Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-27 15:37 UTC
cern-eos / eosxd-csi
EOS CSI driver
cern-eos/eosxd-csi holds a health index of 53 out of 100, placing it in the Moderate band. It scores highest on Vitality (66/100) and lowest on Security (36/100). It was last updated 5 days ago. A single contributor accounts for most of its recent work.
53
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
53
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
cern-eosOrganization
14 followers30 public repossince Oct 2013
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/cern-eos/eosxd-csi | v1.4.7 | - | 30 | 5 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
66
Development activity
48At risk
How it's scored
| 36/36 | Push recency — last push 5 days ago |
| 2.8/36 | Commit cadence — 4/52 weeks with commits |
| 8.1/18 | Commit volume — 7 commits in the last year |
| 1/10 | OpenSSF Scorecard: Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1 |
Inputs used
| commits_last_year | 7 |
| human_commit_share | 1 |
| days_since_last_push | 5 |
| active_weeks_last_year | 4 |
Release discipline
92Excellent
How it's scored
| 27/27 | Ships releases — 10 releases published |
| 36/36 | Release recency — latest release 5 days ago |
| 19.8/27 | Release cadence — a release every ~97.4 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 10 |
| latest_release_tag | v1.4.7 |
| releases_from_tags | no |
| days_since_latest_release | 5 |
| mean_days_between_releases | 97.4 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
41
Popularity & adoption
15Critical
How it's scored
| 7.7/60 | Stars — 4 stars |
| 2.5/25 | Forks — 3 forks |
| 4.7/15 | Watchers — 8 watchers |
Inputs used
| forks | 3 |
| stars | 4 |
| watchers | 8 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
70Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
65
Maintainer resilience (bus factor)
27Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 7/22.5 | Commit distribution — top contributor authored 69% of commits |
| 8.1/13.5 | Contributor breadth — 6 contributors |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 6 |
| top_contributor_share | 0.687 |
Issue & PR responsiveness
88Excellent
How it's scored
| 46.8/46.8 | Issue resolution — 100% of issues closed |
| 33.3/38.3 | PR acceptance — 27/31 decided PRs merged |
| 7.5/15 | OpenSSF Scorecard: Code-Review — Found 14/26 approved changesets -- score normalized to 5 |
Inputs used
| merged_prs | 27 |
| open_issues | 0 |
| closed_issues | 4 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 4 |
Ownership & stewardship
61Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 8.5/25 | Owner reach — 14 followers of cern-eos |
| 22.9/25 | Track record — 30 public repos, account ~12 yr old |
Inputs used
| followers | 14 |
| owner_type | Organization |
| is_verified | — |
| owner_login | cern-eos |
| public_repos | 30 |
| account_age_days | 4,676 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 5 days ago |
| 20/20 | Version history — 30 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/cern-eos/eosxd-csi |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 5 |
Engineering Quality
Are baseline engineering and documentation practices in place?
47
Engineering practices
28Critical
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 0/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 4/20 | OpenSSF Scorecard: CI-Tests — 6 out of 22 merged PRs checked by a CI test -- score normalized to 2 |
Inputs used
| has_ci | yes |
| has_tests | no |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
75Good
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
36
Security posture
31At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 2.2/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 0.5/2.5 | CI-Tests — 6 out of 22 merged PRs checked by a CI test -- score normalized to 2 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 3.8/7.5 | Code-Review — Found 14/26 approved changesets -- score normalized to 5 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0.8/7.5 | Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1 |
| 0/5 | Packaging — no data |
| 0.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 14 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 3.1 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
56Moderate
How it's scored
| 9.5/35 | Direct dependencies free of known advisories — 1 affected: google.golang.org/grpc 1.74.2 (critical 9.1) |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 32.6/40 | No advisories left outstanding — 1 advisory-carrying package(s) unaddressed past 90 days; oldest published 130 days ago |
Inputs used
| source | osv |
| advisories | 16 |
| affected_packages | 4 |
| assessed_packages | 14 |
| unassessed_packages | 0 |
| affected_by_severity | critical 1, moderate 1, unknown 2 |
| direct_affected_packages | 1 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 14 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
49
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 80 of 99 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.808 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 0/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 99 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 1/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
Inputs used
| has_nix | no |
| has_tests | no |
| lockfiles | go.sum |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/17 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 7,404 |
| source_files_sampled | 17 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — example |
Inputs used
| example_dirs | example |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
4GitHub stars
6contributors
7commits, last 12 months
5days since last push
10releases
1bus factor
0open issues
Gopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 3 ⇿
0Stars
3Forks
4Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 1Patch 3
OpenSSF Scorecard 3.1 / 10
3.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 3 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 2 | CI-Tests | 6 out of 22 merged PRs checked by a CI test -- score normalized to 2 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 5 | Code-Review | Found 14/26 approved changesets -- score normalized to 5 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 1 | Maintained | 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1 |
| n/a | Packaging | packaging workflow not detected |
| 1 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 1 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 14 existing vulnerabilities detected |
Direct dependencies 7
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/container-storage-interface/spec | v1.11.0 | go.mod |
| Go | github.com/kubernetes-csi/csi-lib-utils | v0.22.0 | go.mod |
| Go | github.com/moby/sys/mountinfo | v0.7.2 | go.mod |
| Go | google.golang.org/grpc | v1.74.2 | go.mod |
| Go | k8s.io/apimachinery | v0.33.3 | go.mod |
| Go | k8s.io/klog/v2 | v2.130.1 | go.mod |
| Go | k8s.io/mount-utils | v0.33.3 | go.mod |
All dependencies 14
Full resolved dependency set from the GitHub dependency graph: 7 direct and 7 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/container-storage-interface/spec | 1.11.0 | direct |
| Go | github.com/kubernetes-csi/csi-lib-utils | 0.22.0 | direct |
| Go | github.com/moby/sys/mountinfo | 0.7.2 | direct |
| Go | google.golang.org/grpc | 1.74.2 | direct |
| Go | k8s.io/apimachinery | 0.33.3 | direct |
| Go | k8s.io/klog/v2 | 2.130.1 | direct |
| Go | k8s.io/mount-utils | 0.33.3 | direct |
| Go | github.com/go-logr/logr | 1.4.3 | indirect |
| Go | golang.org/x/net | 0.42.0 | indirect |
| Go | golang.org/x/sys | 0.34.0 | indirect |
| Go | golang.org/x/text | 0.27.0 | indirect |
| Go | google.golang.org/genproto/googleapis/rpc | 0.0.0-20250728155136-f173205681a0 | indirect |
| Go | google.golang.org/protobuf | 1.36.6 | indirect |
| Go | k8s.io/utils | 0.0.0-20250604170112-4c0f3b243397 | indirect |
Dependency advisories 4
This repository publishes no package the index resolves, so its own dependency graph was assessed — 14 packages, which also include development and test pins that never ship: 4 carry known advisories, of which 1 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| google.golang.org/grpc | 1.74.2 | direct | critical | 3 | 1.82.1 |
| golang.org/x/net | 0.42.0 | indirect | moderate | 11 | 1.26.3 |
| golang.org/x/sys | 0.34.0 | indirect | unknown | 1 | 0.44.0 |
| golang.org/x/text | 0.27.0 | indirect | unknown | 1 | 0.39.0 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 224,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 57072,
"Makefile": 4554,
"Mustache": 4706,
"Dockerfile": 2177
},
"pushed_at": "2026-07-22T11:29:00Z",
"created_at": "2024-02-07T16:54:04Z",
"owner_type": "Organization",
"updated_at": "2026-07-17T12:57:13Z",
"description": "EOS CSI driver",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "cern-eos",
"company": null,
"location": null,
"followers": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/5629795?v=4",
"created_at": "2013-10-07T14:30:53Z",
"is_verified": null,
"public_repos": 30,
"account_age_days": 4676
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.4.7",
"kind": "patch",
"published_at": "2026-07-22T12:39:20Z"
},
{
"tag": "v1.4.6",
"kind": "patch",
"published_at": "2026-07-17T13:50:27Z"
},
{
"tag": "v1.4.4",
"kind": "patch",
"published_at": "2025-07-31T09:44:30Z"
},
{
"tag": "v1.4.3",
"kind": "patch",
"published_at": "2024-08-02T14:20:45Z"
},
{
"tag": "v1.4.2",
"kind": "patch",
"published_at": "2024-07-09T12:35:29Z"
},
{
"tag": "v1.4.1",
"kind": "patch",
"published_at": "2024-06-07T07:42:32Z"
},
{
"tag": "v1.3.3",
"kind": "patch",
"published_at": "2024-04-09T19:07:36Z"
},
{
"tag": "v1.3.2",
"kind": "patch",
"published_at": "2024-04-03T10:35:46Z"
},
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2024-03-06T13:14:46Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2024-02-26T17:04:48Z"
}
],
"recent_commits": [
{
"oid": "7212e6a5472448a78c710fd1216a7f42c09d9f8f",
"body": null,
"is_bot": false,
"headline": "build: upgrade eosxd-fusex to 5.4.8 (#34)",
"author_name": "David Smith",
"author_login": "smithdh",
"committed_at": "2026-07-17T12:56:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc9c25ec4972e99432aa71a9d6f9c29646c84de8",
"body": "* fix: drop setting KEYRING for kerberos authentication\n\nSigned-off-by: Jack Charlie Munday <1602077@users.noreply.github.com>\n\n* pin gofumpt to 0.9.2\n\nSigned-off-by: Jack Charlie Munday <1602077@users.noreply.github.com>\n\n---------\n\nSigned-off-by: Jack Charlie Munday <1602077@users.noreply.github.com>\nCo-authored-by: Jack Charlie Munday <1602077@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: drop setting KEYRING for kerberos authentication (#35)",
"author_name": "jack munday",
"author_login": "1602077",
"committed_at": "2026-07-17T12:54:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e21821e8f490c8f90c5f20547f7f7732d82c6efa",
"body": "…#32)\n\nCo-authored-by: Andreas Joachim Peters <andreas.joachim.peters@cern.ch>",
"is_bot": false,
"headline": "autofs: expose /eos/user and /eos/project as per-letter autofs maps (…",
"author_name": "Diogo Castro",
"author_login": "diocas",
"committed_at": "2026-03-09T17:35:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "934832f8a82bfd9e0ae349414381fb01f3c26a24",
"body": "Signed-off-by: Jack Charlie Munday <1602077@users.noreply.github.com>",
"is_bot": false,
"headline": "build(ci): migrate docker build away from privileged runners (#31)",
"author_name": "jack munday",
"author_login": "1602077",
"committed_at": "2026-02-06T10:50:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "164da8ccc7b718bf15401f78f956bc8a2caeb482",
"body": null,
"is_bot": false,
"headline": "build: upgrade eosxd-fusex to 5.3.27 (#30)",
"author_name": "jack munday",
"author_login": "1602077",
"committed_at": "2026-02-04T12:51:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9b61c821ff2ecd6c727daaa483fc336bf02ec82",
"body": "* security: upgrade to go version from 1.22.2 to 1.24.0.\n* security: upgrade base image to gitlab-registry.cern.ch/linuxsupport/alma9-base:20250730-2.\n* chore: bump go dependencies to latest.",
"is_bot": false,
"headline": "build: upgrade to go 1.24 (#26)",
"author_name": "jack",
"author_login": "1602077",
"committed_at": "2025-07-30T15:12:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "724a37b10d300b5d987361cf8cbea843b6827964",
"body": null,
"is_bot": false,
"headline": "Update Dockerfile to more recent EOS version (5.3.14) (#28)",
"author_name": "David Smith",
"author_login": "smithdh",
"committed_at": "2025-07-30T14:57:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45f605f5e0ecdd7b3dba871586654ff0cbdbf5c3",
"body": "docs: update `how-to-use.md`",
"is_bot": false,
"headline": "Merge pull request #25 from cern-eos/docs/how-to-use",
"author_name": "Ricardo Rocha",
"author_login": "rochaporto",
"committed_at": "2025-03-26T16:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de07ba247ce451c77f6a8aa8a71cf67f7f4e1ea9",
"body": "Signed-off-by: 1602077 <62025739+1602077@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: update how to use section",
"author_name": "jmunday",
"author_login": "1602077",
"committed_at": "2025-03-26T15:47:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa04275ac4755f3aa379f04462492eb46d3295fc",
"body": null,
"is_bot": false,
"headline": "deploy(helm): add generous resource limits to eosxd-csi pods (#24)",
"author_name": "jack",
"author_login": "1602077",
"committed_at": "2024-11-07T15:18:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "648e5c8533a45a9d1047cff0eecb6699e5b444a2",
"body": null,
"is_bot": false,
"headline": "build(ci): fix commit tag referencing when pushing helm chart",
"author_name": "jmunday",
"author_login": "1602077",
"committed_at": "2024-10-11T14:19:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6e97a9b09666d6d6215464716006ae581f2d0bd",
"body": "…lugin config (#23)",
"is_bot": false,
"headline": "deploy(helm): fix nodeplugin security context referencing controllerp…",
"author_name": "jack",
"author_login": "1602077",
"committed_at": "2024-10-10T13:13:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07f7c7abb8833b1f418c1ec42b4cd5731e01c2d1",
"body": "* eosxd-csi nodeplugin daemonsets update strategy is now RollingUpdate. This will ensure daemonsets pods are now updated after helm upgrade ....\r\n* added checksum annotation of extraConfigMaps to controllerplugin and nodeplugin, which will ensure that config only updates are propagated to pods.\r\n* updated gitlab build-chart ci to fixing cosigning of helm charts in registry.cern.ch.",
"is_bot": false,
"headline": "deploy(helm): switch daemonset update strategy to rolling update (#22)",
"author_name": "jack",
"author_login": "1602077",
"committed_at": "2024-10-07T08:27:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2c0268c7d99b007944a85d746230f34beeab389",
"body": null,
"is_bot": false,
"headline": "Update Dockerfile to latest EOS version (5.2.24) (#21)",
"author_name": "David Smith",
"author_login": "smithdh",
"committed_at": "2024-08-02T11:28:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "553c61ac09f79ba74427f629bfb316bf1894fbd3",
"body": null,
"is_bot": false,
"headline": "deploy: pin images for v1.4.2 release",
"author_name": "jmunday",
"author_login": "1602077",
"committed_at": "2024-07-09T12:18:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e40e40ff5ce1adadc953a6835b2ac336f44afe47",
"body": null,
"is_bot": false,
"headline": "deploy: pin images for v1.4.1 release",
"author_name": "jmunday",
"author_login": "1602077",
"committed_at": "2024-07-09T12:13:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69756fec10a294c85124e5bf1aee08758294a256",
"body": null,
"is_bot": false,
"headline": "fix: remove deprecated arcfour-hmac-md5 cipher (#18)",
"author_name": "jack",
"author_login": "1602077",
"committed_at": "2024-07-09T12:03:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee2e94d7fb25cfa5e745f689aa4ad2b9cf1d8977",
"body": "* deploy: plugin image tags default to pull from Chart AppVersion\r\n\r\n* fix csi-node-driver-registrar version",
"is_bot": false,
"headline": "deploy: set plugin image tags from Chart AppVersion (#16)",
"author_name": "jack",
"author_login": "1602077",
"committed_at": "2024-07-09T12:00:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55f404bfa8c6d2b1a804c620e971b0ba25f5e05b",
"body": "* build: add basic go ci",
"is_bot": false,
"headline": "build(ci): add basic go ci to test and lint codebase (#14)",
"author_name": "jack",
"author_login": "1602077",
"committed_at": "2024-06-12T08:26:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90f88fa65d419cc39af789abf8c2c79963500197",
"body": "… than being baked into dockerfile (#17)\n\n* move crypto-policies to be configurable via helm",
"is_bot": false,
"headline": "deploy: /etc/krb5.conf.d/crypto-policies configurable via helm rather…",
"author_name": "jack",
"author_login": "1602077",
"committed_at": "2024-06-06T13:44:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c991745945ad9acf8962dd04d61785cbdad106a",
"body": null,
"is_bot": false,
"headline": "build: bump go deps to latest",
"author_name": "jmunday",
"author_login": "1602077",
"committed_at": "2024-05-31T14:37:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c510e957caba65c85f24f1f986240d71df5b3ee0",
"body": "* security: refactor dockerfile\r\n\r\n* chore: add .gitignore to exclude binaries\r\n\r\n* refactor: switch to use dnf pkg manager\r\n\r\n---------\r\n\r\nCo-authored-by: jack munday <jack.charlie.munday@cern.ch>",
"is_bot": false,
"headline": "build(docker): upgrade base image to latest version of `alma9` (#13)",
"author_name": "jack",
"author_login": "1602077",
"committed_at": "2024-05-31T11:37:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a478d38b047db1a5625d2d7733e54588887b341",
"body": "…(#12)\n\n* deploy: seccomp profile of runtime default\r\n---------\r\n\r\nCo-authored-by: jack munday <jack.charlie.munday@cern.ch>",
"is_bot": false,
"headline": "deploy(helm): configure seccomp profile for node & controller plugin …",
"author_name": "jack",
"author_login": "1602077",
"committed_at": "2024-05-31T11:34:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "810a8978b7cb28dbe9974249923198d43ff8fca5",
"body": "* chore: gofumpt\r\n* build(go): upgrade to go 1.22\r\n\r\n---------\r\n\r\nCo-authored-by: jack munday <jack.charlie.munday@cern.ch>",
"is_bot": false,
"headline": "build(go): upgrade to v1.22.0 (#11)",
"author_name": "jack",
"author_login": "1602077",
"committed_at": "2024-05-31T11:30:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03f90100ed739602dd68e9e3f41060290fc6dd6d",
"body": "update eos client to 5.2.22",
"is_bot": false,
"headline": "Merge pull request #10 from cern-eos/EOS-5.2.22",
"author_name": "Ricardo Rocha",
"author_login": "rochaporto",
"committed_at": "2024-04-09T18:20:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b64156cd45fb9b4b01775fdb3eba0c07d4edb00",
"body": "Update to latest EOS version (5.2.22)",
"is_bot": false,
"headline": "Update Dockerfile",
"author_name": "Andreas-Joachim Peters",
"author_login": "apeters1971",
"committed_at": "2024-04-09T14:08:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a72d3c25b5013607546bfc7beb9f98480c4aacda",
"body": "Update to latest EOS client (5.2.21)",
"is_bot": false,
"headline": "Merge pull request #9 from diocas/main",
"author_name": "Ricardo Rocha",
"author_login": "rochaporto",
"committed_at": "2024-04-02T08:27:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50630d69820e4cd65cb01883faa00961fa455ab5",
"body": null,
"is_bot": false,
"headline": "Update to latest EOS version (5.2.21)",
"author_name": "Diogo Castro",
"author_login": "diocas",
"committed_at": "2024-03-26T15:36:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "843c958dc529008a79973bb533d3fe78ae553c39",
"body": null,
"is_bot": false,
"headline": "Change EOS Koji repo to the one used by the EOS team",
"author_name": "Diogo Castro",
"author_login": "diocas",
"committed_at": "2024-03-26T15:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe863937ef0d924fa97e408bfe7a03667922dfcd",
"body": "Make private before unmount",
"is_bot": false,
"headline": "Merge pull request #7 from gman0/make-private-before-unmount",
"author_name": "Róbert Vašek",
"author_login": "gman0",
"committed_at": "2024-02-29T20:12:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3e3ad6c90d9bded04ba32c39c8eacd3baab8828",
"body": null,
"is_bot": false,
"headline": "optionally wait for autofs in /eos/squashfs",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2024-02-29T20:09:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad9a7a9582d9f9a3b503ae856da09a88d00d46b4",
"body": "Nested autofs mounts (specifically /eos/squashfs) made it\nimpossible to unmount resulting in EBUSY. Making them private\nbefore unmount unblocks them.\n\nFixes https://github.com/cern-eos/eosxd-csi/issues/6",
"is_bot": false,
"headline": "node: make mounts in target_path rprivate before unmount",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2024-02-29T20:04:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efe36aa67ccc33e473fcdd12a8dc35ae570ada74",
"body": "docs: added document for contributors",
"is_bot": false,
"headline": "Merge pull request #5 from gman0/docs-contributing",
"author_name": "Róbert Vašek",
"author_login": "gman0",
"committed_at": "2024-02-26T16:39:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f43d34f649e289997ad1f7b91b0098c8430cce3a",
"body": null,
"is_bot": false,
"headline": "docs: added document for contributors",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2024-02-26T16:33:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ccf62a5da538a35052b4ee2f4975c8472dd544a",
"body": "ci: use golang:1.21 image",
"is_bot": false,
"headline": "Merge pull request #4 from gman0/ci-golang1.21",
"author_name": "Róbert Vašek",
"author_login": "gman0",
"committed_at": "2024-02-22T10:08:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "908f2232ac308df1371e179e090bf6edad74bf2c",
"body": null,
"is_bot": false,
"headline": "ci: use golang:1.21 image",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2024-02-22T10:06:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9175565c90032c972b65783c31e972301eaeb3e9",
"body": "added docs",
"is_bot": false,
"headline": "Merge pull request #3 from gman0/docs",
"author_name": "Róbert Vašek",
"author_login": "gman0",
"committed_at": "2024-02-22T09:54:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e29522d101715398924ced51c9d370fa395407e4",
"body": null,
"is_bot": false,
"headline": "added docs",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2024-02-22T09:54:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b23f4509668796e8b7aa96fc3fd77f6c55d5d2d",
"body": "Bump go packages and the base Alma9 image tag",
"is_bot": false,
"headline": "Merge pull request #2 from gman0/bump-pkgs",
"author_name": "Róbert Vašek",
"author_login": "gman0",
"committed_at": "2024-02-22T09:06:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "113e4064bf870fe5d135b75321333552c6ef52ee",
"body": null,
"is_bot": false,
"headline": "Bump go packages and the base Alma9 image tag",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2024-02-22T09:04:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "daeccf2fcc3cd19ee2a4c2665b8a6c13682651dd",
"body": "Set package base to github.com/cern-eos/eosxd-csi",
"is_bot": false,
"headline": "Merge pull request #1 from gman0/rename-pkgs",
"author_name": "Róbert Vašek",
"author_login": "gman0",
"committed_at": "2024-02-22T09:03:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd56d212e8e513e312034652509ff981a750a9f5",
"body": "The repository was moved from gitlab.cern.ch/kubernetes/storage/eosxd-csi\nto github.com/cern-eos/eosxd-csi. This commit renames things accordingly.",
"is_bot": false,
"headline": "Set package base to github.com/cern-eos/eosxd-csi",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2024-02-22T08:56:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "027062bfe83706e865510fd764bc912e089f9de7",
"body": "Dockerfile: install cern-eos-autofs-squashfs\n\nCloses #23\n\nSee merge request kubernetes/storage/eosxd-csi!27",
"is_bot": false,
"headline": "Merge branch 'eos-squashfs-support' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2024-02-07T09:35:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46f6d6ff2f5484200d02832887e5a2d094fe7f9e",
"body": "* Dockerfile: install cern-eos-autofs-squashfs\n* chart: added autofs map for /eos/squashfs",
"is_bot": false,
"headline": "added support for accessing squashfs images",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2024-02-06T14:25:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab865bdf412c0d713a6386ddec6bbb5b9355fc13",
"body": "examples: added manifests for dynamic PVC provisionig\n\nCloses #22\n\nSee merge request kubernetes/storage/eosxd-csi!26",
"is_bot": false,
"headline": "Merge branch 'example-storageclass' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-11-23T10:55:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8013472ef32ae2299e5e91712675ebe6e835a910",
"body": null,
"is_bot": false,
"headline": "examples: added manifests for dynamic PVC provisionig",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-11-23T10:49:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05a239a3fa4f6e5db4a095cd6dcf8fc860ccc185",
"body": "chart: lower log verbosity to 4\n\nCloses #18\n\nSee merge request kubernetes/storage/eosxd-csi!25",
"is_bot": false,
"headline": "Merge branch 'chart-logs-verbosity-4' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-11-23T10:41:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f100c69d92103baf6747af4b3b1a920aa794a152",
"body": null,
"is_bot": false,
"headline": "chart: lower log verbosity to 4",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-11-23T10:35:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46161ffb5d0e27e9567a23e594da374b2a639069",
"body": "chart: add optional common storage class\n\nCloses #21\n\nSee merge request kubernetes/storage/eosxd-csi!24",
"is_bot": false,
"headline": "Merge branch 'add-common-storageclass' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-11-21T10:23:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "693d6ff6e7ec0e4b282419fdc2d6093a02eaa88c",
"body": null,
"is_bot": false,
"headline": "chart: add optional common storage class",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-11-21T09:48:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f12d3aa42ee4b2820cb8494525cf1038c99d791",
"body": "Dynamic automount maps\n\nCloses #19\n\nSee merge request kubernetes/storage/eosxd-csi!23",
"is_bot": false,
"headline": "Merge branch 'dyn-automount-maps' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-11-16T12:42:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3429477be2dc3b935e9c661e2f589517217974d5",
"body": null,
"is_bot": false,
"headline": "Dynamic automount maps",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-11-16T12:42:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c573b50a3059a64718e4df04612dbb584e430c1b",
"body": "reconciler: clean mounts at start\n\nSee merge request kubernetes/storage/eosxd-csi!22",
"is_bot": false,
"headline": "Merge branch 'reconcile-at-start' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-30T17:34:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8143a50025cea380ce2548d64a855598f1e02819",
"body": null,
"is_bot": false,
"headline": "reconciler: clean mounts at start",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-30T17:29:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bcae32a051dff92eb6943068e2cd069476ec5c8",
"body": "fixed uninstall docs; fixed comment for AUTOFS_TRY_CLEAN_AT_EXIT\n\nSee merge request kubernetes/storage/eosxd-csi!21",
"is_bot": false,
"headline": "Merge branch 'fix-docs' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-30T16:54:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6074c970fd758341c968c4895bca810dc0535494",
"body": null,
"is_bot": false,
"headline": "fixed uninstall docs; fixed comment for AUTOFS_TRY_CLEAN_AT_EXIT",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-30T16:47:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a046690ef5b7fa7f159fb0a5bd121b79a8cf402f",
"body": "nodeplugin: added AUTOFS_TRY_CLEAN_AT_EXIT env var\n\nSee merge request kubernetes/storage/eosxd-csi!20",
"is_bot": false,
"headline": "Merge branch 'add-AutofsTryCleanAtExit-env' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-29T15:55:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76929fb4c3f76b5f7f560b7ff2b1c53996af45fa",
"body": null,
"is_bot": false,
"headline": "nodeplugin: added AUTOFS_TRY_CLEAN_AT_EXIT env var",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-29T15:42:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b40f7d5e66870493c8f221bc1c96c4286a6865bc",
"body": "chart: set automountDaemonUnmountTimeout to 600s (10min)\n\nSee merge request kubernetes/storage/eosxd-csi!19",
"is_bot": false,
"headline": "Merge branch 'chart-fix-unmount-timeout' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-28T15:47:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8e5b4c59ee3affa66fd546cfa0e42b196ad2439",
"body": "automount: shut down automount with SIGKILL\n\nCloses #16\n\nSee merge request kubernetes/storage/eosxd-csi!18",
"is_bot": false,
"headline": "Merge branch 'autofs-reconnect-fix' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-28T15:46:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7de01584d16c0c6be2981304b2286a258ce3a953",
"body": null,
"is_bot": false,
"headline": "chart: set automountDaemonUnmountTimeout to 600s (10min)",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-28T15:39:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b061be25b67e9d68628826e3d0f08a497e01d2f",
"body": null,
"is_bot": false,
"headline": "automount: shut down automount with SIGKILL",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-28T15:37:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d9a2e659b2b48b433e18487551bd3d8f6fe1130",
"body": "automount: override auto.master\n\nSee merge request kubernetes/storage/eosxd-csi!17",
"is_bot": false,
"headline": "Merge branch 'override-auto-master' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-27T10:17:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9722b407cea2f8a952b12b550a64d0a2fe90402",
"body": "We don't need the other maps set in the file.",
"is_bot": false,
"headline": "automount: override auto.master",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-27T10:10:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cca8c7e53f9e0b066085df51a60a23dceeca1629",
"body": "chart: simplify label-related subcharts, removed duplicate labels\n\nCloses #13\n\nSee merge request kubernetes/storage/eosxd-csi!16",
"is_bot": false,
"headline": "Merge branch 'chart-simplify-label-subcharts' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-27T09:52:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "122d6ae697c75846358f1bdac659cf44ceb4de72",
"body": null,
"is_bot": false,
"headline": "chart: simplify label-related subcharts, removed duplicate labels",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-27T09:45:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6878595c4a65656ea4c77c7213a8ef1607845860",
"body": "Revert \"Merge branch 'helm-fix-labels' into 'main'\"\n\nSee merge request kubernetes/storage/eosxd-csi!15",
"is_bot": false,
"headline": "Merge branch 'revert-9b013f36' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-27T08:52:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b2b8f8fb8caa603d453c7251a2f1c8e03360a7f",
"body": "This reverts merge request !11",
"is_bot": false,
"headline": "Revert \"Merge branch 'helm-fix-labels' into 'main'\"",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-27T08:44:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cebe3cfa56bb9d18120eded2471de2375718e47",
"body": "chart: set dnsPolicy when using host network\n\nCloses #15\n\nSee merge request kubernetes/storage/eosxd-csi!14",
"is_bot": false,
"headline": "Merge branch 'chart-dnspolicy' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-26T14:25:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "535f2bab8cd5b8a74a778418d28cae9b66322aae",
"body": null,
"is_bot": false,
"headline": "chart: set dnsPolicy when using host network",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-26T14:10:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a62f097a9f4d32c1f7b59f5a5d3ff634c0cdaff",
"body": "ci: set cosign private key\n\nSee merge request kubernetes/storage/eosxd-csi!13",
"is_bot": false,
"headline": "Merge branch 'ci-cosign' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-22T11:52:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21eae2e28b03aa3724fc697f1ab58d5fd22a9636",
"body": null,
"is_bot": false,
"headline": "ci: set cosign private key",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-22T11:45:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c801d3fa779fef25fbaa1951341a0aa601407f5",
"body": "ci: push to registry.cern.ch/registry\n\nCloses #14\n\nSee merge request kubernetes/storage/eosxd-csi!12",
"is_bot": false,
"headline": "Merge branch 'ci-oci-artifacts' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-19T15:28:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d84359669427c613241d04dd854982b7e1e58087",
"body": null,
"is_bot": false,
"headline": "ci: push to registry.cern.ch/registry",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-19T15:28:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b013f36ae48d1a18f569d724a51db3c5d31515a",
"body": "helm: consolidate labels and selectors\n\nCloses #13\n\nSee merge request kubernetes/storage/eosxd-csi!11",
"is_bot": false,
"headline": "Merge branch 'helm-fix-labels' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-18T17:08:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4f754dc87e4ba36739eada6e8b3d2e20ac32187",
"body": null,
"is_bot": false,
"headline": "helm: consolidate labels and selectors",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-18T17:01:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90ed7e425ae244075827e63fcc239d03d936bfee",
"body": "csi: remove volume access mode validation\n\nCloses #12\n\nSee merge request kubernetes/storage/eosxd-csi!9",
"is_bot": false,
"headline": "Merge branch 'remove-accessmode-check' into 'main'",
"author_name": "Ricardo Rocha",
"author_login": "rochaporto",
"committed_at": "2023-09-05T17:42:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7945bbaaf71c2e7867bf754871d3f6bd41a64a89",
"body": null,
"is_bot": false,
"headline": "csi: remove volume access mode validation",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-09-05T17:42:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b87b7e8d0ca85245dae6b6c156a2f563e0b46f2",
"body": "chart: autofs: use binds with symlinks for nested mounts\n\nCloses #9\n\nSee merge request kubernetes/storage/eosxd-csi!8",
"is_bot": false,
"headline": "Merge branch 'autofs-maps-fix' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-08-30T14:28:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a227dd9539ddbcd5c314550b3d4a9ca9c4d0bc82",
"body": "Update EOS to version 5.1.27\n\nSee merge request kubernetes/storage/eosxd-csi!10",
"is_bot": false,
"headline": "Merge branch 'main' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-08-30T14:04:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d541ab912cb110aa85fd7ab9b805b9c3b6941c3",
"body": null,
"is_bot": false,
"headline": "Update EOS to version 5.1.27",
"author_name": "Diogo Castro",
"author_login": "diocas",
"committed_at": "2023-08-30T12:21:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdae48621a4555834cd23fda9c168358e5716d58",
"body": "Binds to nested EOS mounts (e.g. home-i02/r/rvasek) would work\nonly if the nested mount itself was mounted first.\n\nThis commit removes this dependency on mount order by using\nsymlinks instead. This way the nested mount is always triggered\nwhen accessing the \"shortcut\" (e.g. home-r/rvasek) path.",
"is_bot": false,
"headline": "chart: autofs: use binds with symlinks for nested mounts",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-08-23T14:07:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61f856f5edc9f0cb12903779d46c254c3839cf68",
"body": null,
"is_bot": false,
"headline": "chart: autofs: fix paths for home-i00 binds",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-08-23T09:10:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "084c322a6c0efb61df6e14083be611ea643cb9f7",
"body": "chart: add automountHostPath param for /eos hostPath mount\n\nSee merge request kubernetes/storage/eosxd-csi!7",
"is_bot": false,
"headline": "Merge branch 'eos-hostpath' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-08-11T16:29:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1baa87e0ab3fcd7ae0771ed9580fa0c71b679700",
"body": null,
"is_bot": false,
"headline": "chart: add automountHostPath param for /eos hostPath mount",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-08-11T16:22:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7d5cfd747adb10380c6c5488df85361c02e5856",
"body": "image: override allowed ciphers in /etc/krb.conf.d/crypto-policies\n\nSee merge request kubernetes/storage/eosxd-csi!6",
"is_bot": false,
"headline": "Merge branch 'override-krb-ciphers' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-07-25T12:39:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d91fd84573b14eccd21d9321c4b3157be0fe34e",
"body": "Overrides the default list of accepted KRB ciphers by adding \"arcfour-hmac-md5\"\nto retain support for tickets created by cc7 clients.\n\nSee [1] for more info.\n\n[1] https://gitlab.cern.ch/kubernetes/storage/eosxd-csi/-/issues/7",
"is_bot": false,
"headline": "image: override allowed ciphers in /etc/krb.conf.d/crypto-policies",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-07-25T12:32:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01780ebc245d8de0d2630e00dce4d9774fa9cb5c",
"body": "clean up chart, logs, configs\n\nSee merge request kubernetes/storage/eosxd-csi!5",
"is_bot": false,
"headline": "Merge branch 'cleanup' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-07-24T15:30:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "340c8a6ac76da65dc92bfab30fb316afc2c2364a",
"body": null,
"is_bot": false,
"headline": "clean up chart, logs, configs",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-07-24T15:22:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "383423a1a7390adecf1c3c8424b40a580f90354f",
"body": "implement mount reconciler\n\nSee merge request kubernetes/storage/eosxd-csi!4",
"is_bot": false,
"headline": "Merge branch 'mount-reconciler' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-07-21T15:57:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d76fdea19bd30a3757a246fd8c14f0a88dc34611",
"body": null,
"is_bot": false,
"headline": "implement mount reconciler",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-07-21T15:57:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8613466729faeca088fa62748f6e7188972ddfdb",
"body": "expose /eos as a hostpath\n\nSee merge request kubernetes/storage/eosxd-csi!3",
"is_bot": false,
"headline": "Merge branch 'eos-hostpath' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-07-17T14:04:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8034c8e312d819fe70a2063316c76140a0095203",
"body": "The change includes updating the examples and improving\nerror messages reported by the driver (e.g. when the hostPath\ndirectory doesn't exist).",
"is_bot": false,
"headline": "chart: expose autofs-eosxd root as a hostPath volume",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-07-17T13:58:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91c71857170837b3bdb36bf477682a5656ee0719",
"body": "chart: configure instance-letter mappings\n\nSee merge request kubernetes/storage/eosxd-csi!2",
"is_bot": false,
"headline": "Merge branch 'group-mounts' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-07-11T15:07:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a73e31e395dc9c0ebf421c352ff5223b6c3cb254",
"body": null,
"is_bot": false,
"headline": "chart: configure instance-letter mappings",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-07-11T14:58:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46e924746c8f80ccf14b6fba064ad3b212fea663",
"body": "build: added multi-arch support\n\nSee merge request kubernetes/storage/eosxd-csi!1",
"is_bot": false,
"headline": "Merge branch 'multiarch-builds' into 'main'",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-07-10T14:01:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "820846eb5df6cfa1c1f32be961a1ea449742e605",
"body": null,
"is_bot": false,
"headline": "build: added multi-arch support",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-07-10T13:53:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62932fabf1de149fe1f63bedd44813a0e1d7262c",
"body": null,
"is_bot": false,
"headline": "add gitlab CI script",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-06-05T09:08:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c59d5f3617440457b5585da839000213b66d96b",
"body": null,
"is_bot": false,
"headline": "initial commit",
"author_name": "Robert Vasek",
"author_login": "gman0",
"committed_at": "2023-06-05T09:08:27Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 10,
"commits_last_year": 7,
"latest_release_at": "2026-07-22T12:39:20Z",
"latest_release_tag": "v1.4.7",
"releases_from_tags": false,
"days_since_last_push": 5,
"active_weeks_last_year": 4,
"days_since_latest_release": 5,
"mean_days_between_releases": 97.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/cern-eos/eosxd-csi",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/cern-eos/eosxd-csi",
"is_deprecated": false,
"latest_version": "v1.4.7",
"repository_url": "https://github.com/cern-eos/eosxd-csi",
"versions_count": 30,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-22T11:26:33Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 3,
"stars": 4,
"watchers": 8,
"fork_history": {
"days": [
{
"date": "2024-02-22",
"count": 1
},
{
"date": "2024-03-27",
"count": 1
},
{
"date": "2024-05-02",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 7404,
"source_files_sampled": 17,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "google.golang.org/grpc",
"direct": true,
"version": "1.74.2",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 9.1,
"advisory_ids": [
"GHSA-hrxh-6v49-42gf",
"GHSA-p77j-4mvh-x3m3",
"GO-2026-4762"
],
"fixed_version": "1.82.1",
"advisory_count": 3,
"oldest_advisory_days": 130
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "0.42.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-5cv4-jp36-h3mw",
"GO-2026-4440",
"GO-2026-4441",
"GO-2026-4918",
"GO-2026-5025",
"GO-2026-5026",
"GO-2026-5027",
"GO-2026-5028",
"GO-2026-5029",
"GO-2026-5030"
],
"fixed_version": "1.26.3",
"advisory_count": 11,
"oldest_advisory_days": 171
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "0.34.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 65
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "0.27.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 12
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 2,
"critical": 1,
"moderate": 1
},
"advisory_count": 16,
"affected_count": 4,
"assessed_count": 14,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/container-storage-interface/spec",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "github.com/kubernetes-csi/csi-lib-utils",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.0"
},
{
"name": "github.com/moby/sys/mountinfo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.2"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.74.2"
},
{
"name": "k8s.io/apimachinery",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.33.3"
},
{
"name": "k8s.io/klog/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.130.1"
},
{
"name": "k8s.io/mount-utils",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.33.3"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/container-storage-interface/spec",
"direct": true,
"version": "1.11.0",
"ecosystem": "go"
},
{
"name": "github.com/kubernetes-csi/csi-lib-utils",
"direct": true,
"version": "0.22.0",
"ecosystem": "go"
},
{
"name": "github.com/moby/sys/mountinfo",
"direct": true,
"version": "0.7.2",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": true,
"version": "1.74.2",
"ecosystem": "go"
},
{
"name": "k8s.io/apimachinery",
"direct": true,
"version": "0.33.3",
"ecosystem": "go"
},
{
"name": "k8s.io/klog/v2",
"direct": true,
"version": "2.130.1",
"ecosystem": "go"
},
{
"name": "k8s.io/mount-utils",
"direct": true,
"version": "0.33.3",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": false,
"version": "1.4.3",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "0.42.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "0.34.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "0.27.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/rpc",
"direct": false,
"version": "0.0.0-20250728155136-f173205681a0",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "1.36.6",
"ecosystem": "go"
},
{
"name": "k8s.io/utils",
"direct": false,
"version": "0.0.0-20250604170112-4c0f3b243397",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 14,
"direct_count": 7,
"indirect_count": 7
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 27,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 4,
"closed_unmerged_prs": 4
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "gman0",
"commits": 68,
"avatar_url": "https://avatars.githubusercontent.com/u/1104680?v=4"
},
{
"type": "User",
"login": "1602077",
"commits": 19,
"avatar_url": "https://avatars.githubusercontent.com/u/62025739?v=4"
},
{
"type": "User",
"login": "diocas",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/2589871?v=4"
},
{
"type": "User",
"login": "rochaporto",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/52753?v=4"
},
{
"type": "User",
"login": "smithdh",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/6120823?v=4"
},
{
"type": "User",
"login": "apeters1971",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/2655845?v=4"
}
],
"contributors_sampled": 6,
"top_contributor_share": 0.687
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"ci-test-go.yaml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 2,
"reason": "6 out of 22 merged PRs checked by a CI test -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 5,
"reason": "Found 14/26 approved changesets -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 1,
"reason": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 1,
"reason": "dependency not pinned by hash detected -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "14 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "7212e6a5472448a78c710fd1216a7f42c09d9f8f",
"ran_at": "2026-07-27T15:37:10Z",
"aggregate_score": 3.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-17T12:57:38Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-17T12:56:54Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/cern-eos/eosxd-csi",
"host": "github.com",
"name": "eosxd-csi",
"owner": "cern-eos"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"security": 36,
"vitality": 66,
"community": 41,
"governance": 65,
"engineering": 47
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 66,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"commits_last_year": 7,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "7 commits in the last year",
"points": 8.1,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 7
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 10,
"latest_release_tag": "v1.4.7",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": 97.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "10 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 10
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~97.4 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 97.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 10,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 10 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 10
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 41,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 15,
"inputs": {
"forks": 3,
"stars": 4,
"watchers": 8,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "4 stars",
"points": 7.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 4
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "8 watchers",
"points": 4.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 8
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 65,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 27,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 6,
"top_contributor_share": 0.687
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 69% of commits",
"points": 7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 69
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "6 contributors",
"points": 8.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 6
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 88,
"inputs": {
"merged_prs": 27,
"open_issues": 0,
"closed_issues": 4,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 4
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "27/31 decided PRs merged",
"points": 33.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 27,
"decided": 31
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 14/26 approved changesets -- score normalized to 5",
"points": 7.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"followers": 14,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "cern-eos",
"public_repos": 30,
"account_age_days": 4676
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "14 followers of cern-eos",
"points": 8.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 14,
"login": "cern-eos"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "30 public repos, account ~12 yr old",
"points": 22.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 30
}
},
{
"code": "account_age_years",
"params": {
"years": 12
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/cern-eos/eosxd-csi"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "30 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 30
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 47,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "critical",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 28,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "6 out of 22 merged PRs checked by a CI test -- score normalized to 2",
"points": 4,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 36,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 31,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "6 out of 22 merged PRs checked by a CI test -- score normalized to 2",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 14/26 approved changesets -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "14 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 14 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 14
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 56,
"inputs": {
"source": "osv",
"advisories": 16,
"affected_packages": 4,
"assessed_packages": 14,
"unassessed_packages": 0,
"affected_by_severity": "critical 1, moderate 1, unknown 2",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: google.golang.org/grpc 1.74.2 (critical 9.1)",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "google.golang.org/grpc 1.74.2 (critical 9.1)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 130 days ago",
"points": 32.6,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 1,
"oldest": 130
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 14,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 49,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.808,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "80 of 99 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 80,
"sampled": 99
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 99",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 99
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 7404,
"source_files_sampled": 17,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/17 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 17,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"example"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-27T15:37:27.786067Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/cern-eos/eosxd-csi.svg",
"full_name": "cern-eos/eosxd-csi",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.