Public recordModerate
Software health reportschema 0.26.0 · metrics 1.13.0 · 2026-07-22 11:08 UTC
cloud-barista / cm-cicada
cloud-barista/cm-cicada holds a health index of 64 out of 100, placing it in the Moderate band. It scores highest on Vitality (90/100) and lowest on Community & Adoption (24/100). It was last updated today. A single contributor accounts for most of its recent work.
64
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
64
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Cloud-BaristaOrganization
58 followers59 public repossince Feb 2019
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/cloud-barista/cm-cicada | v0.5.2 | - | 20 | 6 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
90
Development activity
84Good
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 20.1/36 | Commit cadence — 29/52 weeks with commits |
| 18/18 | Commit volume — 143 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 143 |
| human_commit_share | 0.97 |
| days_since_last_push | 0 |
| active_weeks_last_year | 29 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 20 releases published |
| 36/36 | Release recency — latest release 6 days ago |
| 27/27 | Release cadence — a release every ~34.4 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 20 |
| latest_release_tag | v0.5.2 |
| releases_from_tags | no |
| days_since_latest_release | 6 |
| mean_days_between_releases | 34.4 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
24
Popularity & adoption
2Critical
How it's scored
| 0/60 | Stars — 2 stars |
| 0/25 | Forks — 2 forks |
| 1.7/15 | Watchers — 3 watchers |
Inputs used
| forks | 2 |
| stars | 2 |
| watchers | 3 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
63
Maintainer resilience (bus factor)
32At risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 5.8/22.5 | Commit distribution — top contributor authored 74% of commits |
| 6.8/13.5 | Contributor breadth — 5 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 6 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 5 |
| top_contributor_share | 0.744 |
Issue & PR responsiveness
66Moderate
How it's scored
| 46.8/46.8 | Issue resolution — 100% of issues closed |
| 19.1/38.3 | PR acceptance — 31/62 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 2/23 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 31 |
| open_issues | 0 |
| closed_issues | 9 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 31 |
Ownership & stewardship
68Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 12.7/25 | Owner reach — 58 followers of cloud-barista |
| 24.9/25 | Track record — 59 public repos, account ~7 yr old |
Inputs used
| followers | 58 |
| owner_type | Organization |
| is_verified | — |
| owner_login | cloud-barista |
| public_repos | 59 |
| account_age_days | 2,728 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 6 days ago |
| 20/20 | Version history — 20 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/cloud-barista/cm-cicada |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 6 |
Engineering Quality
Are baseline engineering and documentation practices in place?
76
Engineering practices
84Good
How it's scored
| 24/24 | CI workflows — 4 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yaml |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
65Moderate
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
59
Security posture
52Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 2/23 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 6 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6/7.5 | Vulnerabilities — 2 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 5.2 |
Excluded from scoring (no data or not applicable): signed_releases. Remaining weights renormalized.
Dependency advisories
89Excellent
How it's scored
| 26.6/35 | Direct dependencies free of known advisories — 1 affected: golang.org/x/crypto v0.54.0 (unknown) |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 40/40 | No advisories left outstanding — no advisory has been public longer than 90 days |
Inputs used
| source | osv |
| advisories | 3 |
| affected_packages | 2 |
| assessed_packages | 267 |
| unassessed_packages | 0 |
| affected_by_severity | low 1, unknown 1 |
| direct_affected_packages | 1 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 267 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
71
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 77 of 97 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.794 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yaml |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 8/8 | Automated maintenance — 3 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.03 |
Code legibility for models
99Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 54.4/55 | Manageable file sizes — 1/98 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 127,339 |
| source_files_sampled | 98 |
| oversized_source_files | 1 |
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — pkg/api/rest/docs/swagger.json, pkg/api/rest/docs/swagger.yaml |
| 0/20 | MCP server |
| 40/40 | Runnable examples — example |
Inputs used
| example_dirs | example |
| has_mcp_signal | no |
| api_schema_files | pkg/api/rest/docs/swagger.json, pkg/api/rest/docs/swagger.yaml |
Key facts
2GitHub stars
5contributors
143commits, last 12 months
0days since last push
20releases
1bus factor
0open issues
Go, PyPIpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 2 ⇿
0Stars
2Forks
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
OpenSSF Scorecard 5.2 / 10
5.2aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 2/23 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 6 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 8 | Vulnerabilities | 2 existing vulnerabilities detected |
Direct dependencies 12
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/cloud-barista/cm-beetle/imdl | v0.1.10 | go.mod |
| Go | github.com/google/uuid | v1.6.0 | go.mod |
| Go | github.com/jollaman999/utils | v1.0.10 | go.mod |
| Go | github.com/labstack/echo/v4 | v4.15.4 | go.mod |
| Go | github.com/melbahja/goph | v1.5.1 | go.mod |
| Go | github.com/mitchellh/mapstructure | v1.5.0 | go.mod |
| Go | github.com/swaggo/echo-swagger | v1.5.2 | go.mod |
| Go | github.com/swaggo/swag | v1.16.6 | go.mod |
| Go | golang.org/x/crypto | v0.54.0 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
| Go | gorm.io/driver/sqlite | v1.6.0 | go.mod |
| Go | gorm.io/gorm | v1.31.2 | go.mod |
All dependencies 267
Full resolved dependency set from the GitHub dependency graph: 12 direct and 255 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/cloud-barista/cm-beetle/imdl | v0.1.10 | direct |
| Go | github.com/google/uuid | v1.6.0 | direct |
| Go | github.com/jollaman999/utils | v1.0.10 | direct |
| Go | github.com/labstack/echo/v4 | v4.15.4 | direct |
| Go | github.com/melbahja/goph | v1.5.1 | direct |
| Go | github.com/mitchellh/mapstructure | v1.5.0 | direct |
| Go | github.com/swaggo/echo-swagger | v1.5.2 | direct |
| Go | github.com/swaggo/swag | v1.16.6 | direct |
| Go | golang.org/x/crypto | v0.54.0 | direct |
| Go | gopkg.in/yaml.v3 | v3.0.1 | direct |
| Go | gorm.io/driver/sqlite | v1.6.0 | direct |
| Go | gorm.io/gorm | v1.31.2 | direct |
| Go | cyphar.com/go-pathrs | v0.2.5 | indirect |
| Go | github.com/cyphar/filepath-securejoin | v0.7.0 | indirect |
| Go | github.com/go-openapi/jsonpointer | v1.0.0 | indirect |
| Go | github.com/go-openapi/jsonreference | v1.0.0 | indirect |
| Go | github.com/go-openapi/spec | v0.22.6 | indirect |
| Go | github.com/go-openapi/swag/conv | v0.27.0 | indirect |
| Go | github.com/go-openapi/swag/jsonname | v0.27.0 | indirect |
| Go | github.com/go-openapi/swag/jsonutils | v0.27.0 | indirect |
| Go | github.com/go-openapi/swag/loading | v0.27.0 | indirect |
| Go | github.com/go-openapi/swag/stringutils | v0.27.0 | indirect |
| Go | github.com/go-openapi/swag/typeutils | v0.27.0 | indirect |
| Go | github.com/go-openapi/swag/yamlutils | v0.27.0 | indirect |
| Go | github.com/jinzhu/inflection | v1.0.0 | indirect |
| Go | github.com/jinzhu/now | v1.1.5 | indirect |
| Go | github.com/kr/fs | v0.1.0 | indirect |
| Go | github.com/kr/pretty | v0.1.0 | indirect |
| Go | github.com/kylebanks/depth | v1.2.1 | indirect |
| Go | github.com/labstack/gommon | v0.5.0 | indirect |
| Go | github.com/mattn/go-colorable | v0.1.15 | indirect |
| Go | github.com/mattn/go-isatty | v0.0.22 | indirect |
| Go | github.com/mattn/go-sqlite3 | v1.14.48 | indirect |
| Go | github.com/opencontainers/selinux | v1.15.1 | indirect |
| Go | github.com/pkg/errors | v0.9.1 | indirect |
| Go | github.com/pkg/sftp | v1.13.11 | indirect |
| Go | github.com/sv-tools/openapi | v0.4.0 | indirect |
| Go | github.com/swaggo/files/v2 | v2.0.2 | indirect |
| Go | github.com/swaggo/swag/v2 | v2.0.0-rc5 | indirect |
| Go | github.com/valyala/bytebufferpool | v1.0.0 | indirect |
| Go | github.com/valyala/fasttemplate | v1.2.2 | indirect |
| Go | go.yaml.in/yaml/v2 | v2.4.4 | indirect |
| Go | go.yaml.in/yaml/v3 | v3.0.4 | indirect |
| Go | golang.org/x/mod | v0.38.0 | indirect |
| Go | golang.org/x/net | v0.57.0 | indirect |
| Go | golang.org/x/sync | v0.22.0 | indirect |
| Go | golang.org/x/sys | v0.47.0 | indirect |
| Go | golang.org/x/text | v0.40.0 | indirect |
| Go | golang.org/x/time | v0.15.0 | indirect |
| Go | golang.org/x/tools | v0.48.0 | indirect |
| Go | gopkg.in/check.v1 | v1.0.0-20180628173108-788fd7840127 | indirect |
| Go | sigs.k8s.io/yaml | v1.6.0 | indirect |
| PyPI | a2wsgi | 1.10.10 | indirect |
| PyPI | absql | 0.7.0 | indirect |
| PyPI | aiofiles | 24.1.0 | indirect |
| PyPI | aiohappyeyeballs | 2.7.1 | indirect |
| PyPI | aiohttp | 3.14.1 | indirect |
| PyPI | aiomysql | 0.3.2 | indirect |
| PyPI | aiosignal | 1.4.0 | indirect |
| PyPI | aiosmtplib | 5.1.2 | indirect |
| PyPI | aiosqlite | 0.21.0 | indirect |
| PyPI | alembic | 1.18.5 | indirect |
| PyPI | amqp | 5.3.1 | indirect |
| PyPI | annotated-doc | 0.0.4 | indirect |
| PyPI | annotated-types | 0.7.0 | indirect |
| PyPI | anyio | 4.14.1 | indirect |
| PyPI | apache-airflow | 3.3.0 | indirect |
| PyPI | apache-airflow-core | 3.3.0 | indirect |
| PyPI | apache-airflow-providers-celery | 3.21.0 | indirect |
| PyPI | apache-airflow-providers-cncf-kubernetes | 10.19.0 | indirect |
| PyPI | apache-airflow-providers-common-compat | 1.15.0 | indirect |
| PyPI | apache-airflow-providers-common-io | 1.8.0 | indirect |
| PyPI | apache-airflow-providers-common-sql | 2.0.1 | indirect |
| PyPI | apache-airflow-providers-docker | 4.5.7 | indirect |
| PyPI | apache-airflow-providers-fab | 3.7.1 | indirect |
| PyPI | apache-airflow-providers-ftp | 3.15.1 | indirect |
| PyPI | apache-airflow-providers-http | 6.0.4 | indirect |
| PyPI | apache-airflow-providers-imap | 3.11.3 | indirect |
| PyPI | apache-airflow-providers-mysql | 6.6.1 | indirect |
| PyPI | apache-airflow-providers-smtp | 3.0.1 | indirect |
| PyPI | apache-airflow-providers-sqlite | 4.3.3 | indirect |
| PyPI | apache-airflow-providers-ssh | 5.0.3 | indirect |
| PyPI | apache-airflow-providers-standard | 1.15.0 | indirect |
| PyPI | apache-airflow-task-sdk | 1.3.0 | indirect |
| PyPI | apispec | 6.10.0 | indirect |
| PyPI | argcomplete | 3.7.0 | indirect |
| PyPI | arrow | 1.4.0 | indirect |
| PyPI | asgiref | 3.11.1 | indirect |
| PyPI | asyncssh | 2.24.0 | indirect |
| PyPI | attrs | 26.1.0 | indirect |
| PyPI | babel | 2.18.0 | indirect |
| PyPI | bcrypt | 5.0.0 | indirect |
| PyPI | billiard | 4.2.4 | indirect |
| PyPI | blinker | 1.9.0 | indirect |
| PyPI | cachelib | 0.14.0 | indirect |
| PyPI | cachetools | 7.1.4 | indirect |
| PyPI | cadwyn | 7.0.0 | indirect |
| PyPI | celery | 5.6.3 | indirect |
| PyPI | certifi | 2026.6.17 | indirect |
| PyPI | cffi | 2.0.0 | indirect |
| PyPI | charset-normalizer | 3.4.7 | indirect |
| PyPI | click | 8.4.2 | indirect |
| PyPI | click-didyoumean | 0.3.1 | indirect |
| PyPI | click-plugins | 1.1.1.2 | indirect |
| PyPI | click-repl | 0.3.0 | indirect |
| PyPI | colorama | 0.4.6 | indirect |
| PyPI | colorlog | 6.10.1 | indirect |
| PyPI | cron-descriptor | 2.1.0 | indirect |
| PyPI | croniter | 6.2.2 | indirect |
| PyPI | cryptography | 48.0.1 | indirect |
| PyPI | deprecated | 1.3.1 | indirect |
| PyPI | dill | 0.4.1 | indirect |
| PyPI | dnspython | 2.8.0 | indirect |
| PyPI | docker | 7.1.0 | indirect |
| PyPI | durationpy | 0.10 | indirect |
| PyPI | email-validator | 2.3.0 | indirect |
| PyPI | fastapi | 0.136.3 | indirect |
| PyPI | fastapi-cli | 0.0.27 | indirect |
| PyPI | fastjsonschema | 2.21.2 | indirect |
| PyPI | flask | 3.1.3 | indirect |
| PyPI | flask-appbuilder | 5.2.1 | indirect |
| PyPI | flask-babel | 4.0.0 | indirect |
| PyPI | flask-jwt-extended | 4.7.4 | indirect |
| PyPI | flask-limiter | 3.12 | indirect |
| PyPI | flask-login | 0.6.3 | indirect |
| PyPI | flask-session | 0.8.0 | indirect |
| PyPI | flask-sqlalchemy | 3.1.1 | indirect |
| PyPI | flask-wtf | 1.3.0 | indirect |
| PyPI | flower | 2.0.1 | indirect |
| PyPI | frozenlist | 1.8.0 | indirect |
| PyPI | fsspec | 2026.6.0 | indirect |
| PyPI | googleapis-common-protos | 1.75.0 | indirect |
| PyPI | greenback | 1.3.0 | indirect |
| PyPI | greenlet | 3.5.3 | indirect |
| PyPI | grpcio | 1.81.1 | indirect |
| PyPI | gusty | 0.23.1 | indirect |
| PyPI | h11 | 0.16.0 | indirect |
| PyPI | httpcore | 1.0.9 | indirect |
| PyPI | httptools | 0.8.0 | indirect |
| PyPI | httpx | 0.28.1 | indirect |
| PyPI | humanize | 4.16.0 | indirect |
| PyPI | idna | 3.18 | indirect |
| PyPI | importlib-metadata | 9.0.0 | indirect |
| PyPI | inflection | 0.5.1 | indirect |
| PyPI | isoduration | 20.11.0 | indirect |
| PyPI | itsdangerous | 2.2.0 | indirect |
| PyPI | jinja2 | 3.1.6 | indirect |
| PyPI | jmespath | 1.1.0 | indirect |
| PyPI | jsonpath-ng | 1.8.0 | indirect |
| PyPI | jsonschema | 4.26.0 | indirect |
| PyPI | jsonschema-specifications | 2025.9.1 | indirect |
| PyPI | jupyter-core | 5.9.1 | indirect |
| PyPI | jupytext | 1.19.4 | indirect |
| PyPI | kombu | 5.6.2 | indirect |
| PyPI | kubernetes | 36.0.2 | indirect |
| PyPI | kubernetes-asyncio | 36.1.0 | indirect |
| PyPI | lazy-object-proxy | 1.12.0 | indirect |
| PyPI | libcst | 1.8.6 | indirect |
| PyPI | limits | 5.8.0 | indirect |
| PyPI | linkify-it-py | 2.1.0 | indirect |
| PyPI | lockfile | 0.12.2 | indirect |
| PyPI | mako | 1.3.12 | indirect |
| PyPI | markdown-it-py | 4.2.0 | indirect |
| PyPI | markupsafe | 3.0.3 | indirect |
| PyPI | marshmallow | 4.3.0 | indirect |
| PyPI | marshmallow-sqlalchemy | 1.5.0 | indirect |
| PyPI | mdit-py-plugins | 0.6.1 | indirect |
| PyPI | mdurl | 0.1.2 | indirect |
| PyPI | methodtools | 0.4.7 | indirect |
| PyPI | more-itertools | 11.1.0 | indirect |
| PyPI | msgpack | 1.2.1 | indirect |
| PyPI | msgspec | 0.21.1 | indirect |
| PyPI | multidict | 6.7.1 | indirect |
| PyPI | mysql-connector-python | 9.6.0 | indirect |
| PyPI | mysqlclient | 2.2.8 | indirect |
| PyPI | natsort | 8.4.0 | indirect |
| PyPI | nbformat | 5.10.4 | indirect |
| PyPI | oauthlib | 3.3.1 | indirect |
| PyPI | opentelemetry-api | 1.43.0 | indirect |
| PyPI | opentelemetry-exporter-otlp | 1.43.0 | indirect |
| PyPI | opentelemetry-exporter-otlp-proto-common | 1.43.0 | indirect |
| PyPI | opentelemetry-exporter-otlp-proto-grpc | 1.43.0 | indirect |
| PyPI | opentelemetry-exporter-otlp-proto-http | 1.43.0 | indirect |
| PyPI | opentelemetry-proto | 1.43.0 | indirect |
| PyPI | opentelemetry-sdk | 1.43.0 | indirect |
| PyPI | opentelemetry-semantic-conventions | 0.64b0 | indirect |
| PyPI | ordered-set | 4.1.0 | indirect |
| PyPI | outcome | 1.3.0.post0 | indirect |
| PyPI | packaging | 26.2 | indirect |
| PyPI | paramiko | 3.5.1 | indirect |
| PyPI | pathlib-abc | 0.5.2 | indirect |
| PyPI | pathspec | 1.1.1 | indirect |
| PyPI | pendulum | 3.2.0 | indirect |
| PyPI | platformdirs | 4.10.0 | indirect |
| PyPI | pluggy | 1.6.0 | indirect |
| PyPI | prison | 0.2.1 | indirect |
| PyPI | prometheus-client | 0.25.0 | indirect |
| PyPI | prompt-toolkit | 3.0.52 | indirect |
| PyPI | propcache | 0.5.2 | indirect |
| PyPI | protobuf | 6.33.6 | indirect |
| PyPI | psutil | 7.2.2 | indirect |
| PyPI | pycparser | 3.0 | indirect |
| PyPI | pydantic | 2.13.4 | indirect |
| PyPI | pydantic-core | 2.46.4 | indirect |
| PyPI | pydantic-extra-types | 2.11.1 | indirect |
| PyPI | pydantic-settings | 2.14.2 | indirect |
| PyPI | pygments | 2.20.0 | indirect |
| PyPI | pygtrie | 2.5.0 | indirect |
| PyPI | pyjwt | 2.13.0 | indirect |
| PyPI | pymysql | 1.1.3 | indirect |
| PyPI | pynacl | 1.6.2 | indirect |
| PyPI | python-daemon | 3.1.2 | indirect |
| PyPI | python-dateutil | 2.9.0.post0 | indirect |
| PyPI | python-dotenv | 1.2.2 | indirect |
| PyPI | python-multipart | 0.0.32 | indirect |
| PyPI | python-slugify | 8.0.4 | indirect |
| PyPI | pytz | 2026.2 | indirect |
| PyPI | pyyaml | 6.0.3 | indirect |
| PyPI | redis | 6.4.0 | indirect |
| PyPI | referencing | 0.37.0 | indirect |
| PyPI | requests | 2.34.2 | indirect |
| PyPI | requests-oauthlib | 2.0.0 | indirect |
| PyPI | requests-toolbelt | 1.0.0 | indirect |
| PyPI | rich | 13.9.4 | indirect |
| PyPI | rich-argparse | 1.8.0 | indirect |
| PyPI | rich-toolkit | 0.20.1 | indirect |
| PyPI | rpds-py | 2026.6.3 | indirect |
| PyPI | setproctitle | 1.3.7 | indirect |
| PyPI | shellingham | 1.5.4 | indirect |
| PyPI | six | 1.17.0 | indirect |
| PyPI | sniffio | 1.3.1 | indirect |
| PyPI | sql-metadata | 3.0.1 | indirect |
| PyPI | sqlalchemy | 2.0.51 | indirect |
| PyPI | sqlalchemy-utils | 0.42.1 | indirect |
| PyPI | sqlglot | 30.12.0 | indirect |
| PyPI | sqlparse | 0.5.5 | indirect |
| PyPI | starlette | 1.3.1 | indirect |
| PyPI | structlog | 26.1.0 | indirect |
| PyPI | svcs | 25.1.0 | indirect |
| PyPI | tabulate | 0.10.0 | indirect |
| PyPI | tenacity | 9.1.4 | indirect |
| PyPI | termcolor | 3.3.0 | indirect |
| PyPI | text-unidecode | 1.3 | indirect |
| PyPI | tornado | 6.5.7 | indirect |
| PyPI | traitlets | 5.15.1 | indirect |
| PyPI | typer | 0.25.1 | indirect |
| PyPI | typing-extensions | 4.16.0 | indirect |
| PyPI | typing-inspection | 0.4.2 | indirect |
| PyPI | tzdata | 2026.2 | indirect |
| PyPI | tzlocal | 5.4.4 | indirect |
| PyPI | uc-micro-py | 2.0.0 | indirect |
| PyPI | universal-pathlib | 0.3.10 | indirect |
| PyPI | urllib3 | 2.7.0 | indirect |
| PyPI | uuid6 | 2025.0.1 | indirect |
| PyPI | uvicorn | 0.49.0 | indirect |
| PyPI | uvloop | 0.22.1 | indirect |
| PyPI | vine | 5.1.0 | indirect |
| PyPI | watchfiles | 1.2.0 | indirect |
| PyPI | wcwidth | 0.8.2 | indirect |
| PyPI | websocket-client | 1.9.0 | indirect |
| PyPI | websockets | 16.0 | indirect |
| PyPI | werkzeug | 3.1.8 | indirect |
| PyPI | wirerope | 1.0.0 | indirect |
| PyPI | wrapt | 2.2.2 | indirect |
| PyPI | wtforms | 3.2.2 | indirect |
| PyPI | yarl | 1.24.2 | indirect |
| PyPI | zipp | 4.1.0 | indirect |
Dependency advisories 2
This repository publishes no package the index resolves, so its own dependency graph was assessed — 267 packages, which also include development and test pins that never ship: 2 carry known advisories, of which 1 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| paramiko | 3.5.1 | indirect | low | 2 | — |
| golang.org/x/crypto | v0.54.0 | direct | unknown | 1 | — |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 821,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 449414,
"HTML": 1614,
"Shell": 3759,
"Python": 15069,
"Makefile": 4862,
"Dockerfile": 2193
},
"pushed_at": "2026-07-22T04:33:28Z",
"created_at": "2023-08-04T00:50:46Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T05:59:03Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://cloud-barista.github.io",
"name": "Cloud-Barista",
"type": "Organization",
"login": "cloud-barista",
"company": null,
"location": "South Korea",
"followers": 58,
"avatar_url": "https://avatars.githubusercontent.com/u/47236182?v=4",
"created_at": "2019-02-01T04:54:50Z",
"is_verified": null,
"public_repos": 59,
"account_age_days": 2728
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2026-07-16T06:21:40Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-07-14T07:44:05Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2025-12-19T05:43:26Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2025-11-07T07:17:41Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2025-11-06T07:47:04Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2025-10-16T07:31:40Z"
},
{
"tag": "v0.3.6",
"kind": "patch",
"published_at": "2025-10-01T05:00:17Z"
},
{
"tag": "v0.3.5",
"kind": "patch",
"published_at": "2025-09-30T07:01:19Z"
},
{
"tag": "v0.3.4",
"kind": "patch",
"published_at": "2025-09-29T07:21:30Z"
},
{
"tag": "v0.3.3",
"kind": "patch",
"published_at": "2025-09-09T08:00:47Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2025-08-29T13:11:38Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2025-08-29T12:50:33Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2024-12-05T07:49:32Z"
},
{
"tag": "v0.2.4",
"kind": "patch",
"published_at": "2024-11-29T10:49:57Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2024-11-19T09:18:22Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2024-11-01T08:48:20Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2024-10-08T12:00:59Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2024-07-04T08:40:09Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2024-05-24T10:28:17Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2023-12-18T06:50:59Z"
}
],
"recent_commits": [
{
"oid": "ecc7fac9d826adc938d4d42429716298b05e9052",
"body": "airflow: JWT 서명 키를 airflow.cfg 평문 대신 환경변수로 주입",
"is_bot": false,
"headline": "Merge pull request #75 from cloud-barista/fix/airflow-jwt-secret-env",
"author_name": "ish",
"author_login": "ish-hcc",
"committed_at": "2026-07-20T05:58:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e03c49f87da98a8e9bcc59c334901c2da2967b0",
"body": "…w.cfg",
"is_bot": false,
"headline": "airflow: Inject JWT secret via env var instead of plaintext in airflo…",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-07-20T05:51:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56e60f399e37812bd9e3731273c10a2697ad0a24",
"body": null,
"is_bot": false,
"headline": "airflow: Quote SMTP_PORT in smtp connection to survive empty value",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-07-16T11:03:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ce7dbbdca0316dacb8aac7337f30149af016302",
"body": null,
"is_bot": false,
"headline": "airflow: Fix data race in per-DAG request lock",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-07-16T05:35:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91f29638377a8fb01f6c64938af386fca812de03",
"body": null,
"is_bot": false,
"headline": "airflow, api: Replace Airflow client with REST API v2 client",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-07-16T05:34:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f142f4ddc29e4357a6db93ec844b24f84c8128e",
"body": null,
"is_bot": false,
"headline": "airflow: Migrate to Airflow 3.3.0",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-07-16T05:34:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1c03d2980654816387b5338816834839c8a5aee",
"body": null,
"is_bot": false,
"headline": "go.mod: Update modules",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-07-14T02:44:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00bdb3abb2b1dcfa75a996be32d1a9c2048c7258",
"body": null,
"is_bot": false,
"headline": "api: Parse space-separated times",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-07-13T12:43:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fadd234ba3da2dd3a9c7589627c90d6ee85d31c1",
"body": null,
"is_bot": false,
"headline": "airflow: Update software migration workflow",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-07-13T12:35:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3536f23375e3729afc666a8881ea314d32691c30",
"body": null,
"is_bot": false,
"headline": "airflow, api: Use new task result ref method for workflow",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-07-13T11:50:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7bc235f2c6b06f7efa5fc95af941de4269b12b2",
"body": "…smtplib-5.1.1\n\nbuild(deps): bump aiosmtplib from 5.1.0 to 5.1.1 in /_airflow",
"is_bot": false,
"headline": "Merge pull request #72 from cloud-barista/dependabot/pip/_airflow/aio…",
"author_name": "ish",
"author_login": "ish-hcc",
"committed_at": "2026-07-13T05:03:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d5c8def48c1d53f106e26764fdbd09ef52c8460",
"body": "Bumps [aiosmtplib](https://github.com/cole/aiosmtplib) from 5.1.0 to 5.1.1.\n- [Release notes](https://github.com/cole/aiosmtplib/releases)\n- [Changelog](https://github.com/cole/aiosmtplib/blob/main/CHANGELOG.rst)\n- [Commits](https://github.com/cole/aiosmtplib/compare/v5.1.0...v5.1.1)\n\n---\nupdated-dependencies:\n- dependency-name: aiosmtplib\n dependency-version: 5.1.1\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump aiosmtplib from 5.1.0 to 5.1.1 in /_airflow",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-10T20:50:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecc80ff1c5dd2e1c82babd990bfe69d837ef2a62",
"body": null,
"is_bot": false,
"headline": "go.mod: Update modules",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-06-30T03:44:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9824dbc814423c461a2febc73df7fd795dc2be1",
"body": null,
"is_bot": false,
"headline": "fix: set Dockerfile's WORKDIR to '/'",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-06-25T03:54:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe9d0c34b50475f634aa3154f0dfe2563266b4f9",
"body": null,
"is_bot": false,
"headline": "go.mod: Update modules",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-06-23T09:49:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c063340887f1e0a695bbcfc82996a9e402eced6",
"body": null,
"is_bot": false,
"headline": "docs: add URL+method based task component auto-generation guide",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-06-22T10:54:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b4e725cdd02f71e6ca85a5a14c789be744db402",
"body": "…response",
"is_bot": false,
"headline": "feat: add response_path to http_xcom for JSONPath extraction of task …",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-06-22T10:42:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f30343d21bbd1a0851bf3ade64cd2312f06ef64",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of github.com:cloud-barista/cm-cicada",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-06-16T11:03:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8552cbb40ef8f0dbba661a4945958d8820685ae1",
"body": null,
"is_bot": false,
"headline": "build: Upgrade Go version to 1.26.2",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-06-16T10:49:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef9b4d0614330d7cbe8e0c00c2d57fb5dcc47a56",
"body": null,
"is_bot": false,
"headline": "build: unify Go version to 1.26.2",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-06-16T09:53:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb935e06851d477ce38a92b1323972019f5483a6",
"body": null,
"is_bot": false,
"headline": "refactor: adopt imdl and apply cb-tumblebug mci→infra, vm→node rename",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-06-16T09:36:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbec0bfc52c7be53f5815f928506d31a360bc673",
"body": null,
"is_bot": false,
"headline": "airflow: Bump python-multipart to 0.0.32",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-06-16T05:58:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a76920fce716280d7e709fc6c61152719a67ab33",
"body": "…ut constraint)",
"is_bot": false,
"headline": "airflow: Bump PyJWT to 2.12.1 (install from pinned requirements witho…",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-06-16T03:56:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fb4e144067d84b0dd6da0bc06326230e9bf2a9d",
"body": null,
"is_bot": false,
"headline": "airflow: Upgrade to 2.11.2 and update dependencies",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-06-16T03:41:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2246eef8be22873fd2206aab24caa8c282464f16",
"body": "…parse-0.5.4\n\nbuild(deps): bump sqlparse from 0.5.1 to 0.5.4 in /_airflow",
"is_bot": false,
"headline": "Merge pull request #59 from cloud-barista/dependabot/pip/_airflow/sql…",
"author_name": "ish",
"author_login": "ish-hcc",
"committed_at": "2026-06-15T06:24:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b991b9196a83bd7b47344642a397e03b6c2f9980",
"body": "…sn1-0.6.3\n\nbuild(deps): bump pyasn1 from 0.6.1 to 0.6.3 in /_airflow",
"is_bot": false,
"headline": "Merge pull request #62 from cloud-barista/dependabot/pip/_airflow/pya…",
"author_name": "ish",
"author_login": "ish-hcc",
"committed_at": "2026-06-15T06:24:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3af00f005cb70b87fada3edc5bbf5a3ff8b2d75",
"body": "feat: add workflow schedule and version rollback APIs",
"is_bot": false,
"headline": "Merge pull request #67 from yby654/develop",
"author_name": "ish",
"author_login": "ish-hcc",
"committed_at": "2026-06-15T06:22:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57b25d06e789be6c2355a276f40e20930a8c8c4c",
"body": "- POST /workflow/{wfId}/version/{versionNo}/rollback\n restores the workflow's task graph from a past WorkflowVersion snapshot.",
"is_bot": false,
"headline": "feat: add workflow version rollback API",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-05-20T05:42:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43cad77784b08bc805b8d462146a2869eaf104da",
"body": "…hedule)",
"is_bot": false,
"headline": " feat: add workflow schedule API (POST/GET/DELETE /workflow/{wfId}/sc…",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-05-18T08:35:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20d9ca3bbe4614bb4132c6f1014eca37144ceb62",
"body": "카탈로그 기반 TaskComponent",
"is_bot": false,
"headline": "Merge pull request #65 from yby654/refactor/taskcomponent-catalog",
"author_name": "ish",
"author_login": "ish-hcc",
"committed_at": "2026-05-12T06:36:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e272410decec765739e6e3a7aab939b3dd65f75b",
"body": null,
"is_bot": false,
"headline": "feat: workflow 복제 API 추가",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-05-11T08:17:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce4ccdba0f31a56e188513d561a67bf4092963e2",
"body": "워크플로우 패키지 구조 리팩토링 및 Controller-Service 분리",
"is_bot": false,
"headline": "Merge pull request #64 from yby654/refactor/workflow-db-refactor",
"author_name": "ish",
"author_login": "ish-hcc",
"committed_at": "2026-05-08T02:31:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00fb2b0a11efd7c7400a0022b593a6fee18f116b",
"body": "- .gitignore: CM-CICADA.db / .db-shm / .db-wal 패턴 추가 (로컬 실행 시 생성되는\n SQLite 산출물).\n- _v2_http_template.json, _v2_ssh_template.json 삭제: V2 변환된 12개 http\n 컴포넌트와 새로 추가된 ssh 구체적 예제(_v2_ssh_remote_*)가 있어 placeholder는\n 더 이상 가이드 가치가 없음.",
"is_bot": false,
"headline": "chore: SQLite 런타임 산출물 ignore + placeholder 예제 정리",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-05-07T02:19:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f43e1a0867681c64f19565aba642a6dcbe385e7",
"body": "외부 모듈 의존 없이 http_xcom 패턴을 시연할 수 있도록 cm-cicada에 self-contained\nexample endpoint를 추가한다.\n\n- /cicada/example/data (GET): 결정적 샘플 JSON 반환 (xcom push 용)\n- /cicada/example/echo (POST): 요청 body를 그대로 echo (xcom pull 검증 용)\n\ncicada_api connection이 자기 자신(localhost:8083)을 가리키므로 추가 connection 등록\n없이 동작한다.\n\n- contro\n[…]\n endpoint 등록\n- docs/{docs.go,swagger.json,swagger.yaml}: swag 재생성\n- _v2_example_get_data.json (http), _v2_example_post_echo_xcom.json (http_xcom)\n- _v2_example_xcom_workflow.json: GET → xcom → POST 시연",
"is_bot": false,
"headline": "feat: 내장 example endpoint 추가 및 http_xcom 시연 워크플로우",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-05-07T02:19:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c8b6a2d5229104a32fa035c6fb8341c790e07b83",
"body": "ssh 타입 사용 패턴을 시연하는 예제 셋을 추가한다. 두 task_component는 component\nspec에 default command를 박아두고, 같은 component를 task별로 다른 command로 override\n하는 패턴(mergeSpecs task 우선)을 함께 보여준다.\n\n- _v2_ssh_remote_health_check.json: uptime + free -h 헬스체크\n- _v2_ssh_remote_disk_usage.json: df -h 디스크 사용량\n- _v2_ssh_remote_inspect_workflow.json: health_check → disk_usage → cleanup_tmp.\n 세 번째 태스크는 health_check component를 재활용하면서 task.spec.command로 다른\n 명령을 override.\n\nssh_conn_id에 해당하는 connection은 운영 환경의 Airflow에 별도로 등록 필요.",
"is_bot": false,
"headline": "feat: V2 SSH 예제 task_component와 workflow_template 추가",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-05-07T02:19:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16788b4152c503ffc5f3ec7cada9d60441e6d6e8",
"body": "기존 V1 workflow_template (migrate_infra_workflow, migrate_software_workflow)을 V2\n구조로 변환한다. task의 request_body / path_params / query_params / extra가 모두\ntask.spec.* 안으로 이동.\n\nmigrate_software_workflow의 run_software_migration 태스크는 V1에서 request_body 값이\n다른 task 이름과 일치하면 자동으로 JsonHttpRequestOperator로 전환되는 매\n[…]\nn: V2 구조로 재작성. grasshopper\n task를 grasshopper_task_software_migration_xcom으로 변경\n- workflow_template/legacy/: V1 원본 보존\n- task_component/grasshopper_task_software_migration_xcom.json: V2 신규 (http_xcom)",
"is_bot": false,
"headline": "feat: workflow_template 2개를 V2 형식으로 변환 + 원본은 legacy/로 보존",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-05-07T02:18:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "16187807a94248e323c7bad743dcebcea02b8113",
"body": "http 타입의 body, http_xcom 타입의 xcom_task가 사용자 측 spec에서 모두 request_body로\n통일된다. http는 raw body 문자열, http_xcom은 upstream task 이름을 가리킨다.\n\nPython operator의 내부 kwarg는 xcom_task로 그대로 두고 gusty가 매핑한다 — operator는\n손대지 않는다.\n\n- conf/task_types.yaml: http.task_schema.body → request_body, http_xcom.task_schema.\n xcom_task → request_body\n- gusty.go: buildHTTPTaskOptions/buildHTTPXcomTaskOptions가 request_body 키를 읽도록\n 수정. 에러 메시지도 spec.request_body로 갱신.",
"is_bot": false,
"headline": "refactor: task spec 키를 request_body로 통일",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-05-07T02:18:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25802afc25584afea0c41530bea25fc1fbb2ced1",
"body": "부팅 시 spec.swagger_yaml_endpoint가 있으면 외부 모듈의 Swagger 문서를 fetch해서\nendpoint에 BasePath prefix를 자동 적용하고, body/path/query 파라미터 schema와\nrequest_body example을 spec에 채워 넣는다.\n\n- bootstrap/swagger.go: processEndpoint가 path_params_schema/query_params_schema/\n body_params_schema를 raw map으로 추출. request_body_exam\n[…]\nagger_yaml_endpoint trigger로\n enrichment 수행 후 해당 키 제거. api_connection_id 누락 시 명시적 에러.\n- 12개 V2 task_component JSON에 swagger_yaml_endpoint 추가, endpoint를 BasePath\n 없는 원본 형태로 복원해서 부팅 시 자동 prefix되도록 변경.",
"is_bot": false,
"headline": "feat: V2 task_component에 swagger fetch enrichment 지원 (Option B)",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-05-07T01:24:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "50e25530010e13307e1aae59f42c9f6872d0036e",
"body": "legacy/ 안의 원본은 그대로 유지하고, 메인 디렉토리에 V2 형식 변환본을\n추가. 부트스트랩이 V2 분기로 처리하여 Swagger fetch 없이 즉시 등록.\n\n변환 대상 (12 http + 1 trigger_workflow):\n- beetle_task_infra_migration, beetle_task_recommend_infra\n- cicada_task_run_script, cicada_time_sleep\n- damselfly_task_get_target_software_model\n- grasshopper_task_soft\n[…]\npe: trigger_workflow + spec)\n\nhttp type endpoint는 옛 swagger fetch 시 합쳐지던 형태와 동일하게\nBasePath prefix 포함 (예: /beetle/api/migration/...)\n\n부팅 시 18개 example(V2 13 + 샘플 5)이 모두 정상 등록되며 통합 회귀\n테스트 84/84 PASS 확인.",
"is_bot": false,
"headline": "feat: legacy task_component 13개를 V2 형식으로 변환",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-30T00:52:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42cf63389b41e964518fae756f1edb3556dfeda1",
"body": "기존 example JSON 13개를 lib/airflow/example/task_component/legacy/로\n이동. 부트스트랩 glob(*.json)이 하위 디렉토리를 탐색하지 않으므로 자동\n제외됨. 파일 자체는 참고/이력용으로 보존.\n\n부트스트랩 v2 형식 인식:\n- ConfigFile에 Type, Spec 필드 추가 (V2 진입 조건)\n- buildTaskComponent에 V2 분기(buildTaskComponentV2) 신규\n - configFile.Type 채워져 있으면 catalog.Has 검증 후 그대로 등록\n\n[…]\n\n- _v2_trigger_workflow.json — TriggerDagRunOperator 트리거\n- _v2_http_template.json — Swagger fetch 없이 직접 endpoint 정의\n\n부팅 시 V2 sample은 GET /task_component로 발견 가능하며 새 워크플로우의\ntask_component로 참조하여 사용 가능.",
"is_bot": false,
"headline": "feat: V2 형식 example 추가 + 기존 example을 legacy/로 이관",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-29T03:30:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "154f571af9cf9d0750ad62672fa0aad564376ced",
"body": "Task / TaskDirectly / CreateTaskReq 의 type-specific 필드를 통합 Spec\n(map[string]any) 으로 교체. 카탈로그의 task_schema가 이 Spec의 키를\n정의한다. TaskComponent.Spec(component-level)과 Task.Spec(runtime-level)이\n머지되어 Airflow operator 옵션을 구성한다.\n\n모델:\n- Task.Spec, TaskDirectly.Spec, CreateTaskReq.Spec 신규\n- 4개 필드 제거: RequestBod\n[…]\ns: 머지된 spec을 그대로 펼침\n- 신규 헬퍼: mergeSpecs, specStringMap\n- 미사용 함수 제거: mergeMaps, applyTaskExtraHeaders, toStringHeaderMap,\n toHeaderString (모두 task.Extra 시대의 보조 함수)\n\n문서:\n- swag init 재생성 (Task 모델 변경 반영)",
"is_bot": false,
"headline": "refactor: Task 모델에 Spec 필드 도입 + gusty.buildTaskOptions 정리",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-29T03:25:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a9a4464f67b7e3ed52e11471d8f0e992f131a192",
"body": "기존 TaskComponent.Data(Options/BodyParams/PathParams/QueryParams) 구조를\n폐기하고, 카탈로그 기반 Type + 자유형 Spec(map[string]any) 구조로 교체.\n\n모델:\n- Spec 타입 신규 (driver.Valuer/Scanner로 JSON 영속화)\n- TaskComponent.Type, TaskComponent.Spec 필드 신규\n- TaskComponent.Data 및 보조 타입 제거\n (TaskComponentData, TaskComponentOptions, Pa\n[…]\n기존 task 필드(PathParams/QueryParams/RequestBody/Extra)는 후속 커밋\n (Task에 Spec 도입)까지 임시로 유지\n\n문서:\n- swag init 재생성 (TaskComponent 모델 변경 반영)\n\n기존 example JSON 파일은 옛 형식이라 부팅 시 일부 실패 가능. 다음\n커밋(example 재작성)에서 정리.",
"is_bot": false,
"headline": "refactor: TaskComponent 모델을 Type/Spec 구조로 전환",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-29T03:20:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b095c1b43ebdd6b3d25e240d9abf2e9f75ee583c",
"body": "카탈로그에 정의된 task type 목록과 상세를 조회할 수 있는 endpoint 신설.\n사용자 / 클라이언트가 사용 가능한 task type을 발견할 수 있도록 노출.\n\n신규 endpoint:\n- GET /cicada/task_type — 카탈로그의 task type 목록\n- GET /cicada/task_type/{id} — 특정 task type 상세 (schema 포함)\n\n신규 파일:\n- pkg/api/rest/service/task_type_service.go\n- pkg/api/rest/controller/task_type.go\n- pkg/api/rest/route/task_type.go\n\n수정:\n- pkg/api/rest/server/server.go: route.TaskType 등록\n- pkg/api/rest/docs/*: swag init 재생성\n\nSwagger Tag: [Task Type] 신규.",
"is_bot": false,
"headline": "feat: GET /task_type API 추가",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-29T02:52:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d92dea63caef082d925f00438f6a2a4ae0d4155",
"body": "워크플로우 task의 종류를 명시적으로 정의하기 위한 카탈로그 시스템 추가.\n이번 커밋은 카탈로그 정의 + 로더만 도입하며, 사용처는 후속 커밋에서.\n\n- conf/task_types.yaml: 5개 type 정의\n (http, http_xcom, bash, ssh, trigger_workflow)\n- lib/airflow/catalog/: yaml 로드 + Get/List/Has API + 단위 테스트 6건\n- lib/config/cm-cicada.go: task_types_path 설정 항목 추가\n (기본값 ./conf/task_types.yaml)\n- conf/cm-cicada.yaml: task_types_path 설정 추가\n- cmd/cm-cicada/main.go: 부팅 시 catalog.Load 호출 (db.Open 직후)\n\n다른 패키지 영향 없음. 기존 동작 그대로 유지.",
"is_bot": false,
"headline": "feat: TaskType 카탈로그 인프라 도입",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-29T02:49:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f2d6148e2ec21940a6646520bf3384b7f278481",
"body": "controller에서 service 분리 시 model import가 제거되었으나 Swagger\n주석이 여전히 model.* 타입을 참조하여 swag init이 타입을 찾지 못하는\n문제 수정.\n\n기존 프로젝트 패턴(var _ model.Type)에 맞춰 swag 타입 참조를 추가:\n- workflow_status.go: var _ model.WorkflowStatus\n- workflow_version.go: var _ model.WorkflowVersion\n- workflow_template.go: var _ model.WorkflowTemplate\n\nswagger docs 재생성 포함.",
"is_bot": false,
"headline": "fix: swag init 타입 해석 오류 수정",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-17T05:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3df66e37765affd37c63a31f0ffbd4df366f233d",
"body": "cicada_task_component controller에서 lib/ssh, lib/cmd를 직접 호출하던\n로직을 CicadaBuiltinService로 이관.\n\n- service.RunScript: 입력 검증 + ssh.ExecuteScript 위임\n- service.SleepTime: 입력 검증(regex) + cmd.RunBash 위임\n - 명령 인젝션 방지를 위해 duration 형식을 정규식으로 검증\n (숫자 + 선택적 h/m/s/ms만 허용)\n\ncontroller는 요청 파싱 → service 호출 → 응답 반환만 담당.\ncicada_task_component.go에서 lib/ssh, lib/cmd import 제거.",
"is_bot": false,
"headline": "refactor: CicadaBuiltinService 신규 생성 및 controller 분리",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-17T05:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff8c64eae5211648cf5047261cff9cf39769f066",
"body": "- WorkflowService에 ListWorkflowVersions, GetWorkflowVersion 추가\n- WorkflowTemplateService 신규 생성 (Get, GetByName, List)\n- workflow_version.go: dao 직접 호출 → service.NewWorkflowService() 경유\n- workflow_template.go: dao 직접 호출 + 모델 변환 → service 경유\n\n두 controller에서 dao import 제거.",
"is_bot": false,
"headline": "refactor: WorkflowVersion/Template 조회를 service로 이관",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-17T05:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26afed91c9a0af5923bcd3a7bee2ebc98765f1ee",
"body": "connection controller에서 airflow.GetClient()를 직접 호출하던 CRUD 로직을\nConnectionService로 이관.\n\n- service.Create: 입력 검증(id, type) + airflow client CreateConnection\n- service.Get/List/Delete: airflow client 조회/삭제 위임\n- service.Update: id 정합성 검증 + type 필수 검증 + airflow client Update\n- service.List: page/row → limit/offset 변환을 service에서 수행\n\ncontroller는 요청 파싱(mapstructure decode) → service 호출 → 응답 반환.\nconnection.go에서 airflow import 제거.",
"is_bot": false,
"headline": "refactor: ConnectionService 신규 생성 및 controller 분리",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-17T05:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1313c2fbbadc7191d19cda2f379524f41515bcf0",
"body": "task_component controller에서 dao를 직접 호출하던 CRUD 로직을\nTaskComponentService로 이관.\n\n- service.Create: UUID 생성 + dao.TaskComponentCreate\n- service.Get/GetByName/List: dao 조회 위임\n- service.Update: 기존 데이터 조회 + 필드 머지 + dao.TaskComponentUpdate\n- service.Delete: 존재 확인 + dao.TaskComponentDelete\n\ncontroller는 요청 파싱 → service 호출 → 응답 반환만 담당.\ntask_component.go에서 dao, uuid import 제거.",
"is_bot": false,
"headline": "refactor: TaskComponentService 신규 생성 및 controller 분리",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-17T05:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7120a3f05060d39775187c264c7987ea1a0168d",
"body": "…로 이동\n\ncontroller에서 dao/airflow를 직접 호출하던 3개 함수의 비즈니스 로직을\nWorkflowRuntimeService로 이관.\n\n- GetWorkflowRuns: DAGRun → WorkflowRun 변환 루프를 service로 이동\n- GetWorkflowStatus: enum 순회 + GetDagStatus 집계 로직을 service로 이동\n- GetImportErrors: airflow client 호출을 service로 이동\n\ncontroller는 요청 파싱 → service 호출 → 응답 반환만 담당하도록 정리.\nworkflow_run.go, workflow_status.go, workflow_import.go에서\ndao/airflow import 제거.",
"is_bot": false,
"headline": "refactor: GetWorkflowRuns/Status/ImportErrors를 WorkflowRuntimeService…",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-17T05:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9181383ef61a23880f5b55990bc3acbcc272d93f",
"body": null,
"is_bot": false,
"headline": "Merge branch 'cloud-barista:main' into refactor/workflow-db-refactor",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-17T05:19:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7275cdb00ef91de8400c26e3d0d4c2f6c4a643e1",
"body": "Swagger UI에서 외부 사용자 가독성 향상을 위해 @Summary 규칙 정립:\n- 동사: Get(단건) / List(목록, 복수명사) / Create / Update / Delete /\n Run / Clear / Download / Check\n- 명사는 Title Case 띄어쓰기 (TaskComponent → Task Component,\n workflowRuns → Workflow Runs)\n- 목록은 복수형 (List Workflow → List Workflows, List Task →\n List Tasks 등)\n\n주\n[…]\nemplate(s)\n- Run script on target → Run Script on Target\n- Run sleep command on cicada → Run Sleep Command\n- List Workflow/Connection/Task → 복수형\n\nswagger.json / swagger.yaml / docs.go는 swag init로 재생성.",
"is_bot": false,
"headline": "docs(swagger): Summary 표기 통일 — 동사/단복수/띄어쓰기 일관화",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-16T02:46:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "686dd89c4c2869ee9a255341f88f07e959111a3c",
"body": "Workflow 태그에 23개 엔드포인트가 몰려있어 Swagger UI 탐색성이\n떨어지던 문제를 해소. 리소스 경계에 맞춰 재분류.\n\n태그 변경:\n- [Workflow] → [Workflow Execution] (7개): run, runs, taskInstances,\n clear range, task logs, log download, event logs\n- [Workflow] → [Task Group] (3개): list / get / get directly\n- [Workflow] → [Task] (5개): list/get in\n[…]\n(9), Workflow Execution(7), Task Group(3), Task(5),\n Task Component(6), Cicada Built-in API(2), Connection(5),\n Workflow Template(3), Admin(2)\n\nswagger.json / swagger.yaml / docs.go는 swag init로 재생성.",
"is_bot": false,
"headline": "docs(swagger): Tags 재분류 — 옵션B (9개 태그)",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-16T02:46:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "440c49bf5fc183348d9ae076ab1393af727c6cfe",
"body": "281 LOC 단일 파일에 혼재되어 있던 세 가지 성격의 타입을 파일 단위로\n분리. 패키지는 그대로 유지하므로 import path 변경은 없음.\n\n- workflow_entity.go: GORM 영속화 대상\n (Workflow, WorkflowVersion, TaskDBModel, TaskGroupDBModel, TaskSnapshot\n + Workflow의 driver.Valuer / sql.Scanner)\n- workflow_dto.go: API 요청/도메인 DTO\n (Task, TaskGroup, TaskDirectl\n[…]\n(WorkflowRun, TaskInstance, TaskInstanceReference, TaskLog,\n EventLog, EventLogs, TaskClearOption, WorkflowStatus)\n\n이 분리로 Entity에 의도된 필드 변경이 API 응답을 건드릴 우려와 Airflow\n런타임 타입이 DB 스키마로 오인될 여지를 구조적으로 분리.",
"is_bot": false,
"headline": "refactor: model/workflow.go를 entity/dto/runtime으로 파일 분리",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-16T02:46:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6c6e751b1a22e6c74d81a96ca4ca0c5dbbfa72c8",
"body": "lib/airflow/gusty.go 에 남아있던 db 패키지 직접 참조 3곳 제거:\n\n- checkWorkflow: db.TaskComponentGetByName -> dao.TaskComponentGetByName\n- buildTaskAirflowIDByName: raw db.DB.Where(...).First(taskModel)\n -> dao.TaskGetByWorkflowIDAndName (TaskKey 백필까지 포함된 정식 경로)\n- buildTaskOptions: db.TaskComponentGetByName -> dao.TaskComponentGetByName\n\n이전 커밋에서 남겨둔 db/compat.go shim도 함께 제거.\n\n의존성 방향: lib/airflow -> dao -> db (정방향 복원)",
"is_bot": false,
"headline": "refactor: airflow gusty가 db를 직접 참조하지 않고 dao 경유하도록 변경",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-16T02:46:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7b0b07f999c7e34e7d735e8ab95b86163f85087",
"body": "db/ 패키지가 DB 연결·마이그레이션 외에 Swagger 파싱, HTTP fetch,\n예시 데이터 생성, Init 오케스트레이션까지 담당하던 God Package 문제를\n해소.\n\n- lib/airflow/bootstrap/swagger.go: Swagger 2.0 파싱 타입과 변환 로직\n- lib/airflow/bootstrap/taskcomponent.go: TaskComponentInit 오케스트레이터\n (외부 모듈 Swagger → TaskComponent 계약 동기화 파이프라인)\n- lib/airflow/bootstrap\n[…]\n록 정리\n- controller: db.XxxGetByName 호출을 dao.XxxGetByName 으로 전환\n\ndb/compat.go 에 TaskComponentGetByName shim을 남겨 lib/airflow/gusty.go\n의 잔여 참조가 깨지지 않도록 유지. 다음 커밋에서 gusty.go 를 dao로\n마이그레이션한 뒤 shim 을 제거할 예정.",
"is_bot": false,
"headline": "refactor: seed 로직을 lib/airflow/bootstrap 패키지로 분리",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-16T02:46:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eb416763bf389d298b2824f1dbe5ec55e713b361",
"body": "- dao.TaskComponentGetByName: 이름으로 TaskComponent 단건 조회\n- dao.WorkflowTemplateGetByName: 이름으로 WorkflowTemplate 단건 조회\n\ndb 패키지의 동명 함수들을 dao로 이관하기 위한 선행 작업.\n호출처 전환은 후속 커밋에서 수행.",
"is_bot": false,
"headline": "feat: dao에 GetByName 조회 함수 추가",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-16T02:46:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4d8552acaf21455f2d26973f776fdf4e1496abf",
"body": "mapper/workflow.go의 private workflowDagID 함수를 제거하고\ncommon.WorkflowDagID로 통합. 동일한 로직이 두 곳에 정의되어\n향후 불일치 위험이 있던 문제 해결.",
"is_bot": false,
"headline": "refactor: mapper의 workflowDagID 중복 제거",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-16T02:46:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d0b250050b93393728c05c395dbdd04db5ecf7e",
"body": "- cicadaTaskComponent.go → cicada_task_component.go\n- taskComponent.go → task_component.go\n- workflowTemplate.go → workflow_template.go\n\n기존 workflow_*.go 파일들과 네이밍 컨벤션 일치",
"is_bot": false,
"headline": "style: controller 파일명 snake_case 통일",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-16T02:46:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffe1642970485db749c2c2239dc99018b004219a",
"body": "conneciton → connection",
"is_bot": false,
"headline": "fix: lib/airflow/conneciton.go 파일명 오타 수정",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-16T02:46:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1ee6e3e79ab62846eec57cbdc73e64fcec5b916",
"body": "refactor: workflow DB 구조 개선 및 runtime/airflow 매핑 안정성 강화",
"is_bot": false,
"headline": "Merge pull request #63 from yby654/refactor/workflow-db-refactor",
"author_name": "ish",
"author_login": "ish-hcc",
"committed_at": "2026-04-15T09:22:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f6ada707789e9144e6b50b6ba538f75bb783a0a",
"body": null,
"is_bot": false,
"headline": "feat: WorkflowDagID 함수 추가 및 컨트롤러 전반의 워크플로우 ID 처리 로직 개선",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-14T07:11:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8189e551be28e49b6970083c2d348de841ef94a8",
"body": null,
"is_bot": false,
"headline": "fix: 주석제거",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-14T02:08:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdb15da33a89d38cb1a8baa684ed7e260f50e925",
"body": null,
"is_bot": false,
"headline": "chore: update gitignore",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-14T02:02:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd81d1f5467fd840ea42115b97a2e1eea4f126e7",
"body": null,
"is_bot": false,
"headline": "docs: refresh swagger artifacts",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-14T02:02:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97ac5b8da9c835e1b92ab539ee629709d2139db6",
"body": null,
"is_bot": false,
"headline": "feat: improve gusty generation and validation",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-14T02:02:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ede0e7dfd0c990bc8b2719e9166091680141da84",
"body": null,
"is_bot": false,
"headline": "refactor: slim workflow controllers",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-14T02:02:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11cd0de1acc67e6eabf35e2be0de72408d5c3253",
"body": null,
"is_bot": false,
"headline": "feat: task snapshot and workflow/dag id alignment",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-14T01:51:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd00b6e46c6125701c74728ea721fd3ba069f030",
"body": null,
"is_bot": false,
"headline": "fix: soft_delete 적용에 따라 삭제된 task가 존재하지 않아 400 Error 발생",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-10T08:11:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bf00c8e6075bb9765475dec93dcf19dc38a548c",
"body": null,
"is_bot": false,
"headline": "refactor: 단일 컨트롤러 파일을 기능별로 분리",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-10T06:04:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77a3eb871ff93edf1233b7e9efd240ed729519cf",
"body": "조회 시 삭제된 항목까지 포함할 수 있는 기능을 반영\nquery_param 에 include_deleted=true 추가",
"is_bot": false,
"headline": "feat: 워크플로우, 태스크, 태스크 그룹 soft_delete 항목 조회",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-10T06:00:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5a2b76e67a6a2b4c1edf01c83a28d5702b1ce04",
"body": "- Airflow Connection 생성, 조회, 수정, 목록 조회, 삭제 기능 추가\n- connection 관리용 API route 신규 정의",
"is_bot": false,
"headline": "feat: Airflow Connection CRUD 기능 구현",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-09T06:46:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "740c020d737d49a750ffe354f0d2e67e4edd30fc",
"body": "- 이메일 알림 가독성 향상을 위해 collect_failed_tasks에서 task 정보에 task_display_name 추가\n- 실패 태스크 표시 시 task_id 대신 task_display_name을 사용하도록 이메일 템플릿 수정\n- DAO 레이어의 태스크 조회 로직 개선 (task_key 및 task name 기반 조회 모두 지원)하여 에러 처리 강화 및 로그 노이즈 감소\n- Gusty 내 디렉토리 생성 로직 리팩토링 (task group ID 또는 name 기준으로 생성)하여 구조 및 관리 효율 개선",
"is_bot": false,
"headline": "enhance: task 식별 개선 및 이메일 알림 포맷 개선",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-09T05:43:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f3c20d5f839c9ad72ee1ad0269cbf9608e57dbe",
"body": "- Go 바이너리 실행 및 프로세스 종료를 위한 Makefile 명령어 추가\n- DAO 레이어에서 task 및 task group에 unique key 도입하여 식별 구조 개선\n- task 및 task group에 soft delete 기능 추가\n- workflow에 workflow key 추가 및 DB unique 제약 조건 적용\n- 전반적인 DB 처리 로직 및 에러 핸들링 개선 (runtime 오류 방지)\n- Airflow 연동을 위한 YAML 생성 로직 개선 (task/workflow key 기반)",
"is_bot": false,
"headline": "refactor: workflow 및 task 관리 구조 개선 (unique key 도입 및 DB 처리 고도화)",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-08T07:11:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f8077ee268b88e2d14cfcd4c7a884ca98a35e7b",
"body": null,
"is_bot": false,
"headline": "email alert 수정",
"author_name": "yby654",
"author_login": "yby654",
"committed_at": "2026-04-08T07:04:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9faa15096b009e5190b7b519e07cc1c7bc94d059",
"body": null,
"is_bot": false,
"headline": "go.mod: Update modules",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2026-03-22T08:34:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bab6a0768c59b08db23016c984c0744eca71b35",
"body": "Bumps [pyasn1](https://github.com/pyasn1/pyasn1) from 0.6.1 to 0.6.3.\n- [Release notes](https://github.com/pyasn1/pyasn1/releases)\n- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)\n- [Commits](https://github.com/pyasn1/pyasn1/compare/v0.6.1...v0.6.3)\n\n---\nupdated-dependencies:\n- dependency-name: pyasn1\n dependency-version: 0.6.3\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump pyasn1 from 0.6.1 to 0.6.3 in /_airflow",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-17T19:25:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35a8e3b4c2232bc53f5ddbbac92d27d262efbe3e",
"body": "Bumps [sqlparse](https://github.com/andialbrecht/sqlparse) from 0.5.1 to 0.5.4.\n- [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG)\n- [Commits](https://github.com/andialbrecht/sqlparse/compare/0.5.1...0.5.4)\n\n---\nupdated-dependencies:\n- dependency-name: sqlparse\n dependency-version: 0.5.4\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump sqlparse from 0.5.1 to 0.5.4 in /_airflow",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-13T18:35:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e75bed931cfb747189d8f0fc3c3da8a00c76d30d",
"body": null,
"is_bot": false,
"headline": "airflow: Update nbconvert to v7.16.6",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-12-19T03:47:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac860d0eba8968abaf43e84e40a4b6463b2fa974",
"body": null,
"is_bot": false,
"headline": "go.mod: Update modules",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-12-19T03:46:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efa73f3b80c00f38070e726bd0cf81d7f0d713e6",
"body": null,
"is_bot": false,
"headline": "airflow: Prevent cycle dependecy",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-12-16T10:15:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf84c3ff43e769ba5b4dd278042efefb6d1edb8c",
"body": null,
"is_bot": false,
"headline": "go.mod: Update modules",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-12-10T12:43:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54c9b71c664bcb9a3d4ee22a79d50eb7a2a6add1",
"body": null,
"is_bot": false,
"headline": "go.mod: Update modules",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-12-05T10:47:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06fc63e8854af7fb6326be257223c184d2e4a862",
"body": null,
"is_bot": false,
"headline": "ssh: Set keepalived for SSH clients",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-13T07:41:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac09af91d38f8d8b4a9cb03cf9f9c841ef648179",
"body": null,
"is_bot": false,
"headline": "airflow: Fix nil pointer dereference when unlock dag request",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-07T07:15:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61751093955a8e1908403016baeb63ec663dbc3d",
"body": null,
"is_bot": false,
"headline": "api: rest: Fix run ID parsing issue",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-07T07:02:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9bebcdea27de0cb61f3ac058520b0f35f83634e",
"body": null,
"is_bot": false,
"headline": "README.md, api: rest: Fix TyNum to TryNum",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-06T07:45:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8583d0e08282557f99d820e71d375bd0e0156d2f",
"body": null,
"is_bot": false,
"headline": "api: rest: Update swagger",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-06T07:18:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a7563cb916b8f41169f5c7b32ceda9118eddce3",
"body": "…t provided",
"is_bot": false,
"headline": "api: rest: Wait for 10 seconds in sleep time task if time value is no…",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-06T06:34:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14ef38b69c1759e42e132009c82135703317d1b3",
"body": null,
"is_bot": false,
"headline": "airflow: Update time sleep task example",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-06T06:22:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7160155c8316d5229e2ef03cf2e4ca9255a28b4",
"body": null,
"is_bot": false,
"headline": "airflow, api: rest: Change time sleep task to API based task",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-06T05:19:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b115cd7220c792b2f7287f2ff85a3f90efe6b325",
"body": null,
"is_bot": false,
"headline": "Dockerfile: Fix SSH connection issue",
"author_name": "ish",
"author_login": "ish-hcc",
"committed_at": "2025-11-05T09:30:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e78c86eeab55239c6ff3ccdb322a8292f3aa16aa",
"body": null,
"is_bot": false,
"headline": "workflows: Make airflow-server CI/CD triggerable",
"author_name": "ish",
"author_login": "ish-hcc",
"committed_at": "2025-11-05T08:18:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97b112b0da56c71ed7f8204c166dbd6c170d67de",
"body": null,
"is_bot": false,
"headline": "airflow: Add sleep task example",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-04T12:18:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce775b0d3ff33d8bd80f8b40d68ea890a869fa87",
"body": null,
"is_bot": false,
"headline": "lib, api: Add to show software migration execution ID",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-04T11:52:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f52a2f9ec19fc127405f7cbf9d25136c8416bdd",
"body": null,
"is_bot": false,
"headline": "api: rest: Show if task instance is software migration task",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-04T11:16:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "996dcf111b6fe74fcbd6de1941d698b71e1fe425",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main'",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-01T10:07:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60467a1c9cb997b48cac4d869242211479d9d3e2",
"body": null,
"is_bot": false,
"headline": "go.mod: Update modules",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-01T10:07:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "371a45c7edd1f06e1f7aab358329999e584c6f77",
"body": null,
"is_bot": false,
"headline": "Use go1.25.0",
"author_name": "임수현",
"author_login": "ish-hcc",
"committed_at": "2025-11-01T10:06:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3e65feb427bb6346ec03f050cf59fd28835dbcf",
"body": "Feature/delay task component",
"is_bot": false,
"headline": "Merge pull request #49 from yby654/feature/delay-task-component",
"author_name": "ish",
"author_login": "ish-hcc",
"committed_at": "2025-10-29T03:23:49Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 20,
"commits_last_year": 143,
"latest_release_at": "2026-07-16T06:21:40Z",
"latest_release_tag": "v0.5.2",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 29,
"days_since_latest_release": 6,
"mean_days_between_releases": 34.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/cloud-barista/cm-cicada",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/cloud-barista/cm-cicada",
"is_deprecated": false,
"latest_version": "v0.5.2",
"repository_url": "https://github.com/cloud-barista/cm-cicada",
"versions_count": 20,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-16T05:35:16Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 2,
"stars": 2,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2024-02-15",
"count": 1
},
{
"date": "2024-05-17",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [
"pkg/api/rest/docs/swagger.json",
"pkg/api/rest/docs/swagger.yaml"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 127339,
"source_files_sampled": 98,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"_airflow/requirements.txt",
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "paramiko",
"direct": false,
"version": "3.5.1",
"severity": "low",
"ecosystem": "pypi",
"cvss_score": 3.4,
"advisory_ids": [
"GHSA-r374-rxx8-8654",
"PYSEC-2026-2858"
],
"fixed_version": null,
"advisory_count": 2,
"oldest_advisory_days": 77
},
{
"name": "golang.org/x/crypto",
"direct": true,
"version": "v0.54.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5932"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 14
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"low": 1,
"unknown": 1
},
"advisory_count": 3,
"affected_count": 2,
"assessed_count": 267,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"go",
"pypi"
],
"dependencies": [
{
"name": "github.com/cloud-barista/cm-beetle/imdl",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.10"
},
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/jollaman999/utils",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.10"
},
{
"name": "github.com/labstack/echo/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.15.4"
},
{
"name": "github.com/melbahja/goph",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.1"
},
{
"name": "github.com/mitchellh/mapstructure",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/swaggo/echo-swagger",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.2"
},
{
"name": "github.com/swaggo/swag",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.16.6"
},
{
"name": "golang.org/x/crypto",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.54.0"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "gorm.io/driver/sqlite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "gorm.io/gorm",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.31.2"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/cloud-barista/cm-beetle/imdl",
"direct": true,
"version": "v0.1.10",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/jollaman999/utils",
"direct": true,
"version": "v1.0.10",
"ecosystem": "go"
},
{
"name": "github.com/labstack/echo/v4",
"direct": true,
"version": "v4.15.4",
"ecosystem": "go"
},
{
"name": "github.com/melbahja/goph",
"direct": true,
"version": "v1.5.1",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/mapstructure",
"direct": true,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/swaggo/echo-swagger",
"direct": true,
"version": "v1.5.2",
"ecosystem": "go"
},
{
"name": "github.com/swaggo/swag",
"direct": true,
"version": "v1.16.6",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": true,
"version": "v0.54.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": true,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "gorm.io/driver/sqlite",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "gorm.io/gorm",
"direct": true,
"version": "v1.31.2",
"ecosystem": "go"
},
{
"name": "cyphar.com/go-pathrs",
"direct": false,
"version": "v0.2.5",
"ecosystem": "go"
},
{
"name": "github.com/cyphar/filepath-securejoin",
"direct": false,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonpointer",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonreference",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/spec",
"direct": false,
"version": "v0.22.6",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/conv",
"direct": false,
"version": "v0.27.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/jsonname",
"direct": false,
"version": "v0.27.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/jsonutils",
"direct": false,
"version": "v0.27.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/loading",
"direct": false,
"version": "v0.27.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/stringutils",
"direct": false,
"version": "v0.27.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/typeutils",
"direct": false,
"version": "v0.27.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag/yamlutils",
"direct": false,
"version": "v0.27.0",
"ecosystem": "go"
},
{
"name": "github.com/jinzhu/inflection",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/jinzhu/now",
"direct": false,
"version": "v1.1.5",
"ecosystem": "go"
},
{
"name": "github.com/kr/fs",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/kr/pretty",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/kylebanks/depth",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/labstack/gommon",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.15",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.22",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-sqlite3",
"direct": false,
"version": "v1.14.48",
"ecosystem": "go"
},
{
"name": "github.com/opencontainers/selinux",
"direct": false,
"version": "v1.15.1",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/pkg/sftp",
"direct": false,
"version": "v1.13.11",
"ecosystem": "go"
},
{
"name": "github.com/sv-tools/openapi",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/swaggo/files/v2",
"direct": false,
"version": "v2.0.2",
"ecosystem": "go"
},
{
"name": "github.com/swaggo/swag/v2",
"direct": false,
"version": "v2.0.0-rc5",
"ecosystem": "go"
},
{
"name": "github.com/valyala/bytebufferpool",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/valyala/fasttemplate",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v2",
"direct": false,
"version": "v2.4.4",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v3",
"direct": false,
"version": "v3.0.4",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "v0.38.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.57.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.22.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.40.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.15.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "v0.48.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/check.v1",
"direct": false,
"version": "v1.0.0-20180628173108-788fd7840127",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/yaml",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "a2wsgi",
"direct": false,
"version": "1.10.10",
"ecosystem": "pypi"
},
{
"name": "absql",
"direct": false,
"version": "0.7.0",
"ecosystem": "pypi"
},
{
"name": "aiofiles",
"direct": false,
"version": "24.1.0",
"ecosystem": "pypi"
},
{
"name": "aiohappyeyeballs",
"direct": false,
"version": "2.7.1",
"ecosystem": "pypi"
},
{
"name": "aiohttp",
"direct": false,
"version": "3.14.1",
"ecosystem": "pypi"
},
{
"name": "aiomysql",
"direct": false,
"version": "0.3.2",
"ecosystem": "pypi"
},
{
"name": "aiosignal",
"direct": false,
"version": "1.4.0",
"ecosystem": "pypi"
},
{
"name": "aiosmtplib",
"direct": false,
"version": "5.1.2",
"ecosystem": "pypi"
},
{
"name": "aiosqlite",
"direct": false,
"version": "0.21.0",
"ecosystem": "pypi"
},
{
"name": "alembic",
"direct": false,
"version": "1.18.5",
"ecosystem": "pypi"
},
{
"name": "amqp",
"direct": false,
"version": "5.3.1",
"ecosystem": "pypi"
},
{
"name": "annotated-doc",
"direct": false,
"version": "0.0.4",
"ecosystem": "pypi"
},
{
"name": "annotated-types",
"direct": false,
"version": "0.7.0",
"ecosystem": "pypi"
},
{
"name": "anyio",
"direct": false,
"version": "4.14.1",
"ecosystem": "pypi"
},
{
"name": "apache-airflow",
"direct": false,
"version": "3.3.0",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-core",
"direct": false,
"version": "3.3.0",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-celery",
"direct": false,
"version": "3.21.0",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-cncf-kubernetes",
"direct": false,
"version": "10.19.0",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-common-compat",
"direct": false,
"version": "1.15.0",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-common-io",
"direct": false,
"version": "1.8.0",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-common-sql",
"direct": false,
"version": "2.0.1",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-docker",
"direct": false,
"version": "4.5.7",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-fab",
"direct": false,
"version": "3.7.1",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-ftp",
"direct": false,
"version": "3.15.1",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-http",
"direct": false,
"version": "6.0.4",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-imap",
"direct": false,
"version": "3.11.3",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-mysql",
"direct": false,
"version": "6.6.1",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-smtp",
"direct": false,
"version": "3.0.1",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-sqlite",
"direct": false,
"version": "4.3.3",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-ssh",
"direct": false,
"version": "5.0.3",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-providers-standard",
"direct": false,
"version": "1.15.0",
"ecosystem": "pypi"
},
{
"name": "apache-airflow-task-sdk",
"direct": false,
"version": "1.3.0",
"ecosystem": "pypi"
},
{
"name": "apispec",
"direct": false,
"version": "6.10.0",
"ecosystem": "pypi"
},
{
"name": "argcomplete",
"direct": false,
"version": "3.7.0",
"ecosystem": "pypi"
},
{
"name": "arrow",
"direct": false,
"version": "1.4.0",
"ecosystem": "pypi"
},
{
"name": "asgiref",
"direct": false,
"version": "3.11.1",
"ecosystem": "pypi"
},
{
"name": "asyncssh",
"direct": false,
"version": "2.24.0",
"ecosystem": "pypi"
},
{
"name": "attrs",
"direct": false,
"version": "26.1.0",
"ecosystem": "pypi"
},
{
"name": "babel",
"direct": false,
"version": "2.18.0",
"ecosystem": "pypi"
},
{
"name": "bcrypt",
"direct": false,
"version": "5.0.0",
"ecosystem": "pypi"
},
{
"name": "billiard",
"direct": false,
"version": "4.2.4",
"ecosystem": "pypi"
},
{
"name": "blinker",
"direct": false,
"version": "1.9.0",
"ecosystem": "pypi"
},
{
"name": "cachelib",
"direct": false,
"version": "0.14.0",
"ecosystem": "pypi"
},
{
"name": "cachetools",
"direct": false,
"version": "7.1.4",
"ecosystem": "pypi"
},
{
"name": "cadwyn",
"direct": false,
"version": "7.0.0",
"ecosystem": "pypi"
},
{
"name": "celery",
"direct": false,
"version": "5.6.3",
"ecosystem": "pypi"
},
{
"name": "certifi",
"direct": false,
"version": "2026.6.17",
"ecosystem": "pypi"
},
{
"name": "cffi",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "charset-normalizer",
"direct": false,
"version": "3.4.7",
"ecosystem": "pypi"
},
{
"name": "click",
"direct": false,
"version": "8.4.2",
"ecosystem": "pypi"
},
{
"name": "click-didyoumean",
"direct": false,
"version": "0.3.1",
"ecosystem": "pypi"
},
{
"name": "click-plugins",
"direct": false,
"version": "1.1.1.2",
"ecosystem": "pypi"
},
{
"name": "click-repl",
"direct": false,
"version": "0.3.0",
"ecosystem": "pypi"
},
{
"name": "colorama",
"direct": false,
"version": "0.4.6",
"ecosystem": "pypi"
},
{
"name": "colorlog",
"direct": false,
"version": "6.10.1",
"ecosystem": "pypi"
},
{
"name": "cron-descriptor",
"direct": false,
"version": "2.1.0",
"ecosystem": "pypi"
},
{
"name": "croniter",
"direct": false,
"version": "6.2.2",
"ecosystem": "pypi"
},
{
"name": "cryptography",
"direct": false,
"version": "48.0.1",
"ecosystem": "pypi"
},
{
"name": "deprecated",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "dill",
"direct": false,
"version": "0.4.1",
"ecosystem": "pypi"
},
{
"name": "dnspython",
"direct": false,
"version": "2.8.0",
"ecosystem": "pypi"
},
{
"name": "docker",
"direct": false,
"version": "7.1.0",
"ecosystem": "pypi"
},
{
"name": "durationpy",
"direct": false,
"version": "0.10",
"ecosystem": "pypi"
},
{
"name": "email-validator",
"direct": false,
"version": "2.3.0",
"ecosystem": "pypi"
},
{
"name": "fastapi",
"direct": false,
"version": "0.136.3",
"ecosystem": "pypi"
},
{
"name": "fastapi-cli",
"direct": false,
"version": "0.0.27",
"ecosystem": "pypi"
},
{
"name": "fastjsonschema",
"direct": false,
"version": "2.21.2",
"ecosystem": "pypi"
},
{
"name": "flask",
"direct": false,
"version": "3.1.3",
"ecosystem": "pypi"
},
{
"name": "flask-appbuilder",
"direct": false,
"version": "5.2.1",
"ecosystem": "pypi"
},
{
"name": "flask-babel",
"direct": false,
"version": "4.0.0",
"ecosystem": "pypi"
},
{
"name": "flask-jwt-extended",
"direct": false,
"version": "4.7.4",
"ecosystem": "pypi"
},
{
"name": "flask-limiter",
"direct": false,
"version": "3.12",
"ecosystem": "pypi"
},
{
"name": "flask-login",
"direct": false,
"version": "0.6.3",
"ecosystem": "pypi"
},
{
"name": "flask-session",
"direct": false,
"version": "0.8.0",
"ecosystem": "pypi"
},
{
"name": "flask-sqlalchemy",
"direct": false,
"version": "3.1.1",
"ecosystem": "pypi"
},
{
"name": "flask-wtf",
"direct": false,
"version": "1.3.0",
"ecosystem": "pypi"
},
{
"name": "flower",
"direct": false,
"version": "2.0.1",
"ecosystem": "pypi"
},
{
"name": "frozenlist",
"direct": false,
"version": "1.8.0",
"ecosystem": "pypi"
},
{
"name": "fsspec",
"direct": false,
"version": "2026.6.0",
"ecosystem": "pypi"
},
{
"name": "googleapis-common-protos",
"direct": false,
"version": "1.75.0",
"ecosystem": "pypi"
},
{
"name": "greenback",
"direct": false,
"version": "1.3.0",
"ecosystem": "pypi"
},
{
"name": "greenlet",
"direct": false,
"version": "3.5.3",
"ecosystem": "pypi"
},
{
"name": "grpcio",
"direct": false,
"version": "1.81.1",
"ecosystem": "pypi"
},
{
"name": "gusty",
"direct": false,
"version": "0.23.1",
"ecosystem": "pypi"
},
{
"name": "h11",
"direct": false,
"version": "0.16.0",
"ecosystem": "pypi"
},
{
"name": "httpcore",
"direct": false,
"version": "1.0.9",
"ecosystem": "pypi"
},
{
"name": "httptools",
"direct": false,
"version": "0.8.0",
"ecosystem": "pypi"
},
{
"name": "httpx",
"direct": false,
"version": "0.28.1",
"ecosystem": "pypi"
},
{
"name": "humanize",
"direct": false,
"version": "4.16.0",
"ecosystem": "pypi"
},
{
"name": "idna",
"direct": false,
"version": "3.18",
"ecosystem": "pypi"
},
{
"name": "importlib-metadata",
"direct": false,
"version": "9.0.0",
"ecosystem": "pypi"
},
{
"name": "inflection",
"direct": false,
"version": "0.5.1",
"ecosystem": "pypi"
},
{
"name": "isoduration",
"direct": false,
"version": "20.11.0",
"ecosystem": "pypi"
},
{
"name": "itsdangerous",
"direct": false,
"version": "2.2.0",
"ecosystem": "pypi"
},
{
"name": "jinja2",
"direct": false,
"version": "3.1.6",
"ecosystem": "pypi"
},
{
"name": "jmespath",
"direct": false,
"version": "1.1.0",
"ecosystem": "pypi"
},
{
"name": "jsonpath-ng",
"direct": false,
"version": "1.8.0",
"ecosystem": "pypi"
},
{
"name": "jsonschema",
"direct": false,
"version": "4.26.0",
"ecosystem": "pypi"
},
{
"name": "jsonschema-specifications",
"direct": false,
"version": "2025.9.1",
"ecosystem": "pypi"
},
{
"name": "jupyter-core",
"direct": false,
"version": "5.9.1",
"ecosystem": "pypi"
},
{
"name": "jupytext",
"direct": false,
"version": "1.19.4",
"ecosystem": "pypi"
},
{
"name": "kombu",
"direct": false,
"version": "5.6.2",
"ecosystem": "pypi"
},
{
"name": "kubernetes",
"direct": false,
"version": "36.0.2",
"ecosystem": "pypi"
},
{
"name": "kubernetes-asyncio",
"direct": false,
"version": "36.1.0",
"ecosystem": "pypi"
},
{
"name": "lazy-object-proxy",
"direct": false,
"version": "1.12.0",
"ecosystem": "pypi"
},
{
"name": "libcst",
"direct": false,
"version": "1.8.6",
"ecosystem": "pypi"
},
{
"name": "limits",
"direct": false,
"version": "5.8.0",
"ecosystem": "pypi"
},
{
"name": "linkify-it-py",
"direct": false,
"version": "2.1.0",
"ecosystem": "pypi"
},
{
"name": "lockfile",
"direct": false,
"version": "0.12.2",
"ecosystem": "pypi"
},
{
"name": "mako",
"direct": false,
"version": "1.3.12",
"ecosystem": "pypi"
},
{
"name": "markdown-it-py",
"direct": false,
"version": "4.2.0",
"ecosystem": "pypi"
},
{
"name": "markupsafe",
"direct": false,
"version": "3.0.3",
"ecosystem": "pypi"
},
{
"name": "marshmallow",
"direct": false,
"version": "4.3.0",
"ecosystem": "pypi"
},
{
"name": "marshmallow-sqlalchemy",
"direct": false,
"version": "1.5.0",
"ecosystem": "pypi"
},
{
"name": "mdit-py-plugins",
"direct": false,
"version": "0.6.1",
"ecosystem": "pypi"
},
{
"name": "mdurl",
"direct": false,
"version": "0.1.2",
"ecosystem": "pypi"
},
{
"name": "methodtools",
"direct": false,
"version": "0.4.7",
"ecosystem": "pypi"
},
{
"name": "more-itertools",
"direct": false,
"version": "11.1.0",
"ecosystem": "pypi"
},
{
"name": "msgpack",
"direct": false,
"version": "1.2.1",
"ecosystem": "pypi"
},
{
"name": "msgspec",
"direct": false,
"version": "0.21.1",
"ecosystem": "pypi"
},
{
"name": "multidict",
"direct": false,
"version": "6.7.1",
"ecosystem": "pypi"
},
{
"name": "mysql-connector-python",
"direct": false,
"version": "9.6.0",
"ecosystem": "pypi"
},
{
"name": "mysqlclient",
"direct": false,
"version": "2.2.8",
"ecosystem": "pypi"
},
{
"name": "natsort",
"direct": false,
"version": "8.4.0",
"ecosystem": "pypi"
},
{
"name": "nbformat",
"direct": false,
"version": "5.10.4",
"ecosystem": "pypi"
},
{
"name": "oauthlib",
"direct": false,
"version": "3.3.1",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-api",
"direct": false,
"version": "1.43.0",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-exporter-otlp",
"direct": false,
"version": "1.43.0",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-exporter-otlp-proto-common",
"direct": false,
"version": "1.43.0",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-exporter-otlp-proto-grpc",
"direct": false,
"version": "1.43.0",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-exporter-otlp-proto-http",
"direct": false,
"version": "1.43.0",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-proto",
"direct": false,
"version": "1.43.0",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-sdk",
"direct": false,
"version": "1.43.0",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-semantic-conventions",
"direct": false,
"version": "0.64b0",
"ecosystem": "pypi"
},
{
"name": "ordered-set",
"direct": false,
"version": "4.1.0",
"ecosystem": "pypi"
},
{
"name": "outcome",
"direct": false,
"version": "1.3.0.post0",
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": false,
"version": "26.2",
"ecosystem": "pypi"
},
{
"name": "paramiko",
"direct": false,
"version": "3.5.1",
"ecosystem": "pypi"
},
{
"name": "pathlib-abc",
"direct": false,
"version": "0.5.2",
"ecosystem": "pypi"
},
{
"name": "pathspec",
"direct": false,
"version": "1.1.1",
"ecosystem": "pypi"
},
{
"name": "pendulum",
"direct": false,
"version": "3.2.0",
"ecosystem": "pypi"
},
{
"name": "platformdirs",
"direct": false,
"version": "4.10.0",
"ecosystem": "pypi"
},
{
"name": "pluggy",
"direct": false,
"version": "1.6.0",
"ecosystem": "pypi"
},
{
"name": "prison",
"direct": false,
"version": "0.2.1",
"ecosystem": "pypi"
},
{
"name": "prometheus-client",
"direct": false,
"version": "0.25.0",
"ecosystem": "pypi"
},
{
"name": "prompt-toolkit",
"direct": false,
"version": "3.0.52",
"ecosystem": "pypi"
},
{
"name": "propcache",
"direct": false,
"version": "0.5.2",
"ecosystem": "pypi"
},
{
"name": "protobuf",
"direct": false,
"version": "6.33.6",
"ecosystem": "pypi"
},
{
"name": "psutil",
"direct": false,
"version": "7.2.2",
"ecosystem": "pypi"
},
{
"name": "pycparser",
"direct": false,
"version": "3.0",
"ecosystem": "pypi"
},
{
"name": "pydantic",
"direct": false,
"version": "2.13.4",
"ecosystem": "pypi"
},
{
"name": "pydantic-core",
"direct": false,
"version": "2.46.4",
"ecosystem": "pypi"
},
{
"name": "pydantic-extra-types",
"direct": false,
"version": "2.11.1",
"ecosystem": "pypi"
},
{
"name": "pydantic-settings",
"direct": false,
"version": "2.14.2",
"ecosystem": "pypi"
},
{
"name": "pygments",
"direct": false,
"version": "2.20.0",
"ecosystem": "pypi"
},
{
"name": "pygtrie",
"direct": false,
"version": "2.5.0",
"ecosystem": "pypi"
},
{
"name": "pyjwt",
"direct": false,
"version": "2.13.0",
"ecosystem": "pypi"
},
{
"name": "pymysql",
"direct": false,
"version": "1.1.3",
"ecosystem": "pypi"
},
{
"name": "pynacl",
"direct": false,
"version": "1.6.2",
"ecosystem": "pypi"
},
{
"name": "python-daemon",
"direct": false,
"version": "3.1.2",
"ecosystem": "pypi"
},
{
"name": "python-dateutil",
"direct": false,
"version": "2.9.0.post0",
"ecosystem": "pypi"
},
{
"name": "python-dotenv",
"direct": false,
"version": "1.2.2",
"ecosystem": "pypi"
},
{
"name": "python-multipart",
"direct": false,
"version": "0.0.32",
"ecosystem": "pypi"
},
{
"name": "python-slugify",
"direct": false,
"version": "8.0.4",
"ecosystem": "pypi"
},
{
"name": "pytz",
"direct": false,
"version": "2026.2",
"ecosystem": "pypi"
},
{
"name": "pyyaml",
"direct": false,
"version": "6.0.3",
"ecosystem": "pypi"
},
{
"name": "redis",
"direct": false,
"version": "6.4.0",
"ecosystem": "pypi"
},
{
"name": "referencing",
"direct": false,
"version": "0.37.0",
"ecosystem": "pypi"
},
{
"name": "requests",
"direct": false,
"version": "2.34.2",
"ecosystem": "pypi"
},
{
"name": "requests-oauthlib",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "requests-toolbelt",
"direct": false,
"version": "1.0.0",
"ecosystem": "pypi"
},
{
"name": "rich",
"direct": false,
"version": "13.9.4",
"ecosystem": "pypi"
},
{
"name": "rich-argparse",
"direct": false,
"version": "1.8.0",
"ecosystem": "pypi"
},
{
"name": "rich-toolkit",
"direct": false,
"version": "0.20.1",
"ecosystem": "pypi"
},
{
"name": "rpds-py",
"direct": false,
"version": "2026.6.3",
"ecosystem": "pypi"
},
{
"name": "setproctitle",
"direct": false,
"version": "1.3.7",
"ecosystem": "pypi"
},
{
"name": "shellingham",
"direct": false,
"version": "1.5.4",
"ecosystem": "pypi"
},
{
"name": "six",
"direct": false,
"version": "1.17.0",
"ecosystem": "pypi"
},
{
"name": "sniffio",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "sql-metadata",
"direct": false,
"version": "3.0.1",
"ecosystem": "pypi"
},
{
"name": "sqlalchemy",
"direct": false,
"version": "2.0.51",
"ecosystem": "pypi"
},
{
"name": "sqlalchemy-utils",
"direct": false,
"version": "0.42.1",
"ecosystem": "pypi"
},
{
"name": "sqlglot",
"direct": false,
"version": "30.12.0",
"ecosystem": "pypi"
},
{
"name": "sqlparse",
"direct": false,
"version": "0.5.5",
"ecosystem": "pypi"
},
{
"name": "starlette",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "structlog",
"direct": false,
"version": "26.1.0",
"ecosystem": "pypi"
},
{
"name": "svcs",
"direct": false,
"version": "25.1.0",
"ecosystem": "pypi"
},
{
"name": "tabulate",
"direct": false,
"version": "0.10.0",
"ecosystem": "pypi"
},
{
"name": "tenacity",
"direct": false,
"version": "9.1.4",
"ecosystem": "pypi"
},
{
"name": "termcolor",
"direct": false,
"version": "3.3.0",
"ecosystem": "pypi"
},
{
"name": "text-unidecode",
"direct": false,
"version": "1.3",
"ecosystem": "pypi"
},
{
"name": "tornado",
"direct": false,
"version": "6.5.7",
"ecosystem": "pypi"
},
{
"name": "traitlets",
"direct": false,
"version": "5.15.1",
"ecosystem": "pypi"
},
{
"name": "typer",
"direct": false,
"version": "0.25.1",
"ecosystem": "pypi"
},
{
"name": "typing-extensions",
"direct": false,
"version": "4.16.0",
"ecosystem": "pypi"
},
{
"name": "typing-inspection",
"direct": false,
"version": "0.4.2",
"ecosystem": "pypi"
},
{
"name": "tzdata",
"direct": false,
"version": "2026.2",
"ecosystem": "pypi"
},
{
"name": "tzlocal",
"direct": false,
"version": "5.4.4",
"ecosystem": "pypi"
},
{
"name": "uc-micro-py",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "universal-pathlib",
"direct": false,
"version": "0.3.10",
"ecosystem": "pypi"
},
{
"name": "urllib3",
"direct": false,
"version": "2.7.0",
"ecosystem": "pypi"
},
{
"name": "uuid6",
"direct": false,
"version": "2025.0.1",
"ecosystem": "pypi"
},
{
"name": "uvicorn",
"direct": false,
"version": "0.49.0",
"ecosystem": "pypi"
},
{
"name": "uvloop",
"direct": false,
"version": "0.22.1",
"ecosystem": "pypi"
},
{
"name": "vine",
"direct": false,
"version": "5.1.0",
"ecosystem": "pypi"
},
{
"name": "watchfiles",
"direct": false,
"version": "1.2.0",
"ecosystem": "pypi"
},
{
"name": "wcwidth",
"direct": false,
"version": "0.8.2",
"ecosystem": "pypi"
},
{
"name": "websocket-client",
"direct": false,
"version": "1.9.0",
"ecosystem": "pypi"
},
{
"name": "websockets",
"direct": false,
"version": "16.0",
"ecosystem": "pypi"
},
{
"name": "werkzeug",
"direct": false,
"version": "3.1.8",
"ecosystem": "pypi"
},
{
"name": "wirerope",
"direct": false,
"version": "1.0.0",
"ecosystem": "pypi"
},
{
"name": "wrapt",
"direct": false,
"version": "2.2.2",
"ecosystem": "pypi"
},
{
"name": "wtforms",
"direct": false,
"version": "3.2.2",
"ecosystem": "pypi"
},
{
"name": "yarl",
"direct": false,
"version": "1.24.2",
"ecosystem": "pypi"
},
{
"name": "zipp",
"direct": false,
"version": "4.1.0",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 267,
"direct_count": 12,
"indirect_count": 255
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 31,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 9,
"closed_unmerged_prs": 31
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "ish-hcc",
"commits": 320,
"avatar_url": "https://avatars.githubusercontent.com/u/55735188?v=4"
},
{
"type": "User",
"login": "yby654",
"commits": 98,
"avatar_url": "https://avatars.githubusercontent.com/u/67887676?v=4"
},
{
"type": "User",
"login": "yunkon-kim",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/7975459?v=4"
},
{
"type": "User",
"login": "jollaman999",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/7971489?v=4"
},
{
"type": "User",
"login": "niconicodex",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/50574588?v=4"
}
],
"contributors_sampled": 5,
"top_contributor_share": 0.744
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"continuous-delivery.yaml",
"continuous-delivery_airflow.yaml",
"continuous-integration.yaml",
"deploy-to-cm-server.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yaml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 2/23 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 6 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 8,
"reason": "2 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ecc7fac9d826adc938d4d42429716298b05e9052",
"ran_at": "2026-07-22T11:08:35Z",
"aggregate_score": 5.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T05:59:48Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-20T05:58:56Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/cloud-barista/cm-cicada",
"host": "github.com",
"name": "cm-cicada",
"owner": "cloud-barista"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"security": 59,
"vitality": 90,
"community": 24,
"governance": 63,
"engineering": 76
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 90,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"commits_last_year": 143,
"human_commit_share": 0.97,
"days_since_last_push": 0,
"active_weeks_last_year": 29
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "29/52 weeks with commits",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 29
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "143 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 143
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 20,
"latest_release_tag": "v0.5.2",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": 34.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "20 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 20
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~34.4 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 34.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 2,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 2 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 2
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 24,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 2,
"inputs": {
"forks": 2,
"stars": 2,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 63,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 5,
"top_contributor_share": 0.744
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 74% of commits",
"points": 5.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 74
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "5 contributors",
"points": 6.8,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 5
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"merged_prs": 31,
"open_issues": 0,
"closed_issues": 9,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 31
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "31/62 decided PRs merged",
"points": 19.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 31,
"decided": 62
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/23 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"followers": 58,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "cloud-barista",
"public_repos": 59,
"account_age_days": 2728
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "58 followers of cloud-barista",
"points": 12.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 58,
"login": "cloud-barista"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "59 public repos, account ~7 yr old",
"points": 24.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 59
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/cloud-barista/cm-cicada"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "20 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 20
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yaml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 59,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 52,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 5.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/23 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "2 existing vulnerabilities detected",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 267 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 267
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 89,
"inputs": {
"source": "osv",
"advisories": 3,
"affected_packages": 2,
"assessed_packages": 267,
"unassessed_packages": 0,
"affected_by_severity": "low 1, unknown 1",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: golang.org/x/crypto v0.54.0 (unknown)",
"points": 26.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "golang.org/x/crypto v0.54.0 (unknown)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 267,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 12
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 71,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.794,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "77 of 97 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 77,
"sampled": 97
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.03
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yaml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "3 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 127339,
"source_files_sampled": 98,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/98 source files over 60KB",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 98,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"example"
],
"has_mcp_signal": false,
"api_schema_files": [
"pkg/api/rest/docs/swagger.json",
"pkg/api/rest/docs/swagger.yaml"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "pkg/api/rest/docs/swagger.json, pkg/api/rest/docs/swagger.yaml",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "pkg/api/rest/docs/swagger.json, pkg/api/rest/docs/swagger.yaml"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-22T11:08:59.811586Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/cloud-barista/cm-cicada.svg",
"full_name": "cloud-barista/cm-cicada",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.