Public recordGood
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-29 14:13 UTC
containerd / nri
Node Resource Interface
containerd/nri holds a health index of 71 out of 100, placing it in the Good band. It scores highest on Vitality (81/100) and lowest on Security (51/100). It was last updated 9 days ago. 3 contributors account for most of its recent work.
71
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
71
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
containerdOrganization
1,307 followers39 public repossince Aug 2015
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/containerd/nri | v0.12.1 | - | 15 | 10 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
81
Development activity
74Good
How it's scored
| 28.8/36 | Push recency — last push 9 days ago |
| 24.2/36 | Commit cadence — 35/52 weeks with commits |
| 18/18 | Commit volume — 181 commits in the last year |
| 3/10 | OpenSSF Scorecard: Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
Inputs used
| commits_last_year | 181 |
| human_commit_share | 1 |
| days_since_last_push | 9 |
| active_weeks_last_year | 35 |
Release discipline
92Excellent
How it's scored
| 27/27 | Ships releases — 12 releases published |
| 36/36 | Release recency — latest release 9 days ago |
| 19.8/27 | Release cadence — a release every ~108.9 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 12 |
| latest_release_tag | v0.12.1 |
| releases_from_tags | no |
| days_since_latest_release | 9 |
| mean_days_between_releases | 108.9 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
59
Popularity & adoption
67Moderate
How it's scored
| 42.1/60 | Stars — 396 stars |
| 16.7/25 | Forks — 101 forks |
| 8.2/15 | Watchers — 31 watchers |
Inputs used
| forks | 101 |
| stars | 396 |
| watchers | 31 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
78
How it's scored
| 36/54 | Bus factor — 3 contributor(s) cover half of all commits |
| 14.3/22.5 | Commit distribution — top contributor authored 37% of commits |
| 13.5/13.5 | Contributor breadth — 45 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 56 contributing companies or organizations |
Inputs used
| bus_factor | 3 |
| contributors_sampled | 45 |
| top_contributor_share | 0.366 |
Issue & PR responsiveness
66Moderate
How it's scored
| 19.3/46.8 | Issue resolution — 41% of issues closed |
| 32.2/38.3 | PR acceptance — 180/214 decided PRs merged |
| 15/15 | OpenSSF Scorecard: Code-Review — all changesets reviewed |
Inputs used
| merged_prs | 180 |
| open_issues | 40 |
| closed_issues | 28 |
| issue_closed_ratio | 0.412 |
| closed_unmerged_prs | 34 |
Ownership & stewardship
76Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 22.4/25 | Owner reach — 1,307 followers of containerd |
| 23.7/25 | Track record — 39 public repos, account ~10 yr old |
Inputs used
| followers | 1,307 |
| owner_type | Organization |
| is_verified | — |
| owner_login | containerd |
| public_repos | 39 |
| account_age_days | 3,986 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 10 days ago |
| 20/20 | Version history — 15 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/containerd/nri |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 10 |
Engineering Quality
Are baseline engineering and documentation practices in place?
80
Engineering practices
84Good
How it's scored
| 24/24 | CI workflows — 4 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yml |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
75Good
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
51
Security posture
51Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0.8/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 7.5/7.5 | Code-Review — all changesets reviewed |
| 2.5/2.5 | Contributors — project has 56 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 2.2/7.5 | Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool is run on all commits |
| 4.5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 24 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 5.1 |
Excluded from scoring (no data or not applicable): signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
68
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 85 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.85 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yml |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | examples/go.mod, go.mod, plugins/device-injector/go.mod, plugins/differ/go.mod, plugins/hook-injector/go.mod, plugins/logger/go.mod, plugins/network-device-injector/go.mod, plugins/network-logger/go.mod, plugins/rdt/go.mod, plugins/template/go.mod, plugins/ulimit-adjuster/go.mod, plugins/v010-adapter/go.mod, plugins/wasm/go.mod, plugins/writable-cgroups/go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
98Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 53.4/55 | Manageable file sizes — 3/100 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 439,028 |
| source_files_sampled | 100 |
| oversized_source_files | 3 |
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — pkg/api/api.proto |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples, samples |
Inputs used
| example_dirs | examples, samples |
| has_mcp_signal | no |
| api_schema_files | pkg/api/api.proto |
Key facts
396GitHub stars
45contributors
181commits, last 12 months
9days since last push
12releases
3bus factor
40open issues
Gopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 101 ⇿
0Stars
101Forks
11Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 9Patch 2
Each point covers 6 days.
OpenSSF Scorecard 5.1 / 10
5.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 1 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 10 | Code-Review | all changesets reviewed |
| 10 | Contributors | project has 56 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 3 | Maintained | 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool is run on all commits |
| 9 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 24 existing vulnerabilities detected |
Direct dependencies 17
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/brianvoe/gofakeit/v7 | v7.12.1 | go.mod |
| Go | github.com/containerd/ttrpc | v1.2.7 | go.mod |
| Go | github.com/google/go-cmp | v0.7.0 | go.mod |
| Go | github.com/knqyf263/go-plugin | v0.9.0 | go.mod |
| Go | github.com/moby/sys/mountinfo | v0.7.2 | go.mod |
| Go | github.com/onsi/ginkgo/v2 | v2.19.1 | go.mod |
| Go | github.com/onsi/gomega | v1.34.0 | go.mod |
| Go | github.com/opencontainers/runtime-spec | v1.3.0 | go.mod |
| Go | github.com/opencontainers/runtime-tools | v0.9.1-0.20251114084447-edf4cb3d2116 | go.mod |
| Go | github.com/sirupsen/logrus | v1.9.3 | go.mod |
| Go | github.com/stretchr/testify | v1.8.4 | go.mod |
| Go | github.com/tetratelabs/wazero | v1.11.0 | go.mod |
| Go | golang.org/x/mod | v0.32.0 | go.mod |
| Go | golang.org/x/sys | v0.39.0 | go.mod |
| Go | google.golang.org/grpc | v1.57.1 | go.mod |
| Go | google.golang.org/protobuf | v1.34.1 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 4125,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 653408,
"Shell": 5022,
"Makefile": 6513,
"Dockerfile": 1173
},
"pushed_at": "2026-07-20T14:04:51Z",
"created_at": "2020-07-28T18:33:54Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T13:30:26Z",
"description": "Node Resource Interface",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "containerd.io",
"name": "containerd",
"type": "Organization",
"login": "containerd",
"company": null,
"location": null,
"followers": 1307,
"avatar_url": "https://avatars.githubusercontent.com/u/14037953?v=4",
"created_at": "2015-08-30T06:48:09Z",
"is_verified": null,
"public_repos": 39,
"account_age_days": 3986
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.12.1",
"kind": "patch",
"published_at": "2026-07-20T14:04:51Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-04-28T17:42:47Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2025-12-17T12:45:26Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2025-08-19T17:59:14Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2024-12-12T17:15:41Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2024-11-01T18:24:32Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2024-10-23T20:49:46Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2024-04-18T21:57:27Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2024-02-03T09:02:14Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2023-11-13T17:57:23Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2023-09-15T22:15:17Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2023-09-12T23:25:56Z"
}
],
"recent_commits": [
{
"oid": "84180b63351d03b54a317a265ba01e3e9db19f24",
"body": "adaptation: avoid holding lock across runtime update callback",
"is_bot": false,
"headline": "Merge pull request #301 from ningmingxiao/fix_deadlock",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-07-18T22:12:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55afaa25d2d7827cd51841a5cc2f09981544b894",
"body": "updateContainers currently holds the Adaptation mutex while calling the\nruntime-provided updateFn. containerd's updateFn acquires its local NRI\nmutex, while CRI lifecycle paths acquire the same locks in the opposite\norder:\n\n lifecycle: local mutex -> Adaptation mutex\n update: Adaptation mutex -\n[…]\ne Adaptation mutex and leave synchronization of\nruntime-owned state to the runtime.\n\nFixes https://github.com/containerd/containerd/issues/13733\n\nSigned-off-by: ningmingxiao <ning.mingxiao@zte.com.cn>",
"is_bot": false,
"headline": "adaptation: avoid holding lock across runtime update callback",
"author_name": "ningmingxiao",
"author_login": "ningmingxiao",
"committed_at": "2026-07-17T05:50:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32e4300b66ad2c1ad00526ab3dd2034d7cb5b58d",
"body": "docs: Fix typo in containerd config for default validator.",
"is_bot": false,
"headline": "Merge pull request #297 from grosskur/grosskur/docs-validation-plugins",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-06-05T23:06:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7e479f52f51be794ff24af3a5103f7db47ce08d",
"body": "The sample config is ignored by containerd:\n\n [plugins.\"io.containerd.nri.v1.runtime\"]\n [plugins.\"io.containerd.nri.v1.runtime\".default_validator]\n\nThe correct config is:\n\n [plugins.\"io.containerd.nri.v1.nri\"]\n [plugins.\"io.containerd.nri.v1.nri\".default_validator]\n\nTested with containerd 2.2.3.\n\nSigned-off-by: Alan Grosskurth <grosskur@google.com>",
"is_bot": false,
"headline": "docs: Fix typo in containerd config for default validator.",
"author_name": "Alan Grosskurth",
"author_login": "grosskur",
"committed_at": "2026-06-05T22:37:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "520641efc61c07ccb5a39b13dcfe5598ab1f9ab9",
"body": "Fix .gitignore",
"is_bot": false,
"headline": "Merge pull request #290 from samuelkarp/fix-gitignore",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-28T18:44:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d37892494085e17e266a7643d8ac37fe6e7eea1",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "fix .gitignore to include info/none",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-28T18:32:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a92ac958717b461fbf43d76fd56e0de6eef3115",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "delete manually-added none file",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-28T18:31:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57442b2a20c63d48d69dc600c3fb4f0c063c7ef0",
"body": "wire protocol: use dedicated RPC calls for all pod and container life-cycle events.",
"is_bot": false,
"headline": "Merge pull request #274 from klihub/devel/dedicated-lifecycle-events",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-15T19:11:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3402eba0ccd83c5598adab3289425a4c66fb843d",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "README.md: document deprecation of StateChange.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-14T05:43:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e16af776b1e170c24c8f7c3f83db63eb7788cb8",
"body": "Add a backward compatibility wrapper for old plugins which do not\nsupport the full set of dedicated lifecycle events yet. Fall back\nto relaying StateChange events to them.\n\nRecord deprecation warnings for each unimplemented new plugin\ninterface where we need to fall back and funnel calls through\nthe old StateChange RPC call.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: implement wrapper for old plugins.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-14T05:43:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "299a3ee685cfef34c8910f46b1386aafe51994ba",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: update unit tests for metrics.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-13T16:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e019dce0ee4cf5d0f4e2980d1398a7f2cabddca7",
"body": "Update to use the new dedicated RPC calls to relay all pod and\ncontainer lifecycle events to plugins. Remove old StateChange\nwhich used to multiplex {Run,PostUpdate,Stop,Remove}PodSandbox\npod and {PostCreate,Start,PostStart,PostUpdate,Remove}Container\ncontainer events.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: use dedicated RPC calls for all events.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-13T16:35:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbf892d2e5e6adc647e602022dcfe7079e4cd6f4",
"body": "Define dedicated RPC calls on the wire for all pod and container\nlifecycle events. Update stub, builtin and WASM plugins accordingly.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,stub: add dedicated RPC calls for all events.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-13T16:35:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8da10364032fa9fb507f1857da5a1b3141b3800",
"body": "add basic metrics for NRI framework",
"is_bot": false,
"headline": "Merge pull request #277 from chrishenzie/feat/prometheus-metrics",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-13T16:35:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06a64ce0607484b3c901cdf5aa1568c79e837ffc",
"body": "Add a background to lifecycle SVGs so they are legible in dark mode",
"is_bot": false,
"headline": "Merge pull request #285 from BenTheElder/background",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-08T16:32:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "560c0c27fa0c36142447d17399cae30cc5faa908",
"body": "logger: fix logger Shutdown function signature",
"is_bot": false,
"headline": "Merge pull request #284 from pandaWall/main",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-08T06:12:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34f24995b9857c9dec616021f15acf0b161e765c",
"body": "Add writable-cgroups experimental plugin",
"is_bot": false,
"headline": "Merge pull request #269 from chrishenzie/writable-cgroups-experiment",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-04-08T06:10:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aee23a20df205050a75e3abd1f9490f5ed4a657d",
"body": "I went with a blueprint color that is hopefully acceptable on both light and dark. Currently these images are illegible in dark mode.\n\nWe have to set the background within the SVG due to github markdown stripping out CSS and other inline theming.\n\nSigned-off-by: Benjamin Elder <bentheelder@google.com>",
"is_bot": false,
"headline": "Add a background to lifecycle SVGs so they are legible in dark mode",
"author_name": "Benjamin Elder",
"author_login": "BenTheElder",
"committed_at": "2026-04-08T01:40:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9d9a684de469ce5f9eef0820ab2e79f136c81bc",
"body": "Adds a new `writable-cgroups` plugin, designed to enable safe delegation\nof cgroup management to containers. This plugin allows containers to\nmount `/sys/fs/cgroup` as read-write, enabling workloads (like AI/ML\nframeworks) to manage their own sub-cgroups.\n\nThis plugin serves as a reference implementation and test-bed for\nvalidating the `nsdelegate` security model proposed in KEP-5474 as an\nalternative to introducing new Kubernetes API fields.\n\nSigned-off-by: Chris Henzie <chrishenzie@gmail.com>",
"is_bot": false,
"headline": "Add writable-cgroups experimental plugin",
"author_name": "Chris Henzie",
"author_login": "chrishenzie",
"committed_at": "2026-04-07T18:23:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2b9f03a908552c9105baca9a1cd0f3b7cbaeb6d",
"body": "Signed-off-by: pandaWall <chenxu@kylinos.cn>",
"is_bot": false,
"headline": "logger: fix logger Shutdown function signature",
"author_name": "pandaWall",
"author_login": null,
"committed_at": "2026-04-07T08:53:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32bf1d5775c1aab91ff143f0a615895ff436f542",
"body": "Provides necessary hooks for container runtimes to collect basic runtime\nmetrics regarding NRI plugin activity. This improves observability and\nhelps satisfy v1.0 requirements.\n\nIntroduces a `Metrics` interface that allows us to collect plugin\ncounts, invocations, adjustments, and latency informatio\n[…]\noption) to route these data points\ninto their existing telemetry setups.\n\nRef: https://github.com/containerd/nri/issues/272\nSigned-off-by: Chris Henzie <chrishenzie@gmail.com>\nAssisted-by: Antigravity",
"is_bot": false,
"headline": "Add metrics interface for NRI framework",
"author_name": "Chris Henzie",
"author_login": "chrishenzie",
"committed_at": "2026-04-02T17:50:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "622bc6c0995bdc93962aae62b0b7d6bc07236e12",
"body": "adaptation,stub: exchange NRI versions in use.",
"is_bot": false,
"headline": "Merge pull request #271 from klihub/devel/version-exchange",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-02T04:42:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d0e81d72cf35445585b72d0a38e56eae087d2ca",
"body": "Add version exchange test and related test option to adaptation.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: add a version exchange test.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-19T08:30:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee82b966aa4540d81ccc32c0a69e77cda95d5e17",
"body": "Exchange NRI versions in use during plugin registration. If we\ndo not get an NRI version from the runtime (too old peer NRI)\ntry to infer it using the runtime type and version.\n\nThe NRI version in use is discovered using the golang runtime\nprovided build info. For plugins hosted in the main NRI repo\n[…]\n subject\nto a replace directive in the plugins' go.mod). Therefore within\nthe repo we fall back to using a git-describe generated version.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,adaptation,stub: exchange versions during registration.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-19T08:30:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4355b7f94b57c95d55b6d734bc32681a3253b66",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "doc: a few fixes to the feature/version table.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-19T08:29:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ea59f914980aea206999290dbc338cafc70cbbe",
"body": "Enable adjusting memory policy from NRI plugins",
"is_bot": false,
"headline": "Merge pull request #166 from askervin/5aW_mempolicy",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-03-17T15:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da6ea0e656c570e6f3b8ec5e0f42a806f9d4dc07",
"body": null,
"is_bot": false,
"headline": "Merge pull request #279 from klihub/fixes/close-on-sync-failure",
"author_name": "Fu Wei",
"author_login": "fuweid",
"committed_at": "2026-03-14T16:25:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "370f3d5c8f4f74853c1f054ef697baa1ada716c5",
"body": "Don't leave a plugin connected but effectively unregistered if\ninitial plugin synchronization fails. Log the fact as an error\nand close the plugin.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: close plugin if initial sync fails.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-14T08:37:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "695be7e4ebaf5940dadbe9fe596827183c87dea8",
"body": "stub: fix new option logging in stub.",
"is_bot": false,
"headline": "Merge pull request #280 from klihub/fixes/stub-option-logging",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-03-13T20:31:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ef04429c02458ea3fd7bb02e1cac8b0fe228818",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "stub: fix new option logging in stub.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-13T19:04:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dda906494c65d12bc3be5615cee69d483a1fe3a",
"body": "stub: allow overriding plugin name with Option",
"is_bot": false,
"headline": "Merge pull request #202 from marquiz/devel/stub-name",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-03-13T13:48:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4b979599070efec3ec0226c6452786348356cb6",
"body": "Add support for adjusting container linux memory policy based\non annotations.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "device-injector: implement memory policy adjustment.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-10T08:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4bda62bf690295389fd50482222e824b989f520",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: add linux memory policy test.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-03-10T08:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e35ace8c05ea68ec4783da6e3a8bf757ffc75ed7",
"body": "Signed-off-by: Antti Kervinen <antti.kervinen@intel.com>",
"is_bot": false,
"headline": "Enable adjusting container Linux memory policy.",
"author_name": "Antti Kervinen",
"author_login": "askervin",
"committed_at": "2026-03-10T08:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6559db68145e61dbc23a189a9f7080a20fefb2c1",
"body": "docs: add validation plugins guide",
"is_bot": false,
"headline": "Merge pull request #278 from samuelkarp/nri-docs",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-03-06T18:40:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b9d909f1c2624af98358d69c499949593bb4965",
"body": "Add a new guide covering NRI validation plugins, including their purpose, deployment process, available validation types, and the built-in default validator. The guide also details required plugins (global and workload-specific) and version requirements.\n\nThe guide was verified by reviewing the content for accuracy against the codebase and existing documentation.\n\nAssisted-by: gemini-cli\nSigned-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "docs: add validation plugins guide",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-03-05T18:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f467efabfe5243eaf2b6860a82fcd777ab4e5d1",
"body": "avoid nil deref in ToOCILinuxSyscalls",
"is_bot": false,
"headline": "Merge pull request #276 from grey3228/bugfix/nil-errno-deref",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-03-04T16:38:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da1671e2afa9a3c7ed43b45118d88a04c39e1c06",
"body": "In ToOCILinuxSyscalls in case if syscall.ErrnoRet is not nil,\nnil ptr errnoRet will be dereferenced without any previous\ninitialization, so it will cause panic.\n\nAvoid dereferencing nil ptr errnoRet by adding previous initialization.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\nSigned-off-by: Mikhail Dmitrichenko <m.dmitrichenko222@gmail.com>",
"is_bot": false,
"headline": "avoid nil deref in ToOCILinuxSyscalls",
"author_name": "Mikhail Dmitrichenko",
"author_login": null,
"committed_at": "2026-03-03T10:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1127602217f00ed4fb4e4adc53cdaada99eab280",
"body": "fix: let stub.Run() select to honor context cancellation",
"is_bot": false,
"headline": "Merge pull request #275 from dottorblaster/stub-context-cancellation",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-02-27T16:12:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a69dfa89005abfef8f8bf5dbea90c66a6e522ca",
"body": "Signed-off-by: Alessio Biancalana <alessio@dottorblaster.it>",
"is_bot": false,
"headline": "fix: let stub.Run() select to honor context cancellation",
"author_name": "Alessio Biancalana",
"author_login": "dottorblaster",
"committed_at": "2026-02-27T11:54:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b9c0b8c56628c4b30d2da62edcfa89a79169ad1",
"body": "api: generate field ownership functions",
"is_bot": false,
"headline": "Merge pull request #263 from samuelkarp/protoc-gen-owners",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-02-23T18:14:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94fcca38e097bfe35af749b85b6619c6bb733bbb",
"body": "Introduce a `protoc` generator (`tools/protoc-gen-owners`) to\nautomatically generate the repetitive field ownership tracking functions.\nThis refactors the `pkg/api/owners.go` file.\n\nThe new generator uses the `Field` enum in `api.proto` as the source of\ntruth. The original `owners.go` file has been \n[…]\nduces manual boilerplate, improves maintainability, and ensures\nconsistency between the protobuf definitions and the Go API.\n\nAssisted-by: gemini-cli\nSigned-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "api: generate field ownership functions",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-02-20T23:14:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c8e2beb1cee024fc20547cf32880290c4f22b94",
"body": "api: fix OCI hook ownership tracking.",
"is_bot": false,
"headline": "Merge pull request #264 from klihub/fixes/accumulate-oci-hook-ownership",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-02-18T16:39:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed596cb6aba7eb7e48e527a6151b7f11417bb5e8",
"body": "Add integration tests for hook injector plugin",
"is_bot": false,
"headline": "Merge pull request #187 from sameersaeed/hook-injector-tests",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-01-28T14:36:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67ebccd435e18cf527378e6ce5bc22689111c635",
"body": "Signed-off-by: Sameer <sameer.saeed@live.ca>",
"is_bot": false,
"headline": "Add integration tests for hook injector plugin",
"author_name": "Sameer",
"author_login": "sameersaeed",
"committed_at": "2026-01-28T14:10:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "012604f8a24a07ccfc78e28c7f9aba6b7bd05cf0",
"body": "go.mod: move from old containers/common repo to go.podman.io/common",
"is_bot": false,
"headline": "Merge pull request #266 from sameersaeed/move-hook-lib",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-28T06:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "637c8db35c1e04a0e7a0ea3ac013658b55f214a5",
"body": "Signed-off-by: Sameer <sameer.saeed@live.ca>",
"is_bot": false,
"headline": "go.mod: move from old containers/common repo to go.podman.io/common",
"author_name": "Sameer",
"author_login": "sameersaeed",
"committed_at": "2026-01-27T21:38:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbb1b7978a0ea8d45d477fa0e85e36d657f45ec6",
"body": "docs: document which versions various NRI features were first available.",
"is_bot": false,
"headline": "Merge pull request #258 from klihub/devel/docs/features-vs-versions",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-21T18:50:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95cbd8f2c4b094c0a72d3e3d6d9dd0f0f63f8885",
"body": "Document which version of NRI, containerd and CRI-O support first\nappeared for each piece of pod and container metadata, container\nadjustment, and container update.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "docs: document first available version of features.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-21T18:11:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "765f01b7e273cb1928ea17a466cbb12d292d9838",
"body": "…stment\n\ndevice-injector: implement sysctl adjustment annotations.",
"is_bot": false,
"headline": "Merge pull request #262 from klihub/devel/device-injector/sysctl-adju…",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-20T20:31:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91a77603943b4742f7f51e3a002460b1de1f8aa6",
"body": "Verify that a registered plugin name is not empty and only contains\ncharacters from the set [a-zA-Z0-9_.+-].\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,adaptation: more strict plugin name check.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-19T08:17:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95ba09f3d846751de2b693e12c4b3e880029c47c",
"body": "Fix hook ownership tracking and add a proper test case for it.\n\nOwnership tracking for OCI hooks is supposed to be accumulative.\nThe implementation tried to accumulate owners, but it was buggy.\nIt tried to delete existing ownership by unclaiming which marks\nownershipdeleted by the plugin instead of \n[…]\nership accumulation. It was only noticed thanks to #263\nwhich switches much of the ownership tracking code to generated\nfrom hand-written.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api: fix OCI hook ownership tracking.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-16T09:12:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "624ea102f4db619870c603cae4dc91fb23f79a54",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "device-injector: implement sysctl adjustment annotations.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-15T09:38:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d1ee56b9da5b7e9c2762b6a30cd7f184da43f4c",
"body": "protoc: Generate pkg/api/strip.go using plugin",
"is_bot": false,
"headline": "Merge pull request #259 from samuelkarp/protoc-gen-strip",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-13T23:31:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e76da5e2fcbd8d814cc9e0c23719075d4a3abcc",
"body": "Refactor pkg/api/strip.go to be generated automatically by a new protoc\nplugin, 'protoc-gen-strip'. This addresses inconsistencies and missing\nStrip functions in the hand-written file, ensuring comprehensive\ncoverage for protobuf messages.\n\nThe new plugin iterates over protobuf messages and generate\n[…]\nompleteness.\n4. Executed the full project test suite ('make test'), which passed\n successfully, confirming no regressions.\n\nAssisted-by: gemini-cli\nSigned-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "protoc: Generate pkg/api/strip.go using plugin",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-13T22:53:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e46f926147ca928e75db625495c4e28004df1fac",
"body": "Reorder functions in pkg/api/strip.go to match the order of the generated code.\n\nAssisted-by: gemini-cli\nSigned-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "pkg/api: reorder functions in strip.go",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-13T18:05:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5becd3d849e79e35ad2fcfe8176cf740e5e4a483",
"body": "pkg/api: adjustment stripping fixes.",
"is_bot": false,
"headline": "Merge pull request #251 from klihub/fixes/adjustment-strip",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-13T16:53:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33335276ba2f0e339e5ed6b253ec8650238edb10",
"body": "Remove incorrect 'clearing' tests for linux scheduling policy\nand I/O priority. We don't really have support for clearing\neither at the moment.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: ditch semantically broken clearing tests.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-13T14:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5c291411a907fdaf14e51716419438b5942388f",
"body": "Okay, let me try to be less stupid here... Stop Strip()ping expected\nresults before comparing them to collected ones. It only masks bugs\nunnoticable if Strip() incorrectly reduces a non-empty adjustment or\nupdate to nil.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: don't mask Strip() bugs by stripping expected results.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-13T14:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0174fb16c4aa8b498b80670374adf9423764a363",
"body": "Add missing handling for LinuxScheduler, LinuxIOPriority,\nLinuxSeccomp, LinuxNamespaces, Sysctl and LinuxNetDevice\nin adjustment stripping.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "pkg/api: fix adjustment stripping.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-13T14:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16d031f07bae4d21378053def20f569ab60f6260",
"body": "Many of our tests set a single field in a container adjustment\nthen does a protocmp against an expected result. Add tests for\nverifying that stripping an adjustment with a single field set\ndoes not unexpectedly drop that field.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "pkg/api: add tests for adjustment stripping.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-13T14:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc2f8191ef9994f20c864510266a966a8868a69e",
"body": "api,adaptation: fix sysctl adjustment collection, add unit test.",
"is_bot": false,
"headline": "Merge pull request #261 from klihub/fixes/sysctl-adjustment",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-12T20:03:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "232234c7c381265ba9112c62da6d4719302cd1e1",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api: fix adjustment stripping for sysctls.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-12T17:20:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6128d9c30f418c90edaaa38552dc06884d62bac",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: add minimal sysctl adjustment test.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-12T17:20:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7dd8b0818139f56dc24a9a4c5ddc89277fb4837",
"body": "Initilize sysctl map before collecting results. Failing to do\nso results in a crash if any plugin adjusts sysctls.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: initialize sysctl map before collecting results.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-12T16:50:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95203e5ebad349314449b137e38f9b810725c250",
"body": "ulimit-adjuster: fix a typo in README.md.",
"is_bot": false,
"headline": "Merge pull request #260 from klihub/fixes/doc/rlimit-example",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-12T15:49:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14c8e174856f442e856db2d3465e289552e9c86f",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "ulimit-adjuster: fix typo/copy-paste-o in README.md.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-12T14:26:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e27b321b49760cbb69dec2d70da239dece6d8d7",
"body": "docs: add Linux sysctl's as restrictable by validation.",
"is_bot": false,
"headline": "Merge pull request #257 from klihub/fixes/docs/sysctl-restrictions",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-09T07:11:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee5f4534311bbfc97e674db23067aeec4e84ab0a",
"body": "adaptation: ensure namespace adjustment is tested",
"is_bot": false,
"headline": "Merge pull request #256 from samuelkarp/api-namespaces-strip",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2026-01-08T21:46:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf5d2cc0d8d71c77ce7a7d8bffcf13e83c357b0",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "docs: add Linux sysctl's as restrictable by validation.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2026-01-08T17:18:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56a637508e9d82fcf65ac5013adbb9e65b69d0c1",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "adaptation: ensure namespace adjustment is tested",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-01-06T19:22:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "009475630ff7946572d57c0ce42fe2885f60d86b",
"body": "go.{mod,sum}: bump wazero deps to v1.11.0.",
"is_bot": false,
"headline": "Merge pull request #255 from klihub/devel/bum-wazero-deps",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-22T17:24:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76c75076d2425956804e92fa09daecc6c764a100",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "go.{mod,sum}: bump wazero deps to v1.11.0.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-22T14:54:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1078130fa016884b4c03880d9d587e6691a67d98",
"body": "adaptation: allow compiling out WASM support altogether.",
"is_bot": false,
"headline": "Merge pull request #253 from klihub/devel/nowasm-build-flag",
"author_name": "Akihiro Suda",
"author_login": "AkihiroSuda",
"committed_at": "2025-12-17T00:38:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab88fe680c11b35234c38c7d4eac72335721c78d",
"body": "Allow WASM support to be disabled at compile time using the\n\"nri_no_wasm\" build tag.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "adaptation: allow compiling out WASM support altogether.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-16T19:15:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29bcfcb361e6c36c633d4a2ce6a00ff3e94e7cc3",
"body": "Support direct editing of the intelRdt config",
"is_bot": false,
"headline": "Merge pull request #215 from marquiz/devel/rdt",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-16T15:22:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c0c9f67a905fb24682239a4d6d94b0dd52c13e7",
"body": "Makes it possible to remove/override the linux.intelRdt object from the\ncontainer configuration. Extend the API by adding new 'Remove' field to\nthe LinuxRdt message which is used as a marker to fully delete/override\nthe IntelRdt configuration. This patch also updates the adaptation\nand runtime-tools correspondingly.\n\nSigned-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "Implement removal of RDT",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T12:32:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfbae8a616b80037798e3cfb8315d70f3f2eff7e",
"body": "Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "plugins: add sample rdt plugin",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T12:32:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d05dd818ed26c3dbeae0fce88289387b62e4665c",
"body": "Add support for direct manipulation of the intelRdt object of the\ncontainer config.\n\nCo-authored-by: Krisztian Litkey <krisztian.litkey@intel.com>\nSigned-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "pkg/adaptation: support new RDT fields",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T11:40:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "725289b256878de8e965327ab6e70dc883ea771b",
"body": "Add support for direct manipulation of the linuxRdt object in the\ncontainer config.\n\nSigned-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "pkg/runtime-tools/generate: support new RDT fields",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T11:40:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7832a241411573e03982490197d7eb98a1c9d29",
"body": "Add new message for directly managing the linux.intelRdt object of the\nruntime-spec.\n\nNOTE: the old RdtClass field resides under LinuxResources message but\nthe IntelRdt message is sepate from LinuxResources. This is to maintain\nparity with the OCI runtime-spec. It is also much more logical because\nt\n[…]\nd on container\nupdate (missing from UpdateContainerRequest) as this functionality is\nmissing from the runtime spec and runtimes (runc/crun).\n\nSigned-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "api: add rdt",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-12T11:40:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc0990d81d5ef3de226faf6c99d048128bff4efc",
"body": "update wazero/wazero version to v1.10.1",
"is_bot": false,
"headline": "Merge pull request #252 from ningmingxiao/dev01",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-11T07:58:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9eb9a0f0f6e223e6060805b55957f117f159f5cc",
"body": "Signed-off-by: ningmingxiao <ning.mingxiao@zte.com.cn>",
"is_bot": false,
"headline": "update tetratelabs/wazero version to v1.10.1",
"author_name": "ningmingxiao",
"author_login": "ningmingxiao",
"committed_at": "2025-12-11T07:54:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49087934b6d5d02e29e0b5740e24f0ca61f82d44",
"body": "…path\n\n[plugins] support specifying a custom NRI socket path",
"is_bot": false,
"headline": "Merge pull request #249 from tariq1890/device-injector-custom-socket-…",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-07T09:55:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2df656516e73b31e013257f713a1df5baa7fdcb0",
"body": "Signed-off-by: Tariq Ibrahim <tibrahim@nvidia.com>",
"is_bot": false,
"headline": "[plugins] support specifying a custom NRI socket path",
"author_name": "Tariq Ibrahim",
"author_login": "tariq1890",
"committed_at": "2025-12-04T17:46:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f3e69e159d135a01e64462da2adfb1681bdbfb6",
"body": "pkg/api: add OptionalRepeatedString type",
"is_bot": false,
"headline": "Merge pull request #212 from marquiz/devel/api-optional-repeated-string",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-04T16:08:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "687c1a6a8b5c75056acd176dc89c45251926d0bb",
"body": "Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com>",
"is_bot": false,
"headline": "pkg/api: add OptionalRepeatedString type",
"author_name": "Markus Lehtonen",
"author_login": "marquiz",
"committed_at": "2025-12-04T08:09:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1418ab598aca50c87d57ee1c2ad69c36e7eac44",
"body": "api,adaptation,generate: allow setting kernel scheduling policy attributes.",
"is_bot": false,
"headline": "Merge pull request #160 from klihub/devel/linux-scheduler-policy",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-03T17:39:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a371ac5e7afcd185ee575828f4822d779f0ded9",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "device-injector: add scheduling policy adjustment.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-03T17:15:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e06369e8d1cad80f12eaf6f2c0da19c7ac78396c",
"body": "Allow setting/resetting container linux scheduler attributes.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,adaptation,generate: allow setting scheduler attributes.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-03T17:10:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "649a151c21069500285bf1e4c9c0c9062fa4482e",
"body": "device-injector: always log injection summary.",
"is_bot": false,
"headline": "Merge pull request #246 from klihub/fixes/log-device-injection-summary",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-03T13:51:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d6b07c670a06f55a6e3e3cfea4d6f691405b177",
"body": "api,adaptation,generate: allow adjusting linux net devices",
"is_bot": false,
"headline": "Merge pull request #157 from klihub/devel/linux-net-devices",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-12-03T13:46:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5145c92e7c215ce3969805005ebdb0f37749e68b",
"body": "Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "device-injector: add network device injection.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-03T12:09:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a03823fe8afbca00b30f669805c911414c58803",
"body": "Allow adding and removing container linux net devices.\n\nSigned-off-by: Krisztian Litkey <krisztian.litkey@intel.com>",
"is_bot": false,
"headline": "api,adaptation,generate: allow adjusting linux net devices.",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-12-03T12:09:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96f0f209b39a7cfe019dcfebf8a652e53005ddef",
"body": "Add support for sysctl adjustment",
"is_bot": false,
"headline": "Merge pull request #248 from samuelkarp/sysctl",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2025-12-02T21:51:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "914fbf3faf42da144376c133541c37211d2f9200",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "default-validator: restrict sysctl adjustment",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2025-12-01T20:25:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4189560f80f7c02579eec252ae43034bf21cb8a",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "api: apply sysctl adjustments",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2025-12-01T20:25:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd33dea7daa63b421a9fe5a8d1162275792e5e07",
"body": "feat: Make logger a configurable struct member for stub",
"is_bot": false,
"headline": "Merge pull request #239 from gauravkghildiyal/configurable-logger",
"author_name": "Krisztian Litkey",
"author_login": "klihub",
"committed_at": "2025-11-28T12:12:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8705f9b1eb3107ad8bc422978b0412527e3fd236",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "api: add sysctl container adjustment",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2025-11-26T23:33:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d8611f87ad7e4c05b1ad84da4d1a63e885f5a4b",
"body": "…ools\n\nDrop dependency on opencontainers/runtime-tools",
"is_bot": false,
"headline": "Merge pull request #247 from AkihiroSuda/drop-dependency-on-runtime-t…",
"author_name": "Mike Brown",
"author_login": "mikebrow",
"committed_at": "2025-11-20T15:39:15Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 12,
"commits_last_year": 181,
"latest_release_at": "2026-07-20T14:04:51Z",
"latest_release_tag": "v0.12.1",
"releases_from_tags": false,
"days_since_last_push": 9,
"active_weeks_last_year": 35,
"days_since_latest_release": 9,
"mean_days_between_releases": 108.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/containerd/nri",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/containerd/nri",
"is_deprecated": false,
"latest_version": "v0.12.1",
"repository_url": "https://github.com/containerd/nri",
"versions_count": 15,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T22:12:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
}
]
},
"popularity": {
"forks": 101,
"stars": 396,
"watchers": 31,
"fork_history": {
"days": [
{
"date": "2020-10-31",
"count": 1
},
{
"date": "2020-12-18",
"count": 1
},
{
"date": "2021-03-16",
"count": 2
},
{
"date": "2021-05-06",
"count": 1
},
{
"date": "2021-05-11",
"count": 1
},
{
"date": "2021-06-19",
"count": 1
},
{
"date": "2021-07-06",
"count": 1
},
{
"date": "2021-07-09",
"count": 1
},
{
"date": "2021-09-08",
"count": 1
},
{
"date": "2021-09-14",
"count": 2
},
{
"date": "2021-09-15",
"count": 1
},
{
"date": "2021-09-22",
"count": 1
},
{
"date": "2021-09-28",
"count": 1
},
{
"date": "2022-01-05",
"count": 1
},
{
"date": "2022-01-13",
"count": 1
},
{
"date": "2022-10-26",
"count": 1
},
{
"date": "2022-12-02",
"count": 1
},
{
"date": "2022-12-06",
"count": 1
},
{
"date": "2022-12-29",
"count": 1
},
{
"date": "2023-02-10",
"count": 1
},
{
"date": "2023-03-13",
"count": 1
},
{
"date": "2023-03-14",
"count": 1
},
{
"date": "2023-05-03",
"count": 1
},
{
"date": "2023-05-18",
"count": 1
},
{
"date": "2023-05-23",
"count": 1
},
{
"date": "2023-08-06",
"count": 1
},
{
"date": "2023-08-18",
"count": 1
},
{
"date": "2023-08-22",
"count": 1
},
{
"date": "2023-08-24",
"count": 1
},
{
"date": "2023-09-27",
"count": 1
},
{
"date": "2023-10-17",
"count": 1
},
{
"date": "2023-10-26",
"count": 1
},
{
"date": "2023-11-04",
"count": 1
},
{
"date": "2023-11-22",
"count": 2
},
{
"date": "2023-12-07",
"count": 1
},
{
"date": "2023-12-21",
"count": 1
},
{
"date": "2024-01-25",
"count": 1
},
{
"date": "2024-01-29",
"count": 1
},
{
"date": "2024-03-08",
"count": 1
},
{
"date": "2024-04-15",
"count": 1
},
{
"date": "2024-04-18",
"count": 1
},
{
"date": "2024-04-29",
"count": 1
},
{
"date": "2024-05-10",
"count": 2
},
{
"date": "2024-05-12",
"count": 1
},
{
"date": "2024-05-21",
"count": 1
},
{
"date": "2024-06-06",
"count": 1
},
{
"date": "2024-06-19",
"count": 1
},
{
"date": "2024-07-04",
"count": 1
},
{
"date": "2024-07-10",
"count": 1
},
{
"date": "2024-08-10",
"count": 1
},
{
"date": "2024-09-07",
"count": 1
},
{
"date": "2024-09-09",
"count": 1
},
{
"date": "2024-10-16",
"count": 1
},
{
"date": "2024-11-06",
"count": 1
},
{
"date": "2024-11-18",
"count": 1
},
{
"date": "2024-12-29",
"count": 1
},
{
"date": "2025-01-29",
"count": 1
},
{
"date": "2025-02-06",
"count": 1
},
{
"date": "2025-02-12",
"count": 1
},
{
"date": "2025-03-17",
"count": 1
},
{
"date": "2025-04-11",
"count": 1
},
{
"date": "2025-04-18",
"count": 1
},
{
"date": "2025-05-10",
"count": 1
},
{
"date": "2025-06-12",
"count": 1
},
{
"date": "2025-06-17",
"count": 1
},
{
"date": "2025-06-25",
"count": 1
},
{
"date": "2025-07-08",
"count": 1
},
{
"date": "2025-07-25",
"count": 1
},
{
"date": "2025-07-28",
"count": 1
},
{
"date": "2025-08-25",
"count": 1
},
{
"date": "2025-09-01",
"count": 1
},
{
"date": "2025-09-11",
"count": 1
},
{
"date": "2025-10-10",
"count": 1
},
{
"date": "2025-10-12",
"count": 1
},
{
"date": "2025-11-11",
"count": 1
},
{
"date": "2025-11-19",
"count": 1
},
{
"date": "2025-12-03",
"count": 1
},
{
"date": "2025-12-11",
"count": 1
},
{
"date": "2026-02-27",
"count": 1
},
{
"date": "2026-03-02",
"count": 1
},
{
"date": "2026-03-03",
"count": 1
},
{
"date": "2026-03-30",
"count": 1
},
{
"date": "2026-04-02",
"count": 1
},
{
"date": "2026-04-07",
"count": 1
},
{
"date": "2026-04-08",
"count": 1
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-05-13",
"count": 1
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-05",
"count": 1
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-07-03",
"count": 1
},
{
"date": "2026-07-05",
"count": 1
},
{
"date": "2026-07-10",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
}
],
"complete": true,
"collected": 99,
"total_forks": 101
},
"star_history": null,
"open_issues_and_prs": 60
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples",
"samples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [
"pkg/api/api.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"examples/go.mod",
"go.mod",
"plugins/device-injector/go.mod",
"plugins/differ/go.mod",
"plugins/hook-injector/go.mod",
"plugins/logger/go.mod",
"plugins/network-device-injector/go.mod",
"plugins/network-logger/go.mod",
"plugins/rdt/go.mod",
"plugins/template/go.mod",
"plugins/ulimit-adjuster/go.mod",
"plugins/v010-adapter/go.mod",
"plugins/wasm/go.mod",
"plugins/writable-cgroups/go.mod"
],
"largest_source_bytes": 439028,
"source_files_sampled": 100,
"oversized_source_files": 3,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"examples/go.mod",
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/brianvoe/gofakeit/v7",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v7.12.1"
},
{
"name": "github.com/containerd/ttrpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.7"
},
{
"name": "github.com/google/go-cmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.0"
},
{
"name": "github.com/knqyf263/go-plugin",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.0"
},
{
"name": "github.com/moby/sys/mountinfo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.2"
},
{
"name": "github.com/onsi/ginkgo/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.19.1"
},
{
"name": "github.com/onsi/gomega",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.34.0"
},
{
"name": "github.com/opencontainers/runtime-spec",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.0"
},
{
"name": "github.com/opencontainers/runtime-tools",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.1-0.20251114084447-edf4cb3d2116"
},
{
"name": "github.com/sirupsen/logrus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.3"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.4"
},
{
"name": "github.com/tetratelabs/wazero",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "golang.org/x/mod",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.32.0"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.39.0"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.57.1"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.34.1"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 20,
"merged_prs": 180,
"open_issues": 40,
"closed_ratio": 0.412,
"closed_issues": 28,
"closed_unmerged_prs": 34
},
"bus_factor": 3,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "klihub",
"commits": 181,
"avatar_url": "https://avatars.githubusercontent.com/u/996268?v=4"
},
{
"type": "User",
"login": "mikebrow",
"commits": 63,
"avatar_url": "https://avatars.githubusercontent.com/u/12767641?v=4"
},
{
"type": "User",
"login": "samuelkarp",
"commits": 56,
"avatar_url": "https://avatars.githubusercontent.com/u/737750?v=4"
},
{
"type": "User",
"login": "marquiz",
"commits": 40,
"avatar_url": "https://avatars.githubusercontent.com/u/1035625?v=4"
},
{
"type": "User",
"login": "fuweid",
"commits": 33,
"avatar_url": "https://avatars.githubusercontent.com/u/17510957?v=4"
},
{
"type": "User",
"login": "thaJeztah",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/1804568?v=4"
},
{
"type": "User",
"login": "crosbymichael",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/749551?v=4"
},
{
"type": "User",
"login": "dmcgowan",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/169601?v=4"
},
{
"type": "User",
"login": "champtar",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/3536755?v=4"
},
{
"type": "User",
"login": "saschagrunert",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/695473?v=4"
}
],
"contributors_sampled": 45,
"top_contributor_share": 0.366
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"codeql.yml",
"codespell.yml",
"images.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 1,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 56 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 3,
"reason": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 9,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "24 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "84180b63351d03b54a317a265ba01e3e9db19f24",
"ran_at": "2026-07-29T14:12:28Z",
"aggregate_score": 5.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T14:22:40Z",
"oldest_open_prs": [
{
"number": 118,
"created_at": "2024-10-24T16:08:10Z",
"last_comment_at": "2025-11-24T21:06:22Z",
"last_comment_author": "mikebrow"
},
{
"number": 183,
"created_at": "2025-07-16T11:34:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 219,
"created_at": "2025-08-29T06:19:15Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 227,
"created_at": "2025-09-01T09:36:35Z",
"last_comment_at": "2025-09-04T08:46:04Z",
"last_comment_author": "klihub"
},
{
"number": 245,
"created_at": "2025-11-11T19:08:29Z",
"last_comment_at": "2026-04-24T12:09:42Z",
"last_comment_author": "kfox1111"
},
{
"number": 265,
"created_at": "2026-01-20T14:26:10Z",
"last_comment_at": "2026-04-15T22:48:27Z",
"last_comment_author": "samuelkarp"
},
{
"number": 267,
"created_at": "2026-01-28T15:00:20Z",
"last_comment_at": "2026-05-12T13:43:13Z",
"last_comment_author": "MikeZappa87"
},
{
"number": 268,
"created_at": "2026-02-03T19:47:07Z",
"last_comment_at": "2026-03-10T07:25:32Z",
"last_comment_author": "klihub"
},
{
"number": 281,
"created_at": "2026-03-24T00:36:36Z",
"last_comment_at": "2026-03-25T23:42:37Z",
"last_comment_author": "samuelkarp"
},
{
"number": 286,
"created_at": "2026-04-09T19:56:54Z",
"last_comment_at": "2026-05-26T23:21:16Z",
"last_comment_author": "SergeyKanzhelev"
},
{
"number": 288,
"created_at": "2026-04-24T07:11:39Z",
"last_comment_at": "2026-07-20T19:58:41Z",
"last_comment_author": "mikebrow"
},
{
"number": 291,
"created_at": "2026-04-28T18:55:46Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 292,
"created_at": "2026-05-07T11:29:26Z",
"last_comment_at": "2026-06-17T12:55:40Z",
"last_comment_author": "egorikas"
},
{
"number": 293,
"created_at": "2026-05-11T13:24:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 294,
"created_at": "2026-05-11T18:50:30Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 295,
"created_at": "2026-05-12T13:42:41Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 296,
"created_at": "2026-05-13T18:03:55Z",
"last_comment_at": "2026-05-26T07:49:03Z",
"last_comment_author": "arpitjain099"
},
{
"number": 298,
"created_at": "2026-07-03T00:21:49Z",
"last_comment_at": "2026-07-16T16:46:41Z",
"last_comment_author": "wevans-ant"
},
{
"number": 300,
"created_at": "2026-07-10T03:42:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 302,
"created_at": "2026-07-22T16:11:04Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-18T22:12:11Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 35,
"created_at": "2023-03-20T11:53:37Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 44,
"created_at": "2023-06-01T22:30:38Z",
"last_comment_at": "2023-06-02T18:15:00Z",
"last_comment_author": "haircommander"
},
{
"number": 45,
"created_at": "2023-06-14T07:19:56Z",
"last_comment_at": "2023-10-10T17:04:14Z",
"last_comment_author": "kad"
},
{
"number": 49,
"created_at": "2023-09-01T12:38:45Z",
"last_comment_at": "2025-05-23T21:43:06Z",
"last_comment_author": "samuelkarp"
},
{
"number": 56,
"created_at": "2023-09-22T08:03:54Z",
"last_comment_at": "2025-05-23T21:40:08Z",
"last_comment_author": "samuelkarp"
},
{
"number": 63,
"created_at": "2023-12-13T21:34:07Z",
"last_comment_at": "2023-12-14T11:18:41Z",
"last_comment_author": "kad"
},
{
"number": 64,
"created_at": "2024-01-11T09:57:17Z",
"last_comment_at": "2025-05-26T04:36:31Z",
"last_comment_author": "mythi"
},
{
"number": 65,
"created_at": "2024-01-25T22:53:57Z",
"last_comment_at": "2025-05-23T21:36:59Z",
"last_comment_author": "samuelkarp"
},
{
"number": 72,
"created_at": "2024-02-22T09:55:13Z",
"last_comment_at": "2025-08-16T08:37:04Z",
"last_comment_author": "ZiMengSheng"
},
{
"number": 77,
"created_at": "2024-04-12T08:12:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 80,
"created_at": "2024-05-07T12:26:03Z",
"last_comment_at": "2024-05-29T08:34:31Z",
"last_comment_author": "liangjingtao11"
},
{
"number": 83,
"created_at": "2024-05-13T07:56:24Z",
"last_comment_at": "2024-05-15T08:05:49Z",
"last_comment_author": "klihub"
},
{
"number": 86,
"created_at": "2024-05-22T21:10:50Z",
"last_comment_at": "2024-05-23T23:17:12Z",
"last_comment_author": "mikebrow"
},
{
"number": 99,
"created_at": "2024-07-11T11:50:23Z",
"last_comment_at": "2024-07-22T06:52:56Z",
"last_comment_author": "samuelkarp"
},
{
"number": 106,
"created_at": "2024-09-06T13:46:37Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 114,
"created_at": "2024-10-05T14:59:06Z",
"last_comment_at": "2026-04-16T10:04:26Z",
"last_comment_author": "Andreagit97"
},
{
"number": 122,
"created_at": "2024-11-19T09:22:28Z",
"last_comment_at": "2025-09-17T17:26:33Z",
"last_comment_author": "klihub"
},
{
"number": 127,
"created_at": "2024-12-12T09:19:25Z",
"last_comment_at": "2025-05-23T21:03:11Z",
"last_comment_author": "samuelkarp"
},
{
"number": 129,
"created_at": "2024-12-26T14:21:23Z",
"last_comment_at": "2025-05-23T21:01:36Z",
"last_comment_author": "samuelkarp"
},
{
"number": 142,
"created_at": "2025-01-02T03:17:26Z",
"last_comment_at": "2025-05-23T21:10:07Z",
"last_comment_author": "samuelkarp"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/containerd/nri",
"host": "github.com",
"name": "nri",
"owner": "containerd"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"security": 51,
"vitality": 81,
"community": 59,
"governance": 78,
"engineering": 80
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 81,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"commits_last_year": 181,
"human_commit_share": 1,
"days_since_last_push": 9,
"active_weeks_last_year": 35
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 9 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "35/52 weeks with commits",
"points": 24.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 35
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "181 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 181
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 12,
"latest_release_tag": "v0.12.1",
"releases_from_tags": false,
"days_since_latest_release": 9,
"mean_days_between_releases": 108.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "12 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 12
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 9 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~108.9 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 108.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 10,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 10 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 10
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 59,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"forks": 101,
"stars": 396,
"watchers": 31,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "396 stars",
"points": 42.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 396
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "101 forks",
"points": 16.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 101
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "31 watchers",
"points": 8.2,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 31
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 78,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 45,
"top_contributor_share": 0.366
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 37% of commits",
"points": 14.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 37
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "45 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 45
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 56 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"merged_prs": 180,
"open_issues": 40,
"closed_issues": 28,
"issue_closed_ratio": 0.412,
"closed_unmerged_prs": 34
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "41% of issues closed",
"points": 19.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 41
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "180/214 decided PRs merged",
"points": 32.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 180,
"decided": 214
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"followers": 1307,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "containerd",
"public_repos": 39,
"account_age_days": 3986
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,307 followers of containerd",
"points": 22.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1307,
"login": "containerd"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "39 public repos, account ~10 yr old",
"points": 23.7,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 39
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/containerd/nri"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 10
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 10 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 10
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "15 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 15
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 80,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 51,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 5.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 56 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "24 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 15
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 68,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.85,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "85 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 85,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"examples/go.mod",
"go.mod",
"plugins/device-injector/go.mod",
"plugins/differ/go.mod",
"plugins/hook-injector/go.mod",
"plugins/logger/go.mod",
"plugins/network-device-injector/go.mod",
"plugins/network-logger/go.mod",
"plugins/rdt/go.mod",
"plugins/template/go.mod",
"plugins/ulimit-adjuster/go.mod",
"plugins/v010-adapter/go.mod",
"plugins/wasm/go.mod",
"plugins/writable-cgroups/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 439028,
"source_files_sampled": 100,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/100 source files over 60KB",
"points": 53.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 100,
"oversized": 3
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"examples",
"samples"
],
"has_mcp_signal": false,
"api_schema_files": [
"pkg/api/api.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "pkg/api/api.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "pkg/api/api.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples, samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples, samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-29T14:13:02.593177Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/containerd/nri.svg",
"full_name": "containerd/nri",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.