Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-28 02:00 UTC

bborbe / kafka

GoBSD-2-Clause★ 0 stars⑂ 2 forkssince Mar 2024View on GitHub ↗

bborbe/kafka holds a health index of 59 out of 100, placing it in the Moderate band. It scores highest on Vitality (80/100) and lowest on Community & Adoption (24/100). It was last updated 8 days ago. A single contributor accounts for most of its recent work.

59
overall / 100
Moderate

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

59
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

Benjamin BorbePersonal account
30 followers206 public repossince Nov 2011Seibert Group GmbH

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
Gogithub.com/bborbe/kafkav1.25.5-978 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

80Good · 22% of overall
How it's scored
28.8/36Push recency — last push 8 days ago
18/36Commit cadence — 26/52 weeks with commits
17.8/18Commit volume — 96 commits in the last year
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year96
human_commit_share1
days_since_last_push8
active_weeks_last_year26
How it's scored
16.2/27Ships releases — 97 version tags (no GitHub releases)
36/36Release recency — latest release 8 days ago
27/27Release cadence — a release every ~5.5 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count97
latest_release_tagv1.25.5
releases_from_tagsyes
days_since_latest_release8
mean_days_between_releases5.5
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

24Critical · 18% of overall
How it's scored
0/60Stars — 0 stars
0/25Forks — 2 forks
0/15Watchers — 1 watchers
Inputs used
forks2
stars0
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (BSD-2-Clause)
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

61Moderate · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
0.8/22.5Commit distribution — top contributor authored 96% of commits
4.1/13.5Contributor breadth — 3 contributors
6/10OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Inputs used
bus_factor1
contributors_sampled3
top_contributor_share0.965
How it's scored
46.8/46.8Issue resolution — 100% of issues closed
35.7/38.3PR acceptance — 14/15 decided PRs merged
1.5/15OpenSSF Scorecard: Code-Review — Found 4/21 approved changesets -- score normalized to 1
Inputs used
merged_prs14
open_issues0
closed_issues1
issue_closed_ratio1
closed_unmerged_prs1
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
10.7/25Owner reach — 30 followers of bborbe
25/25Track record — 206 public repos, account ~14 yr old
Inputs used
followers30
owner_typeUser
is_verified
owner_loginbborbe
public_repos206
account_age_days5,369
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
How it's scored
25/25Published & resolvable — 1 package(s) on go
35/35Publish recency — latest publish 8 days ago
20/20Version history — 97 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesgithub.com/bborbe/kafka
ecosystemsgo
any_deprecatedno
min_days_since_publish8

Engineering Quality

Are baseline engineering and documentation practices in place?

76Good · 20% of overall
How it's scored
24/24CI workflows — 3 workflow(s)
24/24Tests present
16/16Linter config — .golangci.yml
0/9.6Pre-commit hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 5 out of 5 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configyes
has_precommit_configno

Documentation

65Moderate
How it's scored
30/30README
25/25Documentation directory
0/15Documentation / homepage site
0/10Repository description
0/10Topics
10/10Wiki
Inputs used
topics
has_wikiyes
homepage
has_readmeyes
has_docs_diryes
has_descriptionno

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

45At risk · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5CI-Tests — 5 out of 5 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0.8/7.5Code-Review — Found 4/21 approved changesets -- score normalized to 1
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
0/10Dangerous-Workflow — dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — no data
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6/7.5Vulnerabilities — 2 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate3.1
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
How it's scored
35/35Direct dependencies free of known advisories — no direct dependency carries a known advisory
0/25Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
0/40No advisories left outstanding — no advisory carries a publication date
Inputs used
sourceosv
advisories2
affected_packages2
assessed_packages54
unassessed_packages0
affected_by_severityunknown 2
direct_affected_packages0
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 54 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

59Moderate · 0% of overall
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
20.3/40Legible commit history — 38 of 100 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.38
agent_instruction_files
agent_instruction_max_bytes
How it's scored
18/18One-command bootstrap — Makefile
22/22Automated tests
11/11Lint / format config — .golangci.yml
11/11Static type checking — Go (statically typed)
10/10Reproducible environment — lockfile
0/10Demonstrated agent practice — no agent-authored commits among the last 100
0/8Automated maintenance — no automated dependency updates observed
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfilesgo.sum
has_dockerfileno
typed_languageyes
bootstrap_filesMakefile
has_devcontainerno
has_linter_configyes
typecheck_configs
agent_commit_share0
toolchain_manifestsgo.mod
dependency_bot_commit_share0
How it's scored
45/45Type-checkable code — Go (statically typed)
55/55Manageable file sizes — 0/158 source files over 60KB
Inputs used
primary_languageGo
largest_source_bytes54,687
source_files_sampled158
oversized_source_files0

Key facts

0GitHub stars
3contributors
96commits, last 12 months
8days since last push
97releases
1bus factor
0open issues
Gopackage ecosystems

More detail

Star and fork history 0 ★ / 2 ⇿
0Stars
2Forks

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

111222212026-022026-022026-02
OpenSSF Scorecard 3.1 / 10
3.1aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-28 02:00 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
10CI-Tests5 out of 5 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
1Code-ReviewFound 4/21 approved changesets -- score normalized to 1
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
0Dangerous-Workflowdangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
n/aPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
8Vulnerabilities2 existing vulnerabilities detected
Direct dependencies 16
RegistryPackageVersion constraintManifest
Gogithub.com/IBM/saramav1.50.3go.mod
Gogithub.com/bborbe/boltkvv1.14.4go.mod
Gogithub.com/bborbe/collectionv1.20.17go.mod
Gogithub.com/bborbe/errorsv1.5.16go.mod
Gogithub.com/bborbe/httpv1.26.16go.mod
Gogithub.com/bborbe/kvv1.21.6go.mod
Gogithub.com/bborbe/logv1.6.17go.mod
Gogithub.com/bborbe/memorykvv1.6.5go.mod
Gogithub.com/bborbe/parsev1.10.17go.mod
Gogithub.com/bborbe/runv1.9.30go.mod
Gogithub.com/bborbe/timev1.27.5go.mod
Gogithub.com/bborbe/validationv1.4.16go.mod
Gogithub.com/golang/glogv1.2.5go.mod
Gogithub.com/onsi/ginkgo/v2v2.32.0go.mod
Gogithub.com/onsi/gomegav1.42.1go.mod
Gogithub.com/prometheus/client_golangv1.23.2go.mod
All dependencies 54

Full resolved dependency set from the GitHub dependency graph: 16 direct and 38 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
Gogithub.com/bborbe/boltkvv1.14.4direct
Gogithub.com/bborbe/collectionv1.20.17direct
Gogithub.com/bborbe/errorsv1.5.16direct
Gogithub.com/bborbe/httpv1.26.16direct
Gogithub.com/bborbe/kvv1.21.6direct
Gogithub.com/bborbe/logv1.6.17direct
Gogithub.com/bborbe/memorykvv1.6.5direct
Gogithub.com/bborbe/parsev1.10.17direct
Gogithub.com/bborbe/runv1.9.30direct
Gogithub.com/bborbe/timev1.27.5direct
Gogithub.com/bborbe/validationv1.4.16direct
Gogithub.com/golang/glogv1.2.5direct
Gogithub.com/ibm/saramav1.50.3direct
Gogithub.com/onsi/ginkgo/v2v2.32.0direct
Gogithub.com/onsi/gomegav1.42.1direct
Gogithub.com/prometheus/client_golangv1.23.2direct
Gogithub.com/bborbe/mathv1.3.13indirect
Gogithub.com/bborbe/sentryv1.9.22indirect
Gogithub.com/beorn7/perksv1.0.1indirect
Gogithub.com/cespare/xxhash/v2v2.3.0indirect
Gogithub.com/davecgh/go-spewv1.1.2-0.20180830191138-d8f796af33ccindirect
Gogithub.com/eapache/go-resiliencyv1.7.0indirect
Gogithub.com/getsentry/sentry-gov0.47.0indirect
Gogithub.com/go-logr/logrv1.4.3indirect
Gogithub.com/go-task/slim-sprig/v3v3.0.0indirect
Gogithub.com/google/go-cmpv0.7.0indirect
Gogithub.com/google/pprofv0.0.0-20260604005048-7023385849c0indirect
Gogithub.com/gorilla/muxv1.8.1indirect
Gogithub.com/hashicorp/go-uuidv1.0.3indirect
Gogithub.com/jcmturner/aescts/v2v2.0.0indirect
Gogithub.com/jcmturner/dnsutils/v2v2.0.0indirect
Gogithub.com/jcmturner/goforkv1.7.6indirect
Gogithub.com/jcmturner/gokrb5/v8v8.4.4indirect
Gogithub.com/jcmturner/rpc/v2v2.0.3indirect
Gogithub.com/klauspost/compressv1.18.6indirect
Gogithub.com/masterminds/semver/v3v3.5.0indirect
Gogithub.com/munnerz/goautonegv0.0.0-20191010083416-a7dc8b61c822indirect
Gogithub.com/pierrec/lz4/v4v4.1.27indirect
Gogithub.com/pkg/errorsv0.9.1indirect
Gogithub.com/prometheus/client_modelv0.6.2indirect
Gogithub.com/prometheus/commonv0.69.0indirect
Gogithub.com/prometheus/procfsv0.21.0indirect
Gogithub.com/rcrowley/go-metricsv0.0.0-20250401214520-65e299d6c5c9indirect
Gogo.etcd.io/bboltv1.5.0indirect
Gogo.yaml.in/yaml/v3v3.0.4indirect
Gogolang.org/x/cryptov0.53.0indirect
Gogolang.org/x/expv0.0.0-20260611194520-c48552f49976indirect
Gogolang.org/x/modv0.37.0indirect
Gogolang.org/x/netv0.56.0indirect
Gogolang.org/x/syncv0.21.0indirect
Gogolang.org/x/sysv0.46.0indirect
Gogolang.org/x/textv0.39.0indirect
Gogolang.org/x/toolsv0.47.0indirect
Gogoogle.golang.org/protobufv1.36.11indirect
Dependency advisories 2

This repository publishes no package the index resolves, so its own dependency graph was assessed — 54 packages, which also include development and test pins that never ship: 2 carry known advisories, of which 0 are direct.

PackageVersionRelationSeverityAdvisoriesFixed in
github.com/klauspost/compressv1.18.6indirectunknown11.18.7
golang.org/x/cryptov0.53.0indirectunknown1

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 8183,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 366653,
        "Makefile": 3100
      },
      "pushed_at": "2026-07-19T19:14:38Z",
      "created_at": "2024-03-06T09:56:45Z",
      "owner_type": "User",
      "updated_at": "2026-07-19T19:14:42Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "BSD-2-Clause",
      "default_branch": "master",
      "license_spdx_raw": "BSD-2-Clause",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "http://www.benjamin-borbe.de",
      "name": "Benjamin Borbe",
      "type": "User",
      "login": "bborbe",
      "company": "Seibert Group GmbH",
      "location": "Germany - Wiesbaden ",
      "followers": 30,
      "avatar_url": "https://avatars.githubusercontent.com/u/1193284?v=4",
      "created_at": "2011-11-14T10:16:14Z",
      "is_verified": null,
      "public_repos": 206,
      "account_age_days": 5369
    },
    "license": {
      "state": "standard",
      "spdx_id": "BSD-2-Clause",
      "raw_spdx": "BSD-2-Clause",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.25.5",
          "kind": "patch",
          "published_at": "2026-07-19T19:14:26Z"
        },
        {
          "tag": "v1.25.4",
          "kind": "patch",
          "published_at": "2026-07-09T16:39:39Z"
        },
        {
          "tag": "v1.25.3",
          "kind": "patch",
          "published_at": "2026-07-04T12:07:19Z"
        },
        {
          "tag": "v1.25.2",
          "kind": "patch",
          "published_at": "2026-07-04T11:51:45Z"
        },
        {
          "tag": "v1.25.1",
          "kind": "patch",
          "published_at": "2026-06-30T07:21:04Z"
        },
        {
          "tag": "v1.25.0",
          "kind": "minor",
          "published_at": "2026-06-16T15:38:16Z"
        },
        {
          "tag": "v1.24.0",
          "kind": "minor",
          "published_at": "2026-06-16T13:18:19Z"
        },
        {
          "tag": "v1.23.2",
          "kind": "patch",
          "published_at": "2026-06-08T19:35:13Z"
        },
        {
          "tag": "v1.23.1",
          "kind": "patch",
          "published_at": "2026-06-03T07:54:39Z"
        },
        {
          "tag": "v1.23.0",
          "kind": "minor",
          "published_at": "2026-05-30T21:41:46Z"
        },
        {
          "tag": "v1.22.15",
          "kind": "patch",
          "published_at": "2026-05-13T10:02:31Z"
        },
        {
          "tag": "v1.22.14",
          "kind": "patch",
          "published_at": "2026-05-13T09:42:05Z"
        },
        {
          "tag": "v1.22.13",
          "kind": "patch",
          "published_at": "2026-05-07T22:44:01Z"
        },
        {
          "tag": "v1.22.12",
          "kind": "patch",
          "published_at": "2026-04-30T22:06:10Z"
        },
        {
          "tag": "v1.22.11",
          "kind": "patch",
          "published_at": "2026-04-09T18:56:52Z"
        },
        {
          "tag": "v1.22.10",
          "kind": "patch",
          "published_at": "2026-04-01T17:15:26Z"
        },
        {
          "tag": "v1.22.9",
          "kind": "patch",
          "published_at": "2026-03-20T17:10:32Z"
        },
        {
          "tag": "v1.22.8",
          "kind": "patch",
          "published_at": "2026-03-20T17:06:24Z"
        },
        {
          "tag": "v1.22.7",
          "kind": "patch",
          "published_at": "2026-03-20T14:40:29Z"
        },
        {
          "tag": "v1.22.6",
          "kind": "patch",
          "published_at": "2026-03-20T14:30:15Z"
        },
        {
          "tag": "v1.22.5",
          "kind": "patch",
          "published_at": "2026-03-06T22:20:17Z"
        },
        {
          "tag": "v1.22.4",
          "kind": "patch",
          "published_at": "2026-03-06T22:05:45Z"
        },
        {
          "tag": "v1.22.3",
          "kind": "patch",
          "published_at": "2026-02-12T23:46:09Z"
        },
        {
          "tag": "v1.22.2",
          "kind": "patch",
          "published_at": "2026-02-03T08:58:39Z"
        },
        {
          "tag": "v1.22.1",
          "kind": "patch",
          "published_at": "2026-01-13T17:01:56Z"
        },
        {
          "tag": "v1.22.0",
          "kind": "minor",
          "published_at": "2025-12-30T14:28:29Z"
        },
        {
          "tag": "v1.21.0",
          "kind": "minor",
          "published_at": "2025-12-12T14:10:35Z"
        },
        {
          "tag": "v1.20.1",
          "kind": "patch",
          "published_at": "2025-12-09T10:43:34Z"
        },
        {
          "tag": "v1.20.0",
          "kind": "minor",
          "published_at": "2025-12-05T22:31:27Z"
        },
        {
          "tag": "v1.19.3",
          "kind": "patch",
          "published_at": "2025-11-14T15:17:46Z"
        },
        {
          "tag": "v1.19.2",
          "kind": "patch",
          "published_at": "2025-10-31T10:17:56Z"
        },
        {
          "tag": "v1.19.1",
          "kind": "patch",
          "published_at": "2025-10-31T10:06:31Z"
        },
        {
          "tag": "v1.19.0",
          "kind": "minor",
          "published_at": "2025-10-31T09:49:20Z"
        },
        {
          "tag": "v1.18.0",
          "kind": "minor",
          "published_at": "2025-10-31T08:51:59Z"
        },
        {
          "tag": "v1.17.4",
          "kind": "patch",
          "published_at": "2025-10-19T12:43:48Z"
        },
        {
          "tag": "v1.17.3",
          "kind": "patch",
          "published_at": "2025-10-19T12:00:48Z"
        },
        {
          "tag": "v1.17.2",
          "kind": "patch",
          "published_at": "2025-10-18T20:15:54Z"
        },
        {
          "tag": "v1.17.1",
          "kind": "patch",
          "published_at": "2025-10-18T16:51:55Z"
        },
        {
          "tag": "v1.17.0",
          "kind": "minor",
          "published_at": "2025-10-18T16:14:09Z"
        },
        {
          "tag": "v1.16.0",
          "kind": "minor",
          "published_at": "2025-10-14T07:57:53Z"
        },
        {
          "tag": "v1.15.0",
          "kind": "minor",
          "published_at": "2025-10-12T08:18:57Z"
        },
        {
          "tag": "v1.14.1",
          "kind": "patch",
          "published_at": "2025-09-01T20:04:01Z"
        },
        {
          "tag": "v1.14.0",
          "kind": "minor",
          "published_at": "2025-08-28T22:17:05Z"
        },
        {
          "tag": "v1.13.7",
          "kind": "patch",
          "published_at": "2025-07-12T20:07:17Z"
        },
        {
          "tag": "v1.13.6",
          "kind": "patch",
          "published_at": "2025-06-04T11:57:07Z"
        },
        {
          "tag": "v1.13.5",
          "kind": "patch",
          "published_at": "2025-05-16T17:49:45Z"
        },
        {
          "tag": "v1.13.4",
          "kind": "patch",
          "published_at": "2025-05-09T13:24:26Z"
        },
        {
          "tag": "v1.13.3",
          "kind": "patch",
          "published_at": "2025-04-14T15:38:42Z"
        },
        {
          "tag": "v1.13.2",
          "kind": "patch",
          "published_at": "2025-04-14T14:05:16Z"
        },
        {
          "tag": "v1.13.1",
          "kind": "patch",
          "published_at": "2025-04-11T07:40:00Z"
        },
        {
          "tag": "v1.13.0",
          "kind": "minor",
          "published_at": "2025-04-11T07:26:14Z"
        },
        {
          "tag": "v1.12.3",
          "kind": "patch",
          "published_at": "2025-04-01T08:45:44Z"
        },
        {
          "tag": "v1.12.2",
          "kind": "patch",
          "published_at": "2025-03-31T15:17:33Z"
        },
        {
          "tag": "v1.12.1",
          "kind": "patch",
          "published_at": "2025-03-31T15:00:16Z"
        },
        {
          "tag": "v1.12.0",
          "kind": "minor",
          "published_at": "2025-03-31T14:56:14Z"
        },
        {
          "tag": "v1.11.3",
          "kind": "patch",
          "published_at": "2025-03-31T14:38:05Z"
        },
        {
          "tag": "v1.11.2",
          "kind": "patch",
          "published_at": "2025-03-31T14:34:57Z"
        },
        {
          "tag": "v1.11.1",
          "kind": "patch",
          "published_at": "2025-03-30T19:42:53Z"
        },
        {
          "tag": "v1.11.0",
          "kind": "minor",
          "published_at": "2025-03-30T15:49:33Z"
        },
        {
          "tag": "v1.10.5",
          "kind": "patch",
          "published_at": "2025-03-10T14:24:13Z"
        },
        {
          "tag": "v1.10.4",
          "kind": "patch",
          "published_at": "2025-03-08T15:19:42Z"
        },
        {
          "tag": "v1.10.3",
          "kind": "patch",
          "published_at": "2025-03-03T10:08:36Z"
        },
        {
          "tag": "v1.10.2",
          "kind": "patch",
          "published_at": "2025-01-31T08:27:10Z"
        },
        {
          "tag": "v1.10.1",
          "kind": "patch",
          "published_at": "2025-01-30T08:02:03Z"
        },
        {
          "tag": "v1.10.0",
          "kind": "minor",
          "published_at": "2025-01-28T14:10:16Z"
        },
        {
          "tag": "v1.9.6",
          "kind": "patch",
          "published_at": "2025-01-24T21:12:00Z"
        },
        {
          "tag": "v1.9.5",
          "kind": "patch",
          "published_at": "2025-01-24T20:54:20Z"
        },
        {
          "tag": "v1.9.4",
          "kind": "patch",
          "published_at": "2025-01-23T21:43:46Z"
        },
        {
          "tag": "v1.9.3",
          "kind": "patch",
          "published_at": "2025-01-23T21:41:49Z"
        },
        {
          "tag": "v1.9.2",
          "kind": "patch",
          "published_at": "2024-12-17T19:42:56Z"
        },
        {
          "tag": "v1.9.1",
          "kind": "patch",
          "published_at": "2024-12-17T19:35:02Z"
        },
        {
          "tag": "v1.9.0",
          "kind": "minor",
          "published_at": "2024-12-17T19:14:28Z"
        },
        {
          "tag": "v1.8.0",
          "kind": "minor",
          "published_at": "2024-12-17T10:07:21Z"
        },
        {
          "tag": "v1.7.2",
          "kind": "patch",
          "published_at": "2024-12-17T08:21:22Z"
        },
        {
          "tag": "v1.7.1",
          "kind": "patch",
          "published_at": "2024-12-17T08:18:49Z"
        },
        {
          "tag": "v1.7.0",
          "kind": "minor",
          "published_at": "2024-12-17T07:55:56Z"
        },
        {
          "tag": "v1.6.7",
          "kind": "patch",
          "published_at": "2024-09-03T17:28:00Z"
        },
        {
          "tag": "v1.6.6",
          "kind": "patch",
          "published_at": "2024-08-20T11:32:56Z"
        },
        {
          "tag": "v1.6.5",
          "kind": "patch",
          "published_at": "2024-08-17T09:00:57Z"
        },
        {
          "tag": "v1.6.4",
          "kind": "patch",
          "published_at": "2024-06-26T15:32:10Z"
        },
        {
          "tag": "v1.6.3",
          "kind": "patch",
          "published_at": "2024-06-07T18:57:16Z"
        },
        {
          "tag": "v1.6.2",
          "kind": "patch",
          "published_at": "2024-06-07T07:35:10Z"
        },
        {
          "tag": "v1.6.1",
          "kind": "patch",
          "published_at": "2024-06-07T07:07:10Z"
        },
        {
          "tag": "v1.6.0",
          "kind": "minor",
          "published_at": "2024-06-06T11:37:35Z"
        },
        {
          "tag": "v1.5.3",
          "kind": "patch",
          "published_at": "2024-06-05T18:00:10Z"
        },
        {
          "tag": "v1.5.2",
          "kind": "patch",
          "published_at": "2024-05-28T17:40:17Z"
        },
        {
          "tag": "v1.5.1",
          "kind": "patch",
          "published_at": "2024-05-28T13:44:23Z"
        },
        {
          "tag": "v1.5.0",
          "kind": "minor",
          "published_at": "2024-05-28T12:52:49Z"
        },
        {
          "tag": "v1.4.0",
          "kind": "minor",
          "published_at": "2024-05-10T12:45:57Z"
        },
        {
          "tag": "v1.3.0",
          "kind": "minor",
          "published_at": "2024-03-26T13:21:24Z"
        },
        {
          "tag": "v1.2.2",
          "kind": "patch",
          "published_at": "2024-03-25T13:58:11Z"
        },
        {
          "tag": "v1.2.1",
          "kind": "patch",
          "published_at": "2024-03-25T13:46:09Z"
        },
        {
          "tag": "v1.2.0",
          "kind": "minor",
          "published_at": "2024-03-25T12:52:21Z"
        },
        {
          "tag": "v1.1.1",
          "kind": "patch",
          "published_at": "2024-03-24T12:09:43Z"
        },
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2024-03-24T09:52:55Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2024-03-06T11:27:21Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2024-03-06T11:08:44Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "207b7344e4187a30393e73d4ed98b7e4c7166df8",
          "body": null,
          "is_bot": false,
          "headline": "release v1.25.5",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-19T19:14:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8aad01c78a5962c8df61837f5a98250fe3151361",
          "body": "fix(deps): bump golang.org/x/text to v0.39.0 (CVE-2026-56852)",
          "is_bot": false,
          "headline": "Merge pull request #16 from bborbe/fix/update-go-fc59fa9",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-19T19:11:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7453778fe5a647360f7b4fb8aa91f73f7d86c198",
          "body": null,
          "is_bot": false,
          "headline": "fix(deps): bump golang.org/x/text to v0.39.0 (CVE-2026-56852)",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-19T15:52:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc59fa9bd80c446f8824cc7e44fa5d50249afe93",
          "body": null,
          "is_bot": false,
          "headline": "update dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-09T16:39:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec0b01a7dbbcd1d86f799e2160d4ccdc4163078e",
          "body": null,
          "is_bot": false,
          "headline": "exclude no-fix advisory GO-2026-5932 (x/crypto/openpgp unmaintained)",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-09T16:36:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aab6ddc889315767411b43c7c6a9b26ed1cbc73e",
          "body": null,
          "is_bot": false,
          "headline": "update dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-04T12:07:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30cc6bf350692f3edff2761d13cf959b887ece31",
          "body": null,
          "is_bot": false,
          "headline": "update dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-07-04T11:51:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3fc1a3997331963a96faf4ef8aaf37e50ba8481",
          "body": null,
          "is_bot": false,
          "headline": "update dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-30T07:21:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02fbb79c606cf0db08b6b4f9bacce04c316db985",
          "body": null,
          "is_bot": false,
          "headline": "release v1.25.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-16T15:38:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5af7f513e460b4f01f3f78d54ebf700702b9cca7",
          "body": "feat: consumer-side decrypt + gunzip MessageHandlerTx wrappers",
          "is_bot": false,
          "headline": "Merge pull request #15 from bborbe/feature/message-handler-decrypt-gzip",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-16T15:34:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8be6ed3d394b3642b7d83f7ce91a3e93a14b2afc",
          "body": "Symmetric to v1.24.0's NewSyncProducerEncryptValue / NewSyncProducerGzipValue\nproducer wrappers — completes the bborbe/kafka migration story for services\nmoving off seibert-data/lib-kafka:\n\n- NewDecryptMessageHandlerTx(inner MessageHandlerTx, decrypt ValueModifierFunc)\n  decrypts msg.Value before de\n[…]\nler.\n\nWith these, sm-octopus services migrating off lib-kafka can drop their\nper-service pkg/decoders.go (which today re-implements both wrappers\nverbatim) and call the canonical bborbe/kafka exports.",
          "is_bot": false,
          "headline": "add consumer-side decrypt + gunzip MessageHandlerTx wrappers",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-16T15:23:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ad71b5deaaf4aa0ffda27c135ab991f77e081d3d",
          "body": null,
          "is_bot": false,
          "headline": "release v1.24.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-16T13:18:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f06e84d1309b1997ebd170f923fda320e29419b7",
          "body": "feat: SyncProducer gzip + encrypt wrappers, exported gzip header constants",
          "is_bot": false,
          "headline": "Merge pull request #14 from bborbe/feature/sync-producer-gzip-encrypt",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-16T13:15:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "329bfb84cf57aa159698aec5d0aa026d212fe378",
          "body": "- kafka_gzip-encoder.go: copyright 2025 -> 2026 (file now exports new\n  constants GzipHeaderKey / GzipHeaderValue introduced this PR).\n- kafka_sync-producer-gzip_test.go: add cancelled-ctx SendMessages test\n  symmetric with the encrypt one; verifies inner.SendMessages is NOT\n  called when ctx is alr\n[…]\neGzipHeader (keeps\n  the header, it's not the gzip marker).\n- gzip SendMessages error wrap: 'compress message failed' -> 'compress\n  value failed' aligning with encrypt's 'encrypt value failed' style.",
          "is_bot": false,
          "headline": "address round-3 bot review: copyright + ctx-cancel + nil-Key/Value tests",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-16T13:09:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6ef0b53afedd79e69e79455b75e2c48f62f5e4f4",
          "body": "Round-2 bot review:\n- gzip: copyright on kafka_gzip-decoder.go bumped 2025 -> 2026 (file now\n  exports GzipActive + RemoveGzipHeader added this PR, no longer\n  pre-existing).\n- gzip: NewSyncProducerGzipValue falls back to GzipMaxMsgBytes when\n  maxMsgBytes < 0. A negative threshold would compress ev\n[…]\nia the default.\n- gzip + encrypt SendMessages: GoDoc comment now documents the\n  all-or-nothing atomicity — inner SendMessages happens only after every\n  message in the batch is successfully prepared.",
          "is_bot": false,
          "headline": "validate maxMsgBytes + copyright year + SendMessages atomicity docs",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-16T12:56:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "15065a10a2ff14860c188ace0719f851881f3af6",
          "body": "…fierFunc\n\nLocal /coding:pr-review pass 2:\n- gzip SendMessages now wraps compressIfNeeded errors with errors.Wrapf\n  (list-wraps-errors-with-ctx convention).\n- rename ValueModifier -> ValueModifierFunc to match the XxxFunc func-type\n  naming convention used across bborbe libs.\n- CHANGELOG bullet upd\n[…]\n-call on Counterfeiter SendMessageReturns mock setup\n  (rule misclassifies mock recording as an error-discarding call).\n- suite-test-file-required (kafka_suite_test.go exists; rule checks\n  per-file).",
          "is_bot": false,
          "headline": "wrap bare gzip-SendMessages error + rename ValueModifier -> ValueModi…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-16T12:44:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cb93033689550b187d5b0d5e8621a27058c842f7",
          "body": "- gzip: payload exactly at maxMsgBytes passes through uncompressed\n  (documents the <= maxMsgBytes boundary)\n- gzip: nil msg.Headers + payload above threshold confirms the header\n  append is nil-safe\n- encrypt: cancelled ctx in SendMessages returns context.Canceled\n  without invoking the ValueModifier or the inner producer",
          "is_bot": false,
          "headline": "address bot review: add boundary, nil-Headers, cancelled-ctx tests",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-16T12:40:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d179af4d828d97f67d85cda5d0fe77edc73fd562",
          "body": "…coder.go\n\nDrops kafka_gzip-header.go: GzipHeaderKey / GzipHeaderValue move next to\nNewGzipEncoder (producer-side), GzipActive / RemoveGzipHeader move next\nto GzipDecoder (consumer-side). Tests for the helpers move into\nkafka_gzip-decoder_test.go. Public API unchanged.",
          "is_bot": false,
          "headline": "consolidate gzip header constants into encoder.go and helpers into de…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-16T12:32:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2db2492a35f9c4decf0234c030992c97062045b1",
          "body": "- NewSyncProducerGzipValue: gzip-compress message values above a size\n  threshold and tag with GzipHeaderKey/Value. Drop-in shape replacement\n  for seibert-data/lib-kafka/producer.NewSyncProducerGzipValue; wire format\n  identical so v1 and v2 services stay interoperable.\n- NewSyncProducerEncryptValu\n[…]\necoders today,\n  by future bborbe/kafka decrypt/gunzip handler wrappers tomorrow).\n\nUnblocks migrating sm-octopus topic-unique-v2 / topic-delete-unseen-v2 off\nseibert-data/lib-kafka producer entirely.",
          "is_bot": false,
          "headline": "add SyncProducer gzip + encrypt wrappers with shared header constants",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-16T12:26:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "95d3d4e18d5dd6beb6e8d290006c2854b2338272",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-08T19:35:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "352273f9d55525c892a96dc3169226ac3c2443e2",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-06-03T07:54:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ee5abe3b763ed3f5db6fda4db2f6fe94f6ce24b",
          "body": "… release)",
          "is_bot": false,
          "headline": "feat: flip .dark-factory.yaml autoRelease=false (github-releaser owns…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-05-31T10:53:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbab85bf7b40bd27f19f5571e18c3d96ac8b8f3c",
          "body": null,
          "is_bot": false,
          "headline": "release v1.23.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-05-30T21:41:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fb6f65aaadcbe91d5743e85b1c3c06859f04990",
          "body": "* add spec: crc-corruption-skip\n\n* approve spec: crc-corruption-skip\n\n* add prompt: crc-corruption-skip\n\n* approve prompt + mark spec prompted: crc-corruption-skip\n\n* refine prompt: pin maxOffset to HWM, mark compaction-gap branch optional\n\n* refine prompt: propagate non-corruption probe errors (no \n[…]\nndAdvance Must Recreate the Partition Consumer\n\n* chore: remove accidentally-committed kafka.test binary, gitignore *.test\n\n* add prompt: crc-skip-review-fixes\n\n* Fix CRC Skip — PR #13 Review Findings",
          "is_bot": false,
          "headline": "feat(consumer): opt-in CRC corruption skip in offset consumer (#13)",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-05-30T20:56:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "119a8655c42f439b5ddb075ebbebab946ee0c391",
          "body": "errcheck/gosec fatal under Go 1.26 with \"internal error: package X\nwithout types was imported from Y\" — they load packages without\nNeedDeps. golangci-lint embeds both with the correct loader. Moved\n-ignore '(Close|Write|Fprint)' and -exclude=G104 into .golangci.yml.\n\nBumped golang.org/x/sys + golang.org/x/net to clear GO-2026-5024\nthrough GO-2026-5028.",
          "is_bot": false,
          "headline": "chore: drop standalone errcheck + gosec; bump x/sys + x/net for vulns",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-05-25T19:54:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "161014c3770007ad1444e91230c1029d1642bbfd",
          "body": "…ction\n\nfix(consumer): detect closed errors/messages channels in offsetConsumer",
          "is_bot": false,
          "headline": "Merge pull request #12 from bborbe/bugfix/consumer-channel-close-dete…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-05-13T10:02:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6891889ce3bd4c56a36309e090dd36c964d11e04",
          "body": "Without the channel-close detection, a closed Errors() or Messages()\nchannel makes the inner non-blocking select fire instantly with a nil\nvalue, busy-looping (HandleError(nil) deref) or filling the batch with\nnils until the caller panics on msg.Topic.\n\nAdd `, ok` checks to both selects (outer block\n[…]\nnsume goroutine exits cleanly and the service can restart.\n\nIncludes plain-testing.T tests with an in-package fake to avoid the\nmocks->kafka import cycle that would arise from a Ginkgo internal suite.",
          "is_bot": false,
          "headline": "fix(consumer): detect closed errors/messages channels in offsetConsumer",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-05-13T10:00:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b9e93fc95edc2609fb0bd8b6cc27d6999d90c679",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump deps",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-05-13T09:42:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50267c44f72b3fee86260d05bc940909db1528cb",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump deps",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-05-07T22:44:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2101182e3e231154a3cf98d1c5af804663af410f",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-30T22:06:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1681d90b1aeb2426a56ae0013a1b21986f7616ab",
          "body": null,
          "is_bot": false,
          "headline": "release v1.22.12",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-30T22:06:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f21f1bfa316706c2736722fcf24b465bfe3a61bd",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump bborbe/{memorykv,boltkv}",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-30T21:46:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a34e9b7377898e5d1ad5bf3612d821e0eda2ccf",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump bborbe deps (warm-prep)",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-30T21:22:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "888a178377b1acfc92f224da3a21b71347733f12",
          "body": "…bug)",
          "is_bot": false,
          "headline": "fix: pin osv-scanner to v2.3.1 (bridging fix for upstream buildtools …",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-30T19:19:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9200c8e87d52dd696b5b6f5756c59a9f02e11144",
          "body": null,
          "is_bot": false,
          "headline": "update dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-09T18:56:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51a23bc1f05302e2ce82aa52dee1752bb4439dbf",
          "body": null,
          "is_bot": false,
          "headline": "use HOST_CACHE_DIR for Go cache mounts",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-09T17:23:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d857a4f0a5b7a78143e8f8297742854a63e28f9d",
          "body": null,
          "is_bot": false,
          "headline": "add autoRelease and extraMounts",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-04T20:46:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "626a45dda2a4a0aedffb6a55fcfed5c9c252f05f",
          "body": null,
          "is_bot": false,
          "headline": "update dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-04-01T17:15:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "539b32b220f21ef62baf46e415eb19249697eda6",
          "body": null,
          "is_bot": false,
          "headline": "allow parallel golangci-lint runners",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-27T13:33:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2baadb206be6b1e3affe326344e54fb7e5e169ed",
          "body": null,
          "is_bot": false,
          "headline": "update dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T17:10:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98a1a8b55bc84ea76ed0989738a5dafbd166923e",
          "body": null,
          "is_bot": false,
          "headline": "fix: exclude golangci-lint v1, update memorykv and boltkv deps",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T17:06:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "163d0cc6039183ece399745225e26c3920b00225",
          "body": null,
          "is_bot": false,
          "headline": "release v1.22.7",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T14:40:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e743725e370b184bd5e30c12a24685530ed2036f",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T14:40:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97198bb0c580aaa1fdbc788a78b3903052108fc5",
          "body": null,
          "is_bot": false,
          "headline": "release v1.22.6",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T14:30:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7734886c26e442969ffcc3d0cc3b2c8782650ee",
          "body": null,
          "is_bot": false,
          "headline": "move prompt to completed",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T14:30:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ccb1fff52cade02dae48a6462bb8c8c57234d7bb",
          "body": null,
          "is_bot": false,
          "headline": "setup dark-factory config and directories",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-20T12:46:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a3da02e5d7c0b984a54944a6c95a4e09662a28e",
          "body": null,
          "is_bot": false,
          "headline": "update dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-06T22:20:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49640f7160bfd97d3813bf2331be5658c0fa8f8b",
          "body": null,
          "is_bot": false,
          "headline": "update dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-03-06T22:05:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0dd935305e604215192f7e2da1b863d89857f368",
          "body": null,
          "is_bot": false,
          "headline": "release v1.22.3",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-02-12T23:46:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9080a46795e2b2bfb0726ebca03d00b586433732",
          "body": "Update Go to 1.26.0",
          "is_bot": false,
          "headline": "Merge pull request #11 from openclaw-for-ben/update/go-1.26.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-02-12T23:33:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15e234d063927370481843c0397ea1f46e63c310",
          "body": null,
          "is_bot": false,
          "headline": "Update Go to 1.26.0",
          "author_name": "Bens PersonalAssistant",
          "author_login": "openclaw-for-ben",
          "committed_at": "2026-02-12T22:33:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2beac750548db0c24196cde11d656d4ed45e0b70",
          "body": "…ondition\n\nfix: race condition in NewOffsetTriggerMessageHandler",
          "is_bot": false,
          "headline": "Merge pull request #8 from openclaw-for-ben/fix/offset-trigger-race-c…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-02-12T08:15:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "805ebf939d2bd73ea0e2cd00545a6bd4948cc699",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into fix/offset-trigger-race-condition",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-02-12T08:04:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3588921392d6c9454cf21919d3b9708d9022818a",
          "body": "Co-authored-by: Benjamin Borbe <benjamin.borbe@gmail.com>",
          "is_bot": false,
          "headline": "use go-version-file in CI workflow (#9)",
          "author_name": "localclaw-for-ben",
          "author_login": "localclaw-for-ben",
          "committed_at": "2026-02-12T08:02:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "648ca0a44b96b3ea3e04dddd1f478e08be6e891a",
          "body": "bump go-git/v5 to v5.16.5 (fix GHSA-37cx-329c-33x3)",
          "is_bot": false,
          "headline": "Merge pull request #10 from localclaw-for-ben/fix/go-git-vuln",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-02-12T07:33:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "966b093b40079cb554fb5ad89925b5290ae5d339",
          "body": null,
          "is_bot": false,
          "headline": "bump go-git/v5 to v5.16.5 (fix GHSA-37cx-329c-33x3)",
          "author_name": "LocalClaw",
          "author_login": "localclaw-for-ben",
          "committed_at": "2026-02-11T21:36:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc2977afbee93fe92de0f248b284e1386d6686db",
          "body": "The previous implementation released the mutex between checking if a partition\nexisted and deleting it + calling wg.Done(). This allowed multiple goroutines\nprocessing messages for the same partition to both pass the check and both\ncall wg.Done(), causing a panic.\n\nFixed by holding the lock for the entire check+delete sequence, only releasing\nbefore wg.Done() (which is safe since the partition is already removed).\n\nAlso fixed typo: partiton -> partition",
          "is_bot": false,
          "headline": "fix: race condition in NewOffsetTriggerMessageHandler",
          "author_name": "Bens PersonalAssistant",
          "author_login": "openclaw-for-ben",
          "committed_at": "2026-02-11T13:37:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80f4089e98ea6e5ef4e901b2b07bb24ba1bb6de3",
          "body": null,
          "is_bot": false,
          "headline": "Update GitHub Actions to latest versions (#7)",
          "author_name": "openclaw-for-ben",
          "author_login": "openclaw-for-ben",
          "committed_at": "2026-02-09T13:44:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd000df98529ee9044209afa31f706433a5833e6",
          "body": "- checkout: v4 → v6\n- setup-go: v5 → v6\n- codecov: v4 → v5",
          "is_bot": false,
          "headline": "Update GitHub Actions to latest versions",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-02-09T12:07:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5f4a9914f4cf65d74660ee4254c53545b0693ab",
          "body": "- Trigger: 'claude-review' label (manual opt-in)\n- Skips fork PRs automatically (can't access secrets)\n- Matches go-skeleton/log/errors pattern",
          "is_bot": false,
          "headline": "Switch to label-triggered Claude review workflow",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-02-09T10:37:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfaf9e5abec3b3f61b3069bd379b23db272003cc",
          "body": "Update Go to 1.25.7 and dependencies",
          "is_bot": false,
          "headline": "Merge pull request #6 from openclaw-for-ben/update-go-1.25.7",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-02-07T00:54:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7035c46f6df053147a050c9bf00b78aadbf3add4",
          "body": null,
          "is_bot": false,
          "headline": "chore: update Go 1.25.7 and dependencies",
          "author_name": "Bens PersonalAssistant",
          "author_login": "openclaw-for-ben",
          "committed_at": "2026-02-07T00:22:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a1a44cfe99fb8e466b1b9c5bf807a10d73ee3bd",
          "body": null,
          "is_bot": false,
          "headline": "update Go 1.25.5 and dependencies",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2026-01-13T17:01:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b12d3e120fd8ba639b731767f3f6999496e99a6",
          "body": null,
          "is_bot": false,
          "headline": "add SaramaClientPool with connection pooling and health checks",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-12-30T14:28:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4a0eadb2540787888fb1336f942503f4e729df6",
          "body": null,
          "is_bot": false,
          "headline": "add ResetOffset method for backward offset management",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-12-12T14:10:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32d3b534dbe63e74908ab053c3aafee12ca22a0a",
          "body": "…ibility\n\nUpdated error data maps from map[string]string to map[string]any to match\nerrors.AddDataToError function signature across skip error handler functions.",
          "is_bot": false,
          "headline": "fix: change map[string]string to map[string]any for error data compat…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-12-09T10:43:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2ad58960624a3ab4765de3dcdc153b8e202df860",
          "body": null,
          "is_bot": false,
          "headline": "update go and deps",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-12-05T22:31:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fb10d497c476a48ffa406e76b9c639af3326e71",
          "body": "…nfiguration\n\nAdded comprehensive performance tuning guide to README demonstrating\nhow to configure Sarama client for high-throughput scenarios. Documents\nconfiguration parameters for Consumer.MaxWaitTime, Fetch.Default,\nFetch.Max, and ChannelBufferSize with clear explanations of defaults\nand trade-offs between throughput and latency.",
          "is_bot": false,
          "headline": "docs: add performance tuning section with high-throughput consumer co…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-11-14T16:13:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9506f86dc496adbfa80de4731c2711436d29afd",
          "body": null,
          "is_bot": false,
          "headline": "release version v1.19.3",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-11-14T15:17:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "901eed0b0a757d2fc79c320f380f5f7a7a553ffd",
          "body": null,
          "is_bot": false,
          "headline": "release version v1.19.2",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T10:17:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54f136d09fb392ad06fc1da72372b57c768ed91a",
          "body": null,
          "is_bot": false,
          "headline": "release version v1.19.1",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T10:06:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d76aa755bd6fb508834aa29c6546b5796769e708",
          "body": null,
          "is_bot": false,
          "headline": "release version v1.19.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T09:49:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb1d7e516eb0ba5d822aa635f23ccde2ba984eb3",
          "body": null,
          "is_bot": false,
          "headline": "release version v1.18.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T08:51:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e89eafbcacd726ded770515093683a195dd11a8d",
          "body": null,
          "is_bot": false,
          "headline": "release version v1.17.5",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T08:46:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3870f86d835f69ed588703e01b8033facddb1e87",
          "body": null,
          "is_bot": false,
          "headline": "fix names",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T08:43:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5106b7d36971ade6accd30d0dd8685a714197e8",
          "body": null,
          "is_bot": false,
          "headline": "allow duplicate code in tests",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T08:43:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c8ee0f35d31aa3825d16acf580bbed3dfe26e38",
          "body": null,
          "is_bot": false,
          "headline": "enable make lint",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T08:42:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "505d69ddab8b4816bf1a78d0dd13c6a844d960ff",
          "body": null,
          "is_bot": false,
          "headline": "fix names and add deprecated fallbacks",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T08:42:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "adaa99bb8af2d4c117fbcd50e15e0a02aaa9009b",
          "body": null,
          "is_bot": false,
          "headline": "dont shadow go build ins",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T08:40:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6726c9fc5267d6f6572fc2d9117561cd8cdcff3",
          "body": null,
          "is_bot": false,
          "headline": "handler err",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T08:27:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c77f80df8bdf4a9a2c4c14a4fa1fac2bc2b59c13",
          "body": null,
          "is_bot": false,
          "headline": "improve tests",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T08:27:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21651b143274d12a141009db1fc94c97affce3b9",
          "body": null,
          "is_bot": false,
          "headline": "handle err",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-31T08:27:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e80b9c9973fa707ba15ba019d10f07b14a71f82",
          "body": null,
          "is_bot": false,
          "headline": "restore textmarshaler",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-19T12:43:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc72fd457bbc5374e5a2edc028e57f1d55700ff5",
          "body": "This reverts commit cbc3e6e7233d3573de6b0139932d6b4ef1db18fc.",
          "is_bot": false,
          "headline": "Revert \"remove text marshal\"",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-19T12:36:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cbc3e6e7233d3573de6b0139932d6b4ef1db18fc",
          "body": null,
          "is_bot": false,
          "headline": "remove text marshal",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-19T12:00:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a98823f77201daf72ca9d311016349ddd733df28",
          "body": null,
          "is_bot": false,
          "headline": "release version v1.17.2",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-18T20:15:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67da3db9e984136aa5d48f26341a1f7310bfee1e",
          "body": null,
          "is_bot": false,
          "headline": "release version v1.17.1",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-18T16:51:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee577fdc5f18b9eec9d6dcf55fb10d8a3909c7ab",
          "body": null,
          "is_bot": false,
          "headline": "release version v1.17.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-18T16:14:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f97e692451f2803c839e669bcbb98d3bd92a75e6",
          "body": null,
          "is_bot": false,
          "headline": "rename files",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-14T08:23:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8caa22e899f74525edafa24e7ac0602a8fdf1b34",
          "body": null,
          "is_bot": false,
          "headline": "release version 1.16.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-14T07:57:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e42e817a0f728f82e2dadb7d7e4ec0527824bc1e",
          "body": null,
          "is_bot": false,
          "headline": "fix github action",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-12T08:53:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ab0d3ed7f172382a9730630949b0c60bd9ffecb",
          "body": null,
          "is_bot": false,
          "headline": "release version 1.15.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-10-12T08:18:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21ba7279b5926fac2d763e0a579e3ffd835ba019",
          "body": null,
          "is_bot": false,
          "headline": "revert JSONSender back to JsonSender",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-09-01T20:04:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c75351866a42e5af862637c6ab3e31b7968dd5fe",
          "body": null,
          "is_bot": false,
          "headline": "release version 1.14.0",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-08-28T22:17:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6250e8364c7f627361eb0f041ff1c61f490d2e85",
          "body": null,
          "is_bot": false,
          "headline": "add IsBrokenPipeError func",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-08-28T21:57:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "beeacea2f9a57b81f4812a9d1415ecd86602931b",
          "body": null,
          "is_bot": false,
          "headline": "add license file",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-08-28T21:57:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6b6f4c49a1c3f0d2781c44f9ad1b1e727b3ef888",
          "body": "Update GitHub workflows",
          "is_bot": false,
          "headline": "Merge pull request #5 from bborbe/update-github-workflows",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-07-22T13:30:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4fed380116a70483347885b28c1f38dcef698aa",
          "body": null,
          "is_bot": false,
          "headline": "Update GitHub workflows",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-07-22T13:26:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e20d61c6bac8736f8b6134c2a78d00af42509ef0",
          "body": "fix test coverage",
          "is_bot": false,
          "headline": "Merge pull request #1 from bborbe/fix-test-coverage",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-07-18T12:47:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "28ddc36f3da6590bf09596542ab67b45fa639b2c",
          "body": "…0829\n\nAdd Claude Code GitHub Workflow",
          "is_bot": false,
          "headline": "Merge pull request #2 from bborbe/add-claude-github-actions-175284251…",
          "author_name": "Benjamin Borbe",
          "author_login": "bborbe",
          "committed_at": "2025-07-18T12:44:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 97,
      "commits_last_year": 96,
      "latest_release_at": "2026-07-19T19:14:26Z",
      "latest_release_tag": "v1.25.5",
      "releases_from_tags": true,
      "days_since_last_push": 8,
      "active_weeks_last_year": 26,
      "days_since_latest_release": 8,
      "mean_days_between_releases": 5.5
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 28,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/bborbe/kafka",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/bborbe/kafka",
          "is_deprecated": false,
          "latest_version": "v1.25.5",
          "repository_url": "https://github.com/bborbe/kafka",
          "versions_count": 97,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-19T19:14:26Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        }
      ]
    },
    "popularity": {
      "forks": 2,
      "stars": 0,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2026-02-07",
            "count": 1
          },
          {
            "date": "2026-02-11",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 2,
        "total_forks": 2
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 54687,
      "source_files_sampled": 158,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.6",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5841"
            ],
            "fixed_version": "1.18.7",
            "advisory_count": 1,
            "oldest_advisory_days": 0
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.53.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 20
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 2
        },
        "advisory_count": 2,
        "affected_count": 2,
        "assessed_count": 54,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/IBM/sarama",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.50.3"
        },
        {
          "name": "github.com/bborbe/boltkv",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.14.4"
        },
        {
          "name": "github.com/bborbe/collection",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.20.17"
        },
        {
          "name": "github.com/bborbe/errors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.16"
        },
        {
          "name": "github.com/bborbe/http",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.26.16"
        },
        {
          "name": "github.com/bborbe/kv",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.21.6"
        },
        {
          "name": "github.com/bborbe/log",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.17"
        },
        {
          "name": "github.com/bborbe/memorykv",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.5"
        },
        {
          "name": "github.com/bborbe/parse",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.17"
        },
        {
          "name": "github.com/bborbe/run",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.9.30"
        },
        {
          "name": "github.com/bborbe/time",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.27.5"
        },
        {
          "name": "github.com/bborbe/validation",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.16"
        },
        {
          "name": "github.com/golang/glog",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.5"
        },
        {
          "name": "github.com/onsi/ginkgo/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.32.0"
        },
        {
          "name": "github.com/onsi/gomega",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.42.1"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.23.2"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/bborbe/boltkv",
            "direct": true,
            "version": "v1.14.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/collection",
            "direct": true,
            "version": "v1.20.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/errors",
            "direct": true,
            "version": "v1.5.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/http",
            "direct": true,
            "version": "v1.26.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/kv",
            "direct": true,
            "version": "v1.21.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/log",
            "direct": true,
            "version": "v1.6.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/memorykv",
            "direct": true,
            "version": "v1.6.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/parse",
            "direct": true,
            "version": "v1.10.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/run",
            "direct": true,
            "version": "v1.9.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/time",
            "direct": true,
            "version": "v1.27.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/validation",
            "direct": true,
            "version": "v1.4.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/glog",
            "direct": true,
            "version": "v1.2.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ibm/sarama",
            "direct": true,
            "version": "v1.50.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/ginkgo/v2",
            "direct": true,
            "version": "v2.32.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/gomega",
            "direct": true,
            "version": "v1.42.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/math",
            "direct": false,
            "version": "v1.3.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bborbe/sentry",
            "direct": false,
            "version": "v1.9.22",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/eapache/go-resiliency",
            "direct": false,
            "version": "v1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/getsentry/sentry-go",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-task/slim-sprig/v3",
            "direct": false,
            "version": "v3.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/pprof",
            "direct": false,
            "version": "v0.0.0-20260604005048-7023385849c0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/mux",
            "direct": false,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-uuid",
            "direct": false,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jcmturner/aescts/v2",
            "direct": false,
            "version": "v2.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jcmturner/dnsutils/v2",
            "direct": false,
            "version": "v2.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jcmturner/gofork",
            "direct": false,
            "version": "v1.7.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jcmturner/gokrb5/v8",
            "direct": false,
            "version": "v8.4.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jcmturner/rpc/v2",
            "direct": false,
            "version": "v2.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pierrec/lz4/v4",
            "direct": false,
            "version": "v4.1.27",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rcrowley/go-metrics",
            "direct": false,
            "version": "v0.0.0-20250401214520-65e299d6c5c9",
            "ecosystem": "go"
          },
          {
            "name": "go.etcd.io/bbolt",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.53.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20260611194520-c48552f49976",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.56.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.39.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.11",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 54,
        "direct_count": 16,
        "indirect_count": 38
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 14,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 1,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "bborbe",
          "commits": 165,
          "avatar_url": "https://avatars.githubusercontent.com/u/1193284?v=4"
        },
        {
          "type": "User",
          "login": "openclaw-for-ben",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/259869104?v=4"
        },
        {
          "type": "User",
          "login": "localclaw-for-ben",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/260965567?v=4"
        }
      ],
      "contributors_sampled": 3,
      "top_contributor_share": 0.965
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "claude-code-review.yml",
        "claude.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 1,
            "reason": "Found 4/21 approved changesets -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 0,
            "reason": "dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "207b7344e4187a30393e73d4ed98b7e4c7166df8",
        "ran_at": "2026-07-28T02:00:06Z",
        "aggregate_score": 3.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-19T19:27:48Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-19T19:11:24Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/bborbe/kafka",
    "host": "github.com",
    "name": "kafka",
    "owner": "bborbe"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 59,
      "inputs": {
        "security": 45,
        "vitality": 80,
        "community": 24,
        "governance": 61,
        "engineering": 76
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 80,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "commits_last_year": 96,
              "human_commit_share": 1,
              "days_since_last_push": 8,
              "active_weeks_last_year": 26
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 8 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "26/52 weeks with commits",
                "points": 18,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 26
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "96 commits in the last year",
                "points": 17.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 96
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "releases_count": 97,
              "latest_release_tag": "v1.25.5",
              "releases_from_tags": true,
              "days_since_latest_release": 8,
              "mean_days_between_releases": 5.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "97 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 97
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 8 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~5.5 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 5.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 8,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 8 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 24,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 2,
              "stars": 0,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "2 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (BSD-2-Clause)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "BSD-2-Clause"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 61,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 3,
              "top_contributor_share": 0.965
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 96% of commits",
                "points": 0.8,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 96
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "3 contributors",
                "points": 4.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "merged_prs": 14,
              "open_issues": 0,
              "closed_issues": 1,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "14/15 decided PRs merged",
                "points": 35.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 14,
                      "decided": 15
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 4/21 approved changesets -- score normalized to 1",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 57,
            "inputs": {
              "followers": 30,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "bborbe",
              "public_repos": 206,
              "account_age_days": 5369
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "30 followers of bborbe",
                "points": 10.7,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 30,
                      "login": "bborbe"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "206 public repos, account ~14 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 206
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 14
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/bborbe/kafka"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 8
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 8 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "97 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 97
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 76,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 45,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 31,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 3.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 4/21 approved changesets -- score normalized to 1",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "dangerous workflow patterns detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 54 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 54
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 2,
              "affected_packages": 2,
              "assessed_packages": 54,
              "unassessed_packages": 0,
              "affected_by_severity": "unknown 2",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 54,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 59,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.38,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "38 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 20.3,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 38,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 54687,
              "source_files_sampled": 158,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/158 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 158,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [],
  "report_type": "repository",
  "generated_at": "2026-07-28T02:00:17.120971Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/bborbe/kafka.svg",
  "full_name": "bborbe/kafka",
  "license_state": "standard",
  "license_spdx": "BSD-2-Clause"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsGo.