plan` method that looks for a plan to the\ntarget state excluding hooks.\n\nChange-type: minor",
"is_bot": false,
"headline": "Add support for post workflow hooks",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-07-28T17:44:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "129a9142d68b9f2a895af49ded54c43a24dd2b64",
"body": null,
"is_bot": false,
"headline": "Update dependencies",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-07-21T22:09:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67d734becee72a2094977fc8e436a17e0a2c2071",
"body": null,
"is_bot": true,
"headline": "v0.25.12",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-05-05T19:23:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92222e92bc8dffa9b5e977b1bd4cf8b7612c875a",
"body": "Fix publishing issue",
"is_bot": true,
"headline": "Merge pull request #85 from balena-io-modules/fix-crate-build",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-05-05T19:23:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "520ca0f190dfb3eb6a0b0b243a535eec7c505258",
"body": "crates.io allows at most 5 tags per crate\n\nChange-type: patch",
"is_bot": false,
"headline": "Fix publishing issue",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-05-04T22:01:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e378b788ed4acff02c9b504cce8bd2e6b4f5fbf",
"body": null,
"is_bot": true,
"headline": "v0.25.11",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-05-04T21:16:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70bcbaa108d588e4440e62e55bd9eb726f8c22a2",
"body": "Update dependencies",
"is_bot": true,
"headline": "Merge pull request #84 from balena-io-modules/update-deps",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-05-04T21:16:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d87c972d38279bf1e62b9b4ebf067efb21797e3",
"body": null,
"is_bot": false,
"headline": "Remove experimental warning from README",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-05-04T20:43:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d11d4c9f9db7164690f098505b12eb174288f35",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Update dependencies",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-05-04T15:52:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a87b81b6beb2fb7b1eb3481e806183b463a6d49",
"body": null,
"is_bot": true,
"headline": "v0.25.10",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-03-23T21:49:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95b12e58c2faa43f77be4dd2285f650d2f795028",
"body": "Fix task error rollback",
"is_bot": true,
"headline": "Merge pull request #83 from balena-io-modules/create-rollback-bug",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-03-23T21:49:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01366ac503d8fff809be1b6057a78c5043b5bda8",
"body": "Task execution implementation was not correctly implementing roll-back,\nas it was failing to account for a failure with no patches, a roll-back\nafter removal and other cases.\n\nThis refactors runtime::Channel to send both a patch and a checkpoint\nand modifies workflow to keep track of changes to be able to correctly\nroll-back to the last checkpoint.\n\nChange-type: patch",
"is_bot": false,
"headline": "Fix task error rollback",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-03-23T20:26:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "640f05810974aa60d1b354e127da4fa3c80f3dc6",
"body": null,
"is_bot": true,
"headline": "v0.25.9",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-03-20T18:09:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a9eaf1081878753ec8be80ded18e24b6dcb78eb",
"body": "Add View::commit method",
"is_bot": true,
"headline": "Merge pull request #82 from balena-io-modules/view-commit",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-03-20T18:09:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b6d72ca1e1e1c0ee1e6bd3e5362d759b6887fc2",
"body": "The method, like `View::flush` communicates changes back to the worker,\nhowever, it also created a new rollback checkpoint at the commit state.\nThis is useful for creating changes that must persist after failure of a\ngiven task.\n\nThis also fixes some flush tests that were not correctly checking\nchanges before and after the flush boundary.\n\nChange-type: patch",
"is_bot": false,
"headline": "Add View::commit method",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-03-19T20:11:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "412ef7864d83af0b62bab2d46b67c0daaf945ace",
"body": null,
"is_bot": true,
"headline": "v0.25.8",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-03-13T18:26:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f625043d2a82be0c491bb39f88c718cfd4408ad1",
"body": "Add `default` attribute to State derive macro",
"is_bot": true,
"headline": "Merge pull request #81 from balena-io-modules/mahler-derive-default",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-03-13T18:25:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2742048f6f9da80b77e7ba7469d90d45170ac9e7",
"body": "Replace string-based attribute parsing with proper syn\nPunctuated/Meta parsing, extract de_generics and relevant_fields\nhelpers to eliminate duplication, remove redundant type aliases,\nuse expect() over unwrap(), and document #[mahler(default)]\nserialization behavior.\n\nChange-type: patch",
"is_bot": false,
"headline": "Refactor derive macro: use syn APIs, extract helpers, remove aliases",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-03-13T00:17:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65906bf2fb8a6db947247bb63276fe071da2c6b0",
"body": "The attribute works as #[serde(default)] in that it uses the default\nproperty value when deserializing from JSON\n\nChange-type: patch",
"is_bot": false,
"headline": "Add #[mahler(default)] attribute to derive crate",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-03-13T00:17:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6260442849f46025b082107e34f36a210cd71931",
"body": null,
"is_bot": true,
"headline": "v0.25.7",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-03-10T23:36:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d7e6d6a89ddad8f8d752a984562ff7446ad67bc",
"body": "Create runtime::Id type for handler id uniqueness",
"is_bot": true,
"headline": "Merge pull request #80 from balena-io-modules/handler-ids-closures",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-03-10T23:35:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa386bac11d7a6ff0c7cf335bdf43c6f7f68308c",
"body": "Previously the type name would be use as the id for handlers\n(exceptions, tasks, sensors). This id is not guaranteed to be unique and\ncan fail when using closures. This introduce a new `runtime::Id` type\nthat is based on `TypeId`, keeping the type name for displaying the id.\n\nChange-type: patch",
"is_bot": false,
"headline": "Create runtime::Id type for handler id uniqueness",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-03-10T21:05:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9203fcdef5ce43b025d3f7998f2664c1e6e4fe9d",
"body": null,
"is_bot": true,
"headline": "v0.25.6",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-03-09T21:15:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2ea048064d5e382ae4a2a3a392732ba6761d4d6",
"body": "Add descriptions to exceptions and refactor planner",
"is_bot": true,
"headline": "Merge pull request #79 from balena-io-modules/exception-descriptions",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-03-09T21:14:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "757777dcbcbd30e6e06edac605e680e0d6b62309",
"body": null,
"is_bot": false,
"headline": "Fix worker doc failure",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-03-05T20:48:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebab3c76d0b1f1022dd9dcd1102dd11d861285dd",
"body": "Avoid unnecessary clones. Improve candidate search and merging\noperations",
"is_bot": false,
"headline": "Efficiency improvements to planner",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-03-05T19:09:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12a220c450d38caf42dbdb0b7ba3d6cc4acb06ec",
"body": "Break it up into smaller files and break large functions optimizing for\nreadability\n\nChange-type: patch",
"is_bot": false,
"headline": "Refactor the planner module",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-03-05T19:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fb58da2561dfa3287320fac294082687728d17b",
"body": "The description is used as part of the returned reason for skipped\noperations on the returning workflow.\n\nChange-type: patch",
"is_bot": false,
"headline": "Add `description` field to Exceptions",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-03-05T15:33:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5608055064c3016a4e3250e6031a6aa179b952a3",
"body": "This should make it re-usable by Exceptions as well as Tasks\n\nChange-type: patch",
"is_bot": false,
"headline": "Move Descripton to mahler crate root",
"author_name": "Felipe Lalanne",
"author_login": "pipex",
"committed_at": "2026-03-05T15:33:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b46d45693460aad84e14b1f95096b67b91fb98b3",
"body": null,
"is_bot": true,
"headline": "v0.25.5",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-23T22:43:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7324fafe4e46c71b3d816fe55b4f261b615345b",
"body": "Process exceptions on the last iteration of the planner",
"is_bot": true,
"headline": "Merge pull request #78 from balena-io-modules/fix-exceptions-last-iter",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-23T22:42:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff016c4662aa8afb8c7758a9030fb409ecec6252",
"body": "This fixes a bug where an exception happening on the last iteration of\nthe planner would be discovered but the planning would still fail as no\nfurther state comparisons would take place. This adds one last check\nbefore terminating the search to identify if the target is considered\nreached with the new exceptions.\n\nChange-type: patch",
"is_bot": false,
"headline": "Allow exceptions on the last iteration of the planner",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-23T15:38:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b559032433af348e0bb7307c090dcffba1ef83dc",
"body": null,
"is_bot": true,
"headline": "v0.25.4",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-19T18:43:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac8f595a44d4c6daeec938030fa9f0238b6c63e5",
"body": "Fix bug with DAG::reverse method",
"is_bot": true,
"headline": "Merge pull request #77 from balena-io-modules/dag-reverse-bug",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-19T18:42:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c74e6549d6d1e3a2467d6cef1b78bdfbef00efa1",
"body": "This introduces too much noise for a condition that is expected.\n\nChange-type: patch",
"is_bot": false,
"headline": "Remove tracing information from planning on empty task",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-19T18:33:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01518c33bfeb58544f59027ab1e86a41572b9bfd",
"body": "Makes the operations a bit more memory efficient by avoiding unnecessary\ncloning of the branching state.\n\nChange-type: patch",
"is_bot": false,
"headline": "Simplify DAG Display and Iterator implementations",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-19T18:33:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c634a01ea8662b205261657cae6afe7b23904b5b",
"body": "The issue was with the branch accumulator that could include branches\nfrom nested forks, meaning that on reverse these branches would get merged\ninto the inner dag.\n\nThe method now uses a stack of accumulators that gets a new entry each\ntime a new fork is entered.\n\nChange-type: patch",
"is_bot": false,
"headline": "Fix bug with DAG::reverse merging fork branches",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-19T18:33:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c0ba57675dccc465ffd3d99d4dfdbd57cf51f09",
"body": "Adds a failing test case for an edge condition.",
"is_bot": false,
"headline": "Add test case for a DAG with nested forks",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-19T18:33:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08e0986002702bcbc15b82a3c4bfcbd01647748f",
"body": null,
"is_bot": true,
"headline": "v0.25.3",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-19T18:13:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1eaafdb01457e5805465a1dc79d0234701801cdb",
"body": "Add `SystemTarget` extractor",
"is_bot": true,
"headline": "Merge pull request #76 from balena-io-modules/global-target",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-19T18:12:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2f3b8a8e2eaf7fd9fd2d8519eabed601b17aa57",
"body": "The `SystemTarget` extractor provides access to the target passed to the\nworker/planner to be used by tasks when validating applicability.\n\nA new `target_override` property has been added to `Context`, which\ntells the planner and existing extractors that the target has been\nexplicitly overridden by the user.\n\nThis change is backwards compatible\n\nChange-type: patch",
"is_bot": false,
"headline": "Add `SystemTarget` extractor",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-19T02:57:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "706cf2082e2f957501ab92222e3e21079e7b07bd",
"body": null,
"is_bot": true,
"headline": "v0.25.2",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-16T22:51:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cb0c34287060fa1b0d9ec8c77a04d562e13cdd3",
"body": "Allow Worker::find_workflow to receive both a reference and a value",
"is_bot": true,
"headline": "Merge pull request #75 from balena-io-modules/borrow-target",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-16T22:51:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53a252febecc468d9f22f1beb4b448b63b6654c2",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Allow Worker::find_workflow to receive both a reference and a value",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-16T21:52:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68be1c8d3753468ba76c788ad502ad1009cae328",
"body": null,
"is_bot": true,
"headline": "v0.25.1",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-12T00:05:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc2fa0bedd9530a736360d936ec9b71a7672bc95",
"body": "Sort path args in the order that they appear on the path",
"is_bot": true,
"headline": "Merge pull request #74 from balena-io-modules/sort-path-args",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-12T00:04:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd5a27170525c0768886d5970a79715572d35201",
"body": "This updates `Domain::find_path` to sort the arguments given as\nparameter to use the order they appear on the path. This should ensure\nthat when deserializing args using the `Args` extractor, deserializing\nas a tuple provides the right order.\n\nChange-type: patch",
"is_bot": false,
"headline": "Sort path args in the order that they appear on the path",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-11T22:45:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1acca367aad28c0f084439476defb5adf77d4575",
"body": null,
"is_bot": true,
"headline": "v0.25.0",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-09T22:56:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4413775255f113edb8724e4c5f3ec3c16ad63626",
"body": "Refactor Worker to stream-based execution, add Sensor interface and cleanup tasks",
"is_bot": true,
"headline": "Merge pull request #73 from balena-io-modules/sensors",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-02-09T22:55:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40d04f6bef0e8e6b96a398fa502f1b72f670da16",
"body": "The bug resulted in a malformed DAG when the original graph started with\na fork node.\n\nChange-type: patch",
"is_bot": false,
"headline": "Fix bug in Dag::reverse",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-09T22:29:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "521d18a5ed255137aa78d3eb3705ea91c112c23e",
"body": "The cleanup task is appended at the end of any workflow found for a\ntarget on the Worker domain.\n\nChange-type: minor",
"is_bot": false,
"headline": "Allow defining a cleanup task for the worker",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-09T22:29:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ebb5af09679afc39124472d062cefb7a6aebfe2",
"body": "Tasks can validate the state of the system using the `enforce` macro if\nneeded. If used within methods, it is assumed that the method calls the\nempty task for a reason.\n\nChange-type: minor",
"is_bot": false,
"headline": "Allow tasks called from methods to return no changes",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-09T22:29:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a3f9a08bf8fce210e2bfac041edd6474129fadd",
"body": "Makes the code cleaner and adds an `ignored` field that collects the\noperations skipped during initialization. These operations\nare now returned by the Workflow for more clarity around what has been\nignored by setting exceptions.\n\nChange-type: minor",
"is_bot": false,
"headline": "Clean up Distance definition in planner module",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-09T22:29:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19b478e3f54a740af91a70259a875bdb72af318f",
"body": "Remove the separate runtime task that managed system state updates.\nThe Worker now owns the System directly, simplifying the architecture\nand making several previously async operations synchronous.\n\nKey changes:\n- Remove runtime.rs - Worker owns System directly instead of through Handle\n- Remove tes\n[…]\nhod\n- state() and find_workflow() are now synchronous\n- run_workflow() validates workflow synchronously, returns Stream\n- Add WorkerEvent and WorkflowStatus types for stream events\n\nChange-type: minor",
"is_bot": false,
"headline": "Simplify Worker by removing runtime task indirection",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-09T22:29:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "650fd057276648c6d5ccba1c07166ecd84e8f056",
"body": null,
"is_bot": false,
"headline": "Create Sensor interface",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-09T22:28:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9ffeaf914864578c0863ff417dae01f6161d18c",
"body": "Necessary for some of the dependencies",
"is_bot": false,
"headline": "Update cargo in docker tests",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-04T13:18:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed4645eb09cfc874b1fc9ec231e1059e7bbfa0df",
"body": "The runtime module now contains the logic on writing system changes and\nupdating resources. It is the only place where the system is modified by\nthe code.\n\nChange-type: patch",
"is_bot": false,
"headline": "Move worker system writer task into its own module",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-04T13:18:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64c7daf9ec605622ad6df1bd57fd55cfe354a9af",
"body": "This is useful to use when building serializable types that are based on\nthese collections.",
"is_bot": false,
"headline": "Create is_empty utility function on collection types",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-02-04T13:18:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95d9f251c2cf779ae14807817c1522507ead0b3f",
"body": "Introduce dedicated Reader and Writer wrapper types around tokio's\nRwLock to enforce single-task ownership for writers. Writer::write()\ntakes &mut self to prevent Arc<Writer> from being usable for sharing\nacross tasks, as Arc only provides &T access.\n\nChange-type: minor",
"is_bot": false,
"headline": "Add Reader/Writer wrapper types for RwLock",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-01-24T21:13:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec7a99688cd516fed2d4d12a3ae5feb15a73bbf4",
"body": null,
"is_bot": true,
"headline": "v0.24.1",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-01-20T08:30:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c334a6763fce75a9ba8b8fe1688b9260d240f521",
"body": "Add View::create method for View<Option<T>>",
"is_bot": true,
"headline": "Merge pull request #72 from balena-io-modules/view-insert",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-01-20T08:30:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bd2b521fa8febfde3e5c22e5f12ec40cf78961f",
"body": "The method should allow for easier operation with View objects in create\ntype tasks.\n\nChange-type: patch",
"is_bot": false,
"headline": "Add View::create method for View<Option<T>>",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-01-20T02:47:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d808077bbd38661bc9479faba995e52f1c874ae",
"body": null,
"is_bot": true,
"headline": "v0.24.0",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-01-15T19:11:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ca33d668107345fab385d22bf4e7b8a91846aec",
"body": "Add mechanism to communicate progress from tasks to the worker",
"is_bot": true,
"headline": "Merge pull request #71 from balena-io-modules/sync-view-changes",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2026-01-15T19:10:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebe185128b5067b550d4bf3caaeb7f85734ace9a",
"body": null,
"is_bot": false,
"headline": "Fix documentation issues",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-01-14T22:00:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "daf9bd74369a0671f7ed6b49d0d14fb887633dd6",
"body": "The flush method allows to sync progress from the View back to the\nworker and its followers. This can be used by long running tasks to\ncommunicate task progress back to the user via the worker.\n\nChange-type: patch",
"is_bot": false,
"headline": "Add View::flush method",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-01-14T15:39:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f452bd61dd3174b046c3c413a9358e8283f97d4f",
"body": "The channel is now a new argument to the FromSystem::from_system call,\nallowing handlers to get access to the runtime channel for communicating\nchanges.\n\nChange-type: minor",
"is_bot": false,
"headline": "Add runtime channel to communicate changes back to worker",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-01-14T15:30:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6797be93c898536c74aeb93f0e09774bb95d911d",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Re-export json::Patch types from mahler_core",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2026-01-13T19:03:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9df10fd6c520ee55015d750c1df6f19eadda9fd0",
"body": null,
"is_bot": true,
"headline": "v0.23.0",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-12-22T14:50:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cc38fc49036528654b3ace8f15d92f79ffc0e2d",
"body": "API Refactoring and Architectural Improvements",
"is_bot": true,
"headline": "Merge pull request #70 from balena-io-modules/api-refactor",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-12-22T14:49:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "796d1f2aba77ead3035f05a29adce3e8dd690a5b",
"body": "This allows to delete the value pointed at by a view, avoiding the need\nto receive a `View<Option<T>>` for tasks on delete operations.\n\nChange-type: patch",
"is_bot": false,
"headline": "Add `View::delete` method",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-21T14:49:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efd3d103754422c3556cd528c871f07291042ef8",
"body": null,
"is_bot": false,
"headline": "Documentation fixes",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-21T14:29:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcf43cee5d113b801cbd3fb11cc0d990d42b5d1e",
"body": "The `enforce` macro can now be used to check on a condition or exit the\ntask early. This will result internally in an\nErrorKind::ConditionNotMet, that will tell the planner to skip the task\nor the workflow execution to exit early.\n\nChange-type: patch",
"is_bot": false,
"headline": "Modify IO to terminate a task without any changes",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-21T14:28:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fded8326824b02989565ed608e047ad3f0d0b33",
"body": "This also removes the concept of halted states which were not enough to\nprovide fully featured partial plans.\n\nChange-type: minor",
"is_bot": false,
"headline": "Add the concept of exceptions for partial planning",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-20T02:27:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b605cc3855080debee386f7878a0b205fab9e50",
"body": "Previously a Worker with a closed writer task (due to an internal patch\nerror) could still receive `seek_with_interrupt` and `run_workflow`\nrequests. This is dangerous as the worker could be acting on an\ninconsistent state and thus calculating an incorrect workflow.\n\nThis bug is a left-over from a previous version of the worker that would\nconsume the worker when seeking a target state.\n\nChange-type: patch",
"is_bot": false,
"headline": "Abort Worker methods if the writer task closes",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbbf991bc69e8275ad16fe0cba96489e76e4b800",
"body": "This provides more control to users of the library. Workflows generated\nby the new `find_workflow_to_target` function contain metadata about the\noperations/changes that prompted the workflow generation and any ignored\npaths. These workflows can be executed with `run_workflow`. A workflow\nis only executable while another workflow has not been executed by the\nsame worker.\n\nThis is a backwards compatible change, with `seek_with_interrupt`\nmaintaining its functionality.\n\nChange-type: patch",
"is_bot": false,
"headline": "Add Worker functionality to independently find/run workflows",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6aa2c1c2c69d579a1722875e0e03f971a1d87337",
"body": null,
"is_bot": false,
"headline": "Documentation improvements",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6998eba4f299cf7ce48bc2c447f0780103a120e",
"body": "This avoids the need of users of mahler to have Serde as dependency when\nusing derive macros\n\nChange-type: patch",
"is_bot": false,
"headline": "Re-export serde_core modules from mahler and mahler_crate",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e80059279d15389e51008a14d7a89e04dfcf6a05",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Refactor sync::channel to hide implementation details",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cf7c8dd9e02ee932b8c75de545fa17513ff4ec7",
"body": "The type implemented a `patch` method receiving a `json_patch::Patch`,\nthis is now moved to an internal `SystemExt` trait on the `mahler` crate\n\nChange-type: patch",
"is_bot": false,
"headline": "Refactor `runtime::System` to not expose dependencies",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b0132d72632c139070e7164fba923f0ee95c3e0",
"body": "The planner module now exposes functions `find_workflow_for_task` and\n`find_workflow_for_target` which allow to convert a task into a workflow\nif the necessary conditions are met.\n\nChange-type: minor",
"is_bot": false,
"headline": "Remove `Planner` type",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bcec77005e0c157eab1c898a590e60673b62704",
"body": "Also remove the arbitrary restriction for assigning the same task to\nmultiple operations.\n\nChange-type: patch",
"is_bot": false,
"headline": "Create task::Id type and refactor code to use it",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcba6008bf11c6e2d9d4a0f83c1b5d5d8cf25e12",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Move path arg decoding operation to PathArgs",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4bc9239a5ffcaa840a11eb474b261ba0e946fe6",
"body": "A Job is a specific configuration of a task for a purpose, eventually\nwe may have different types of jobs. It makes sense to use a different\nmodule for configuring jobs.\n\nChange-type: minor",
"is_bot": false,
"headline": "Move Job into separate module",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c3c8ee5f23f31a4437064f0f4acaad2d11db85b",
"body": "Create the `json::OperationMatcher` type to match on any/none and a specific\noperation. Remove the `Operation` newtype under distance and use the\n`json::Operation type`\n\nChange-type: patch",
"is_bot": false,
"headline": "Refactor Operation matching",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ec07fe2c9edd713fadaf5befc844c761741aa64",
"body": "Since removing backtracking during planning. Job priority no longer\nmakes sense. It is up to the user to determine via their handlers what\nis the right job to apply in a certain context.\n\nChange-type: minor",
"is_bot": false,
"headline": "Remove Job priority",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec584d8cc07a69696ea71fb1571542418ce83d25",
"body": "- Moves task and worker to mahler crate\n- Split dag from workflow module\n- Create sync module for task synchronization primitives\n\nChange-type: minor",
"is_bot": false,
"headline": "Re-structure crate organization",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1512650bdab1033eedafd33460b1cdfdb06dde5",
"body": "The planner is not publicly available so it doesn't need to be defined\nat the top level.\n\nChange-type: patch",
"is_bot": false,
"headline": "Move planner module inside worker",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb2f8680f7746cbd1b41d3f2b3855eda86b626b5",
"body": "This avoids the need for the worker to calculate differences for\ndebugging but will also be able to used by library users when we update\nthe worker API to return workflows\n\nChange-type: minor",
"is_bot": false,
"headline": "Add list of changes to Workflow and planner::SearchError",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a60ebbde71150ed980a42ef2527dbf83935ab17b",
"body": "This module contains json utility types.\n\nChange-type: patch",
"is_bot": false,
"headline": "Move Path and PathArgs to json module",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6df9d5774bb795ff6c3c534cdfd5dad301f09182",
"body": null,
"is_bot": false,
"headline": "Bump some dependencies",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da86b70bc04e52fe957d372c243d1fb63b582845",
"body": "Creates new error types Error and ErrorKind in `mahler_core::error` to\ntabulate all types of errors that are possible while evaluating Jobs for\nplanning or runtime.\n\nChange-type: minor",
"is_bot": false,
"headline": "Refactor error handling",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fba03a2e8f4be64d5c309272ae165b20f44f8436",
"body": "These are used by multiple modules, so it makes sense to have them in a\nseparate location accessible by others.",
"is_bot": false,
"headline": "Move System, Context and their traits to runtime module",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-19T23:30:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e198e7ffeb6eb95a0757da31bf8c52c044fb13b1",
"body": null,
"is_bot": true,
"headline": "v0.22.1",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-12-06T06:43:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fccb8ea8d1816aa739551876d9a6a3540894dcac",
"body": "…ults\n\nImprove state collection defaults",
"is_bot": true,
"headline": "Merge pull request #69 from balena-io-modules/improve-collection-defa…",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-12-06T06:42:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6782525689cd40408dff16272ae7121b3f8f8cac",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Deserialize defaults for state collections",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-05T22:16:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57084948c358d6f3c72602cebd3996d3be992bc0",
"body": "Change-type: patch",
"is_bot": false,
"headline": "Fix Default implementation for collections",
"author_name": "felipe",
"author_login": "pipex",
"committed_at": "2025-12-05T22:16:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "703f8173c4fa83bd47c72f9d4c6636804af7baac",
"body": null,
"is_bot": true,
"headline": "v0.22.0",
"author_name": "flowzone-app[bot]",
"author_login": "flowzone-app[bot]",
"committed_at": "2025-11-29T14:01:59Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 69,
"commits_last_year": 167,
"latest_release_at": "2026-07-29T08:04:31Z",
"latest_release_tag": "v0.26.0",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 27,
"days_since_latest_release": 1,
"mean_days_between_releases": 17.7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "mahler",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"automation",
"workflow",
"planning",
"orchestration",
"htn"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/mahler",
"is_deprecated": false,
"latest_version": "0.26.0",
"repository_url": "https://github.com/balena-io-modules/mahler-rs",
"versions_count": 41,
"total_downloads": 24487,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2178,
"first_published_at": "2025-06-12T15:13:50.595944Z",
"latest_published_at": "2026-07-29T08:05:08.573221Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "mahler-core",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"library",
"job",
"workflow",
"orchestration"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/mahler-core",
"is_deprecated": false,
"latest_version": "0.26.0",
"repository_url": "https://github.com/balena-io-modules/mahler-rs",
"versions_count": 24,
"total_downloads": 16681,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2179,
"first_published_at": "2025-10-02T08:19:37.875888Z",
"latest_published_at": "2026-07-29T08:05:06.359216Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "mahler-derive",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"macro",
"derive",
"job",
"workflow",
"orchestration"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/mahler-derive",
"is_deprecated": false,
"latest_version": "0.26.0",
"repository_url": "https://github.com/balena-io-modules/mahler-rs",
"versions_count": 24,
"total_downloads": 16710,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2181,
"first_published_at": "2025-10-02T08:19:38.422351Z",
"latest_published_at": "2026-07-29T08:05:06.958886Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
}
]
},
"popularity": {
"forks": 0,
"stars": 4,
"watchers": 1,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"Cargo.toml",
"examples/composer/Cargo.toml",
"examples/readme/Cargo.toml",
"mahler-core/Cargo.toml",
"mahler-derive/Cargo.toml",
"mahler/Cargo.toml"
],
"largest_source_bytes": 91447,
"source_files_sampled": 62,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Cargo.toml",
"mahler-core/Cargo.toml",
"mahler-derive/Cargo.toml",
"mahler/Cargo.toml"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 19,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "async-trait",
"manifest": "mahler-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "futures",
"manifest": "mahler-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "json-patch",
"manifest": "mahler-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "jsonptr",
"manifest": "mahler-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "matchit",
"manifest": "mahler-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde_core",
"manifest": "mahler-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde_json",
"manifest": "mahler-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "mahler-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "quote",
"manifest": "mahler-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "proc-macro2",
"manifest": "mahler-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "syn",
"manifest": "mahler-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.0"
},
{
"name": "mahler-core",
"manifest": "mahler/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0"
},
{
"name": "mahler-derive",
"manifest": "mahler/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0"
},
{
"name": "async-trait",
"manifest": "mahler/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "json-patch",
"manifest": "mahler/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "jsonptr",
"manifest": "mahler/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "matchit",
"manifest": "mahler/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio-stream",
"manifest": "mahler/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde_json",
"manifest": "mahler/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tracing",
"manifest": "mahler/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "mahler/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "async-stream",
"manifest": "mahler/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.3"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "async-stream",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "mahler-core",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "mahler-derive",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "proc-macro2",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "quote",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "serde_json",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "syn",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "tokio",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "anyhow",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "assert_cmd",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "bollard",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "dedent",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "futures-util",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "predicates",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "pretty_assertions",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "serde",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "thiserror",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "tokio-test",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "tracing-subscriber",
"direct": false,
"version": null,
"ecosystem": "crates"
}
],
"collected": true,
"truncated": false,
"total_count": 19,
"direct_count": 8,
"indirect_count": 11
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 69,
"open_issues": 2,
"closed_ratio": 0.833,
"closed_issues": 10,
"closed_unmerged_prs": 5
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "pipex",
"commits": 292,
"avatar_url": "https://avatars.githubusercontent.com/u/1822826?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"flowzone.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 5,
"reason": "Found 8/16 approved changesets -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 9,
"reason": "11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "876d8e29b1b4a6dca12e6fcbdff5eda3b4adb35f",
"ran_at": "2026-07-30T19:40:51Z",
"aggregate_score": 5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-29T08:04:05Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-29T08:03:15Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 43,
"created_at": "2025-07-27T18:31:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 60,
"created_at": "2025-09-19T13:15:42Z",
"last_comment_at": "2025-10-14T17:23:19Z",
"last_comment_author": "pipex"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/balena-io-modules/mahler-rs",
"host": "github.com",
"name": "mahler-rs",
"owner": "balena-io-modules"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"security": 50,
"vitality": 89,
"community": 37,
"governance": 60,
"engineering": 65
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 89,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"commits_last_year": 167,
"human_commit_share": 0.63,
"days_since_last_push": 1,
"active_weeks_last_year": 27
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "27/52 weeks with commits",
"points": 18.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 27
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "167 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 167
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9",
"points": 9,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 69,
"latest_release_tag": "v0.26.0",
"releases_from_tags": false,
"days_since_latest_release": 1,
"mean_days_between_releases": 17.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "69 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 69
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~17.7 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 17.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 2,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 2 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 2
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 37,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 8,
"inputs": {
"forks": 0,
"stars": 4,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "4 stars",
"points": 7.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 4
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 64,
"inputs": {
"packages": [
"mahler",
"mahler-core",
"mahler-derive"
],
"dependents": null,
"ecosystems": "crates",
"total_downloads": 57878,
"monthly_downloads": 6538
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "6,538 downloads/month across crates",
"points": 50.9,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 6538,
"ecosystems": "crates"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 60,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"merged_prs": 69,
"open_issues": 2,
"closed_issues": 10,
"issue_closed_ratio": 0.833,
"closed_unmerged_prs": 5
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "83% of issues closed",
"points": 38.9,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 83
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "69/74 decided PRs merged",
"points": 35.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 69,
"decided": 74
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 8/16 approved changesets -- score normalized to 5",
"points": 7.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"followers": 15,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "balena-io-modules",
"public_repos": 298,
"account_age_days": 3796
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "15 followers of balena-io-modules",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 15,
"login": "balena-io-modules"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "298 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 298
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"mahler",
"mahler-core",
"mahler-derive"
],
"ecosystems": "crates",
"any_deprecated": false,
"min_days_since_publish": 1
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "3 package(s) on crates",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 3,
"ecosystems": "crates"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 1 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 1
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "41 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 41
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 65,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"topics": [
"automation",
"orchestration",
"planning",
"workflows",
"pipelines",
"htn"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 50,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 8/16 approved changesets -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 54,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.683,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "43 of 63 human commits state their intent (structured subject or explanatory body)",
"points": 36.4,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 43,
"sampled": 63
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"Cargo.toml",
"examples/composer/Cargo.toml",
"examples/readme/Cargo.toml",
"mahler-core/Cargo.toml",
"mahler-derive/Cargo.toml",
"mahler/Cargo.toml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Cargo.toml, examples/composer/Cargo.toml, examples/readme/Cargo.toml (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "Cargo.toml, examples/composer/Cargo.toml, examples/readme/Cargo.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Rust (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "Rust",
"largest_source_bytes": 91447,
"source_files_sampled": 62,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Rust (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/62 source files over 60KB",
"points": 53.2,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 62,
"oversized": 2
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-30T19:41:05.291168Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/balena-io-modules/mahler-rs.svg",
"full_name": "balena-io-modules/mahler-rs",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — crates.io.