cordum-io / cap

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

Full resolved dependency set from the GitHub dependency graph: 5 direct and 294 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 263 packages, which also include development and test pins that never ship: 11 carry known advisories, of which 0 are direct. 36 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 53509,
      "has_wiki": false,
      "homepage": "https://github.com/cordum-io/cap",
      "languages": {
        "C#": 66975,
        "Go": 1178114,
        "C++": 55693,
        "PHP": 74197,
        "Java": 73295,
        "Ruby": 57427,
        "Rust": 74765,
        "CMake": 2526,
        "Shell": 8848,
        "Python": 859138,
        "Dockerfile": 8301,
        "JavaScript": 26300,
        "PowerShell": 3077,
        "TypeScript": 507152
      },
      "pushed_at": "2026-07-22T20:25:47Z",
      "created_at": "2025-12-11T07:47:28Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-22T15:25:44Z",
      "description": "Cordum Agent Protocol (CAP)",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go",
        "Python",
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://Cordum.io",
      "name": "Cordum.io",
      "type": "Organization",
      "login": "cordum-io",
      "company": null,
      "location": null,
      "followers": 15,
      "avatar_url": "https://avatars.githubusercontent.com/u/248097825?v=4",
      "created_at": "2025-12-06T02:18:02Z",
      "is_verified": null,
      "public_repos": 4,
      "account_age_days": 236
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.17.0",
          "kind": "minor",
          "published_at": "2026-07-22T20:01:47Z"
        },
        {
          "tag": "v2.16.1",
          "kind": "patch",
          "published_at": "2026-07-22T09:55:08Z"
        },
        {
          "tag": "v2.16.0",
          "kind": "minor",
          "published_at": "2026-07-22T09:44:10Z"
        },
        {
          "tag": "v2.14.0",
          "kind": "minor",
          "published_at": "2026-06-03T14:11:38Z"
        },
        {
          "tag": "v2.13.3",
          "kind": "patch",
          "published_at": "2026-05-24T22:35:02Z"
        },
        {
          "tag": "v2.13.2",
          "kind": "patch",
          "published_at": "2026-05-24T22:35:10Z"
        },
        {
          "tag": "v2.13.1",
          "kind": "patch",
          "published_at": "2026-05-13T12:14:37Z"
        },
        {
          "tag": "v2.13.0",
          "kind": "minor",
          "published_at": "2026-05-10T19:44:35Z"
        },
        {
          "tag": "v2.10.0",
          "kind": "minor",
          "published_at": "2026-04-22T11:27:32Z"
        },
        {
          "tag": "v2.9.3",
          "kind": "patch",
          "published_at": "2026-04-21T10:13:29Z"
        },
        {
          "tag": "v2.9.2",
          "kind": "patch",
          "published_at": "2026-04-21T09:05:59Z"
        },
        {
          "tag": "v2.9.1",
          "kind": "patch",
          "published_at": "2026-04-21T08:11:56Z"
        },
        {
          "tag": "v2.9.0",
          "kind": "minor",
          "published_at": "2026-04-07T13:37:06Z"
        },
        {
          "tag": "v2.8.6",
          "kind": "patch",
          "published_at": "2026-03-30T12:34:15Z"
        },
        {
          "tag": "v2.8.4",
          "kind": "patch",
          "published_at": "2026-03-26T20:55:15Z"
        },
        {
          "tag": "v2.7.0",
          "kind": "minor",
          "published_at": "2026-03-19T14:25:58Z"
        },
        {
          "tag": "v2.6.1",
          "kind": "patch",
          "published_at": "2026-03-19T11:47:39Z"
        },
        {
          "tag": "v2.6.0",
          "kind": "minor",
          "published_at": "2026-02-23T12:26:56Z"
        },
        {
          "tag": "v2.5.4",
          "kind": "patch",
          "published_at": "2026-02-21T14:36:44Z"
        },
        {
          "tag": "v2.5.3",
          "kind": "patch",
          "published_at": "2026-02-17T20:11:17Z"
        },
        {
          "tag": "v2.5.2",
          "kind": "patch",
          "published_at": "2026-02-16T20:29:17Z"
        },
        {
          "tag": "v2.5.1",
          "kind": "patch",
          "published_at": "2026-02-16T16:13:33Z"
        },
        {
          "tag": "v2.0.19",
          "kind": "patch",
          "published_at": "2026-01-31T13:55:54Z"
        },
        {
          "tag": "v2.0.18",
          "kind": "patch",
          "published_at": "2026-01-31T12:22:11Z"
        },
        {
          "tag": "v2.0.16",
          "kind": "patch",
          "published_at": "2026-01-26T20:43:51Z"
        },
        {
          "tag": "v2.0.15",
          "kind": "patch",
          "published_at": "2026-01-26T20:06:05Z"
        },
        {
          "tag": "v2.0.14",
          "kind": "patch",
          "published_at": "2026-01-26T19:48:16Z"
        },
        {
          "tag": "v2.0.13",
          "kind": "patch",
          "published_at": "2026-01-23T12:12:03Z"
        },
        {
          "tag": "v2.0.11",
          "kind": "patch",
          "published_at": "2026-01-09T21:53:31Z"
        },
        {
          "tag": "v2.0.7",
          "kind": "patch",
          "published_at": "2026-01-03T12:46:59Z"
        },
        {
          "tag": "v2.0.5",
          "kind": "patch",
          "published_at": "2026-01-01T23:38:16Z"
        },
        {
          "tag": "v2.0.4",
          "kind": "patch",
          "published_at": "2025-12-13T20:01:09Z"
        },
        {
          "tag": "v2.0.1",
          "kind": "patch",
          "published_at": "2025-12-12T10:30:00Z"
        },
        {
          "tag": "v1.0.5",
          "kind": "patch",
          "published_at": "2025-12-11T14:43:30Z"
        },
        {
          "tag": "v1.0.4",
          "kind": "patch",
          "published_at": "2025-12-11T14:15:29Z"
        },
        {
          "tag": "v1.0.3",
          "kind": "patch",
          "published_at": "2025-12-11T13:46:07Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2025-12-11T11:10:53Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "e580c670d54a7563c749835c7dd09d81f116c823",
          "body": "This commit is the human-approved tag target for v2.17.0. Tag\ncreation and any registry publication remain separate, subsequent\nactions.\n\nValidated: cap-release check / release-check --tag v2.17.0 /\nrender --check; go build ./...; go test ./internal/releasetruth/...\n./cmd/cap-release/...\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "release: freeze CAP v2.17.0 snapshot",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-22T15:23:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dff03f3ed1ce0ad0e516d07d0439557fcbfce00e",
          "body": "Five commits landed on main since the v2.16.1 tag: #86 grpc 1.79.3\nto 1.82.1, #87 setuptools 83.0.0 (reverted back to the 82.0.1 pin),\n#88 linkify-it dev bump, and #89's new Go SDK ResourceRef registry --\nnew runtime capability, so per spec/17-versioning-policy.md this is a\nMINOR bump.\n\nRe-titled th\n[…]\nits the candidate line).\n\nValidated: cap-release check / render --check; go build ./...;\ngo test ./internal/releasetruth/... ./cmd/cap-release/...\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "release: stage CAP v2.17.0 candidate",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-22T15:22:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3ca24af28d5322a6dbd689855de8414c5f26f7ad",
          "body": "Adds a fail-closed, operator-installed Go SDK ResourceRef resolver/externalizer registry with bounded streaming, trusted tenant/job authority, integrity and expiry verification, opaque resolved bytes, backend error collapse, and regression coverage for cancellation, nil contexts, and pre-side-effect expiry.\\n\\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "feat(go): land bounded ResourceRef registry (#89)",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-22T15:20:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c016fb837d938078b3b9b56d98b0f9d44379de9",
          "body": "#87 bumped the sdk/python build-system pin to setuptools==83.0.0, but\nthat release requires Python >=3.10 (checked its own METADATA), while\nthis SDK commits to requires-python >=3.9 (see classifiers below).\nBuilding the sdk on Python 3.9 would fail to even install its own\nbuild backend. test_build_backend_is_pinned_for_python_39 caught this\ncorrectly on main after the dependabot auto-merge landed; reverting\nthe pin rather than updating the test's expectation.",
          "is_bot": false,
          "headline": "revert(deps): keep setuptools pinned to 82.0.1, not 83.0.0",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-22T15:02:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ea85749281eeecb94621c29e6025b5bb90f7c0f",
          "body": "Bumps [linkify-it](https://github.com/markdown-it/linkify-it) from 5.0.1 to 5.0.2.\n- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/markdown-it/linkify-it/compare/5.0.1...5.0.2)\n\n---\nupdated-dependencies:\n- dependency-name: linkify-it\n \n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Yaron <76696443+yaront1111@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump linkify-it from 5.0.1 to 5.0.2 in /sdk/node (#88)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T14:48:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "29cc880c7f42421fc89baf476af4fee4ae8724fc",
          "body": "… (#87)\n\nBumps [setuptools](https://github.com/pypa/setuptools) from 82.0.1 to 83.0.0.\n- [Release notes](https://github.com/pypa/setuptools/releases)\n- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)\n- [Commits](https://github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)\n\n---\nup\n[…]\ndency-version: 83.0.0\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump setuptools from 82.0.1 to 83.0.0 in /sdk/python…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T14:47:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f6a2e0c613a4ca28d12bd941d50d9205c64e95f4",
          "body": "Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.3 to 1.82.1.\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.3...v1.82.1)\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/grpc\n  dependency-\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Yaron <76696443+yaront1111@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 (#86)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T14:47:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7a4e4d719a20a9682d4bf83c767ba3ce40af0b8c",
          "body": "development.commit/describe were left at the v2.16.1 freeze point\n(32b9db9) after two follow-up commits landed on main without updating\nthem. Neither cap-release check nor promotion-check cross-validates\nthis against git HEAD, so the drift went unnoticed. Sync to HEAD\n(789e50b, v2.16.1-3-g789e50b).",
          "is_bot": false,
          "headline": "fix(release): sync development block to actual HEAD",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-22T12:06:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "789e50b6a4d1e347ba0489f163daf7a667d4d9a2",
          "body": "All of this predates actual publication (nothing had shipped since\nv2.14.0 in June until today's v2.16.1) and was written when the fixes\nit describes were still source-only:\n\n- README.md: dropped the \"Unreleased tree, use registry packages only\n  after release notes...\" hedge on Install an SDK, and \n[…]\nidate-artifact path this guide builds (kept intact as the\n  documented option for contributors testing unreleased changes).\n\nVerified: cap-release check / render --check; go build ./...;\ngo test ./...",
          "is_bot": false,
          "headline": "docs: remove stale unreleased/candidate framing now that v2.16.1 is out",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-22T11:37:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bb38ccb50375db46544fcbce644c010f17e182c7",
          "body": "Both had been latent since the breaking changes that caused them\nlanded, because no release-truth or CI run had exercised the actual\nrelease.version/pyproject metadata in a long time.\n\n- examples/quickstart-echo/main.go (the Go SDK registry quickstart,\n  smoke-tested against the manifest-selected pu\n[…]\n failure\nis the pre-existing Windows-checkout LICENSE CRLF artifact, not\nreproducible on CI's Linux runners); sdk/python-guard tests (107\npassed).\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "fix: two more dormant bugs surfaced by actually publishing (v2.16.1)",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-22T10:13:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b48183af8cef31af40bff7a4ec2d7982b571c632",
          "body": "Independently verified live on all four registries (pypi.org\ncap-sdk-python, pypi.org cordum-guard, registry.npmjs.org\ncap-sdk-node, proxy.golang.org github.com/cordum-io/cap/v2), not just\ninferred from the publish workflows' green checkmarks.\n\nBumped source metadata past the published version (2.16\n[…]\ntill asserting\n2.14.0, unchanged since the last actual publication).\n\nValidated: cap-release check / render --check; go build ./...;\ngo test ./...\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "release: promote CAP v2.16.1 to published release",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-22T10:04:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "32b9db9670c597685344808272f9b246026091ba",
          "body": "This commit is the human-approved tag target for v2.16.1. Tag\ncreation and any registry publication remain separate, subsequent\nactions.\n\nValidated: cap-release check / release-check --tag v2.16.1 /\nrender --check; go build ./...; go test ./internal/releasetruth/...\n./cmd/cap-release/...\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "release: freeze CAP v2.16.1 snapshot",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-22T09:54:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "240fe45dfa4ac622a71d5f29d85d3c3a2fe48542",
          "body": "v2.16.0's Go and Python SDK publish jobs failed on two dormant CI\nbugs (fixed in 28fbd69); Node SDK and cordum-guard already published\nsuccessfully at 2.16.0. This patch carries only the CI fix and\ncompletes publication for cap-go/cap-python -- no SDK source or\nbehavior change.\n\nCandidate: 2.16.1 (t\n[…]\nn-guard pyproject.toml).\n\nValidated: cap-release check / render --check; go build ./...;\ngo test ./internal/releasetruth/... ./cmd/cap-release/...\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "release: stage CAP v2.16.1 candidate",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-22T09:54:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "28fbd69d91f0b46029137c09d0a6a9f22818441f",
          "body": "…16.0 release\n\nBoth publish-go.yml and publish-python.yml only run on release: published\n(or workflow_dispatch), and no GitHub Release had been created since\nv2.14.0 -- so neither bug was caught by any CI run in the interim,\ndespite the breaking changes that caused them landing months apart.\n\n- sdk/\n[…]\nCRLF artifact\nin a LICENSE-file-identity test, unrelated and not reproducible on\nCI's Linux runners. `go test ./cordum/agent/v1/... ./...` passes.\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "fix(ci): repair two dormant publish-workflow bugs surfaced by the v2.…",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-22T09:52:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bae7c2fe28064911daea8ccfac49bc4a05943aa1",
          "body": "This commit is the human-approved tag target for v2.16.0. Tag\ncreation and any registry publication remain separate, subsequent\nactions.\n\nValidated: cap-release check / release-check --tag v2.16.0 /\nrender --check; go build ./...; go test ./internal/releasetruth/...\n./cmd/cap-release/...\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "release: freeze CAP v2.16.0 snapshot",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-22T09:40:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa709e38c66ca8af12c3dcc1109dcfec4eac9bfd",
          "body": "v2.15.0 and v2.15.1 were tagged after the earlier release-truth work\nbut never published (no GitHub Release was created, so PyPI/npm/the\nGo proxy never saw them). Four commits landed on main since the\nv2.15.1 tag (#82 managed-worker trust completion, #83 TCK\nnon-vacuity/hermetic-codegen quality, #84\n[…]\nn-guard pyproject.toml).\n\nValidated: cap-release check / render --check; go build ./...;\ngo test ./internal/releasetruth/... ./cmd/cap-release/...\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "release: stage CAP v2.16.0 candidate",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-22T09:39:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7c3cec3236c1970bbeb71951826eb3bcfc1d17d5",
          "body": "Signed-off-by: Yaron Torgeman <yaront1111@gmail.com>\nCo-authored-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "fix(sdk): sign managed production results (#85)",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-21T19:50:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "882db4bcd17ece554305cf748109df0436b5209f",
          "body": "…sk-eefd8383 QA follow-up) (#83)\n\n* tck: make conformance suites non-vacuous with a reference model, add cancel fencing\n\nAddresses QA findings 1 and 2 on task-eefd8383 (reopen 3).\n\nFinding 1 (internal/tck/adapter_test.go:83) - the \"violate\" mode blindly\nFAILed every case and \"well-behaved\" blindly P\n[…]\nthe Go/Python/Node drivers.\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>\n\n---------\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>\nCo-authored-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "[quality] TCK non-vacuity, resource matrix, hermetic-codegen pins (ta…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-21T18:45:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "19a0be26837a59c77f32eae70a93097ec9c1c461",
          "body": "Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 7.6.3 to 7.6.5.\n- [Release notes](https://github.com/protobufjs/protobuf.js/releases)\n- [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.5/CHANGELOG.md)\n- [Commits](https://github.com/protobufjs/protobuf.js/\n[…]\nendency-version: 7.6.5\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump protobufjs from 7.6.3 to 7.6.5 in /sdk/node (#84)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T18:10:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7c3db0b3f4284a4929977cb95dd9e7675661c3bb",
          "body": "…e (#82)\n\nCompletes stable-SDK production admission/echo/signing, deterministic cross-language signing/replay/identity vectors, normative digest/replay text, and review fixes for wrong-worker JetStream retry plus Python non-job admission. Task task-a13f83fab9f84c8292cc01e424a5494c.",
          "is_bot": false,
          "headline": "security: complete CAP-PRODUCTION managed-worker trust and conformanc…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-20T21:21:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7112be84382852a402aaf4fa25e0955bb70743f4",
          "body": "This commit is the human-approved tag target for v2.15.1. Tag\ncreation and any registry publication remain separate, subsequent\nactions.\n\nValidated: cap-release check / release-check --tag v2.15.1 /\nrender --check; go build ./...; go test ./internal/releasetruth/...\n./cmd/cap-release/...\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "release: freeze CAP v2.15.1 snapshot",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-20T20:51:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4c3916ebdd72fc4b21d109bf6978c2e442a3137",
          "body": "PR #81 (gated TCK remainder: dup/retry coverage, 3x3 matrix, hermetic\ncodegen) merged after v2.15.0 was already tagged, so its content ships\nas a v2.15.1 patch rather than retroactively into the immutable\nv2.15.0 tag. Re-filed its CHANGELOG entry under a new \"## v2.15.1\"\nheading (it had merged in un\n[…]\nn-guard pyproject.toml).\n\nValidated: cap-release check / render --check; go build ./...;\ngo test ./internal/releasetruth/... ./cmd/cap-release/...\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "release: stage CAP v2.15.1 candidate",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-20T20:51:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cc2e0d771302ca49bfbd8ea8f7ea7cf0497a9966",
          "body": "…atrix, hermetic codegen (task-eefd8383) (#81)\n\n* tck: ship duplicate-suppression and retry-fencing coverage (DoD 1 remainder)\n\nThe CAP-PRODUCTION DispatchIdentity{dispatch_id, attempt, assigned_worker_id}\nmodel merged to main (PR #78), so the two behaviors coverage.json carried as\ngated placeholder\n[…]\n---------\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>\nSigned-off-by: worker <worker@cordum.io>\nCo-authored-by: Yaron Torgeman <yaront1111@gmail.com>\nCo-authored-by: worker <worker@cordum.io>",
          "is_bot": false,
          "headline": "[quality] complete the gated TCK remainder: dup/retry coverage, 3x3 m…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-20T20:48:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "798fd053d3b09aa4e67ccb24ce4a31eef94c292f",
          "body": "Convert the candidate into a snapshot (release/manifest.json) -- the\nexact, immutable source state intended for the v2.15.0 tag. This\ncommit is the human-approved tag target; the tag itself and any\nregistry publication remain separate, subsequent actions.\n\nValidated:\n  cap-release check             \n[…]\neck --tag v2.15.0   OK (manifest/source/changelog all agree)\n  cap-release render --check            all files in sync\n  go build ./... / go test ./internal/releasetruth/... ./cmd/cap-release/...   ok",
          "is_bot": false,
          "headline": "release: freeze CAP v2.15.0 snapshot",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-20T20:17:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5b6f796cc258e7baa1bf8d7dc2ba7844e954a1e0",
          "body": "Add a release/manifest.json candidate (2.15.0, tag v2.15.0, channel\nstable) without touching the published release object, per the\nrelease-truth model introduced in #80. Sync source versions to the\ncandidate (sdk/node package.json + package-lock.json, sdk/python and\nsdk/python-guard pyproject.toml, \n[…]\no test ./internal/releasetruth/... ./cmd/cap-release/...  ok\n\nStable component versions and the release object stay at 2.14.0 until\nthe tag actually exists (next commit freezes candidate -> snapshot).",
          "is_bot": false,
          "headline": "release: stage CAP v2.15.0 candidate",
          "author_name": "Yaron Torgeman",
          "author_login": null,
          "committed_at": "2026-07-20T20:17:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "54333b36e9ae9ddb6cfb4fe27e15bd190fee4ee8",
          "body": "Adds candidate/snapshot/promotion lifecycle gates with exact tag and publication truth. All GitHub Actions pass; the only non-green status is CodeRabbit rate limiting after its prior three actionable findings were fixed in bbba1cb. Independently reviewed and full local gates pass.",
          "is_bot": false,
          "headline": "fix(release): add truthful tag snapshot state (#80)",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-20T19:28:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a8983f576299f6efaf3f358d3e00288ef70ba5a",
          "body": "…ake main green (#79)\n\n* fix(cap-production): close guard fail-open, restore py3.9, and make main green\n\nPost-merge remediation of #78 (CAP-PRODUCTION), which landed with red tests,\na fail-open security defect, broken CPython 3.9 support, and stale release\nand codegen metadata. Verified across every\n[…]\nproduction decision caching\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>\n\n---------\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>\nCo-authored-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "fix(cap-production): close guard fail-open, restore Python 3.9, and m…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-20T17:53:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7709def3ab31ed3f053d88715dc5c38a8e96dc5f",
          "body": "…e424a5494c cap (#78)\n\n* test(security): freeze CAP-PRODUCTION threat model RED cases\n\n* feat(protocol): add append-only CAP-PRODUCTION wire identities\n\n* docs(protocol): define normative CAP-PRODUCTION profile\n\n* feat(go): enforce production raw signing and replay contracts\n\n* feat(sdk): verify CAP\n[…]\nion raw admission\n\n* feat(security): validate production resource references\n\n* fix(security): accept canonical workflow resource keys\n\n---------\n\nCo-authored-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "Moe/epic 0812e1dce71c4caf91df89b5b99d4bec/task a13f83fab9f84c8292cc01…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-20T14:52:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "55d62f205b0a0d3e50a93e61f6d6e02d5339b31c",
          "body": "…tner kit (framework adapters pending predecessors) (#70)\n\n* @\ndocs(governance): honest stewardship model, maintainer ladder, DCO 1.1, COI\n\nRewrite GOVERNANCE.md to describe the actual current state: single active\nmaintainer, Cordum stewardship, and explicitly NO TSC / neutral entity /\nfoundation af\n[…]\ne slice of task-e511e1c0.\n@\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>\n\n---------\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>\nCo-authored-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "[Adoption slice] Governance mechanics, readiness checker & design-par…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-20T14:52:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f9165a4ba43d0cab5b0f1c8e60c0bacabe1ba546",
          "body": "… errcheck, schema) (#76)\n\n* release-truth: address post-merge review comments (injection, panic, errcheck, schema)\n\nFollow-up to PR #72 (merged before these landed). Addresses the still-open\nreview comments on the now-merged release-truth code:\n\n- release-tag-validate.yml: map tag/ref into step env\n[…]\n2]\n\nVerified: go build/vet/test ./internal/releasetruth green; cap-release\ncheck/render --check/links green; echo.py py_compile clean.\n\n---------\n\nCo-authored-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "[release-truth] address post-merge review comments (injection, panic,…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-20T14:51:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9db8a6dab4a7d882f76fea8e8b4fa9c1ad8f479f",
          "body": "Bump the release-truth manifest and all stable component versions 2.14.0 ->\n2.15.0, refresh the development snapshot to current main (d8ba962), convert the\nCHANGELOG Unreleased section to '## v2.15.0 - 2026-07-20', regenerate the\nmanifest-driven doc blocks (README, docs/reference, docs/sdk-compariso\n[…]\nA is the atomic tag step;\nrelease-check enforces source==release only on the tag, by design.\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>\nCo-authored-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "release: cut CAP v2.15.0 (handshake + TCK + release-truth) (#77)",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-20T14:51:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d8ba96231959a1cea86a13ced4d289e020c7e2db",
          "body": "…-eefd838) (#71)\n\n* test(sdk-support): RED tests for evidence-backed SDK support manifest\n\nAdds the machine-readable support-tiers model and a Verify contract that\nresolves every claim against files that actually exist, plus the failing\nbehavioral tests that define it.\n\nThe manifest carries no hand-\n[…]\npass; go build ./... clean.\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>\n\n---------\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>\nCo-authored-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "[quality] ship behavioral CAP TCK and evidence-backed SDK tiers (task…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-20T11:06:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7cc3bac2a2777bbf1cd74d067aebfa77613af538",
          "body": "…sk-9292d3eb) (#72)\n\n* feat(release-truth): add canonical release manifest and strict validator\n\nIntroduce release/manifest.json as the single hand-edited source of\ncurrent CAP release, wire, SDK, transport, toolchain, and\nsecurity-support truth, with a descriptive JSON schema and a strict,\nnetwork-\n[…]\ne robust to any future version bump. Verified: the two suites pass\n(54 tests) and the rest of sdk/python/tests is version-independent.\n\n---------\n\nCo-authored-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "release-truth: single manifest + reposition CAP alongside A2A/MCP (ta…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-20T11:05:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "61e6e3130ee5285545bd7b1b405f54cc7b2dc4fb",
          "body": "… 6.33.5 (#74 follow-up) (#75)\n\n* codegen: align Python codegen pin expectations with dependabot protobuf 6.33.5\n\nDependabot bumped sdk/python/requirements-codegen.txt to protobuf 6.33.5, but the\nexpected-pin constants and test fixtures still asserted 6.31.1, failing the\npinned-codegen gate (generat\n[…]\nd-contract gate goes green.\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>\n\n---------\n\nSigned-off-by: Yaron Torgeman <yaront1111@gmail.com>\nCo-authored-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "fix(codegen): align Python codegen pin constants with merged protobuf…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-07-20T10:18:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "37cc77c84b3ce36ce3579adaa52851d9afa96d60",
          "body": "…degen (#73)\n\n* chore(deps-dev): bump protobufjs-cli in /tools/codegen\n\nBumps [protobufjs-cli](https://github.com/protobufjs/protobuf.js) from 1.1.3 to 1.3.3.\n- [Release notes](https://github.com/protobufjs/protobuf.js/releases)\n- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHA\n[…]\nhored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Yaron Torgeman <yaront1111@gmail.com>\nCo-authored-by: Yaron <76696443+yaront1111@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump protobufjs-cli from 1.1.3 to 1.3.3 in /tools/co…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T09:54:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "54068363463057fff5244add3443f31c3cc1b843",
          "body": "Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 6.31.1 to 6.33.5.\n- [Release notes](https://github.com/protocolbuffers/protobuf/releases)\n- [Commits](https://github.com/protocolbuffers/protobuf/commits)\n\n---\nupdated-dependencies:\n- dependency-name: protobuf\n  dependency-version: 6.33.5\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump protobuf from 6.31.1 to 6.33.5 in /sdk/python (#74)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T09:54:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "acb4b4ecc5e213f0799f8013675fc0885bf24b40",
          "body": "… envelope validation (task-a4b71af)\n\nSquash-merges the linear node->python->onboarding->handshake stack (supersedes PRs #66, #67, #68). Org-admin bypass of the required-approval rule per explicit owner authorization (2026-07-20); CI fully green (Go/Node/Python SDK required checks + all optional checks pass), 0 unresolved review threads.",
          "is_bot": false,
          "headline": "security(handshake): authenticate CAP worker trust handshake, enforce…",
          "author_name": "bigboycoder1",
          "author_login": "bigboycoder1",
          "committed_at": "2026-07-20T07:12:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed0d8bdcc45a45352a3eaeb612744aaeaf45b96d",
          "body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.51.0 to 0.52.0.\n- [Commits](https://github.com/golang/crypto/compare/v0.51.0...v0.52.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n  dependency-version: 0.52.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Yaron <76696443+yaront1111@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#64)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T13:27:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0e0ff515008e09a2b8a841fe3f96d0ce1c28154",
          "body": "Co-authored-by: Yaron Torgeman <yaront1111@gmail.com>",
          "is_bot": false,
          "headline": "chore(ci): bump Go toolchain to fix GO-2026-5856 (#65)",
          "author_name": "bigboycoder1",
          "author_login": "bigboycoder1",
          "committed_at": "2026-07-10T12:21:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90718216052535dc986f58cc1a66d4552c4b4cc2",
          "body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.51.0 to 0.55.0.\n- [Commits](https://github.com/golang/net/compare/v0.51.0...v0.55.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n  dependency-version: 0.55.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump golang.org/x/net from 0.51.0 to 0.55.0 (#63)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-09T16:40:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df2af4753c0c05ba032f0592ca4eaff3d62bdc8d",
          "body": "Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0.\n- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: js-yaml\n  dependency-version: 4.2.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump js-yaml from 4.1.1 to 4.2.0 in /sdk/node (#61)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-21T19:16:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57d53607c5c176e6a97c8ed581fb87686034ecef",
          "body": "Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 7.5.8 to 7.6.3.\n- [Release notes](https://github.com/protobufjs/protobuf.js/releases)\n- [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.3/CHANGELOG.md)\n- [Commits](https://github.com/protobufjs/protobuf.js/\n[…]\nendency-version: 7.6.3\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump protobufjs from 7.5.8 to 7.6.3 in /sdk/node (#60)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-21T18:19:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "53abff230ca95a1ea5698250ab50f73db7648e54",
          "body": "…(#59)\n\nBumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.1.1 to 14.2.0.\n- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/markdown-it/markdown-it/compare/14.1.1...14.2.0)\n\n---\nupdated-dependencies:\n- dependency-na\n[…]\nit\n  dependency-version: 14.2.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump markdown-it from 14.1.1 to 14.2.0 in /sdk/node …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-21T18:19:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0d5136be391f8353e4fc5c32c5484fd2e7455167",
          "body": "* test(sdk/go): de-flake handshake test (poll instead of fixed sleep)\n\nFlush subscriptions before the worker starts (NATS core has no replay for the one-shot startup handshake) and poll until the handshake + a heartbeat arrive instead of a fixed 200ms sleep, which intermittently failed under CI load\n[…]\non PR #55.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Moe Worker <moe-worker@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Chore/cap ci fixes (#58)",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-06-06T17:18:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "063fcab37fac72456993a1eb7868054b30fd3edf",
          "body": "…4397e) (#57)\n\n* fix(sdk/go): Submit fails fast on canceled context (CRD-15)\n\nBoth (*Client).Submit and package-level Submit accepted a\ncontext.Context but never consulted it, so a caller whose context was\nalready canceled or past its deadline still published the job packet\nto sys.job.submit (bug sw\n[…]\nake sanitizeAgentName truncate by Unicode code point rather than\nUTF-16 code unit so a surrogate pair (e.g. emoji) is never split at the\nMAX_AGENT_NAME_LEN boundary, which would emit a lone surrogate.",
          "is_bot": false,
          "headline": "[bug] sdk/go: Submit fails fast on canceled context (CRD-15, task-e39…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-06-06T12:12:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e65a0a8392f552a8e14969a4efb4fe8d4b11a901",
          "body": "* test(sdk/go): de-flake handshake test (poll instead of fixed sleep)\n\nFlush subscriptions before the worker starts (NATS core has no replay for the one-shot startup handshake) and poll until the handshake + a heartbeat arrive instead of a fixed 200ms sleep, which intermittently failed under CI load\n[…]\non PR #55.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Moe Worker <moe-worker@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(cap): de-flake handshake test + changelog created_at note (#56)",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-06-01T22:04:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a838a2d50118683aaeb887cd820c7fe0b832aea3",
          "body": "Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 7.5.6 to 7.5.8.\n- [Release notes](https://github.com/protobufjs/protobuf.js/releases)\n- [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.5.8/CHANGELOG.md)\n- [Commits](https://github.com/protobufjs/protobuf.js/\n[…]\ned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Yaron <76696443+yaront1111@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump protobufjs from 7.5.6 to 7.5.8 in /sdk/node (#54)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-01T21:53:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45b5bffa3d4f0df55b0b3fc16b33c2b023e0241f",
          "body": "…ess builders (#55)\n\nParity with the Go SDK so heartbeat/progress payloads pass CAP ValidateBusPacket (trace_id + created_at were previously omitted). Adds Node + Python unit tests.\n\nCo-authored-by: Moe Worker <moe-worker@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sdk): stamp trace_id/created_at in Node & Python heartbeat/progr…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-06-01T21:34:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4b6404aa45b8fec63b64e042ceedd324ec226593",
          "body": "HeartbeatPayloadWithProgress now sets trace_id=workerID and created_at so helper-built heartbeats pass ValidateBusPacket. ProgressPayload and CancelPayload now use trace_id=jobID. This is not a [WIRE] change: it populates existing BusPacket fields without proto/schema or protocol_version changes.",
          "is_bot": false,
          "headline": "fix(sdk/go): stamp worker payload envelopes",
          "author_name": "Moe Worker",
          "author_login": null,
          "committed_at": "2026-05-30T21:32:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24cccbb0aebb63bef8558ae2d52590ec8fd9e19d",
          "body": "[WIRE] Append optional agent_name — Heartbeat field 19, Handshake field 7 —\na human-facing display label (e.g. \"Claude Code — Billing Bot\") for dashboard\nand audit attribution. Additive/append-only; existing clients stay\nwire-compatible (old clients send empty). It is NOT an authentication\nauthority\n[…]\n(trim, collapse\n  whitespace, drop control chars, bound 128) in all three SDKs\n- spec 05-heartbeats.md + 14-capability-negotiation.md; CHANGELOG [WIRE]\n\nCo-authored-by: yaront1111 <yaron111@gmail.com>",
          "is_bot": false,
          "headline": "feat: add agent_name display label to Heartbeat and Handshake (#53)",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-05-24T22:34:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8c026ad0c57ac1e0670639db6ac324882ff7585d",
          "body": "[WIRE] Append optional agent_name — Heartbeat field 19, Handshake field 7 —\na human-facing display label (e.g. \"Claude Code — Billing Bot\") for dashboard\nand audit attribution. Additive/append-only; existing clients stay\nwire-compatible (old clients send empty). It is NOT an authentication\nauthority\n[…]\n(trim, collapse\n  whitespace, drop control chars, bound 128) in all three SDKs\n- spec 05-heartbeats.md + 14-capability-negotiation.md; CHANGELOG [WIRE]\n\nCo-authored-by: yaront1111 <yaron111@gmail.com>",
          "is_bot": false,
          "headline": "feat: add agent_name display label to Heartbeat and Handshake (#52)",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-05-24T22:27:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e577bbcae0f1e9c5dc960ef16760825ea3a6a4ea",
          "body": "Dependency-only patch update. Includes @protobufjs/utf8 1.1.1 transitively; all required cap SDK checks passed.",
          "is_bot": true,
          "headline": "chore(deps): bump protobufjs to 7.5.6 in sdk/node",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-13T10:17:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85f63c62cae2f6dae40cda8fa38f0cefa9ef869e",
          "body": "* feat(sdk-go): add agent.go Register/Lookup/SetScope wrappers (cordum task-cc03a68d)\n\nSource-of-truth Go SDK wrappers for the Cordum control-plane agent\nendpoints. Closes the phase-3 gap noted in\ncordum/core/llmchat/bootstrap.go where the chat-assistant bootstrap\nfalls back to MCP `cordum_register_\n[…]\ne(deps): bump go directive to 1.25.10 (clears govulncheck GO-2026-4971)\n\n---------\n\nCo-authored-by: yaront1111 <yaron111@gmail.com>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Cap merge train 20260509 (#49)",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-05-10T19:39:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5d4b5d48006157db7980a232d2ffecb1a2af09e1",
          "body": "Close the \"Agent.Start() has no handshake\" gap: introduce handshake.go +\nrenew.go + session_attach.go under sdk/go/runtime, wire into runtime.go,\nand document the surface in README_HANDSHAKE.md. Adds strategy epic notes\n(CAP_STRATEGY_EPICS.*) for the multi-phase rollout.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sdk/go): SDK handshake + session renew + attach primitives",
          "author_name": "yaront1111",
          "author_login": null,
          "committed_at": "2026-04-22T10:47:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bbbcb84772ad4a76887b56f16068706191287d97",
          "body": "…c (#43)\n\nAdmin-squash. All 10 checks green. Closes 4 CodeQL advisories.",
          "is_bot": false,
          "headline": "ci: pin actions to commit SHAs + add explicit permissions to wiki-syn…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-04-21T10:13:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e45e6d74de76b1de7fa09ea5510a1d8445b9035",
          "body": "All 4 SDK gates green. The dual FAILURE,SUCCESS pattern on the CodeQL analyze jobs confirms the fix works: FAILURE is from the legacy default-setup run (being replaced), SUCCESS is from the new workflow with build-mode: none. After this merge, default setup auto-disables and the noise goes away.",
          "is_bot": false,
          "headline": "ci(codeql): switch java-kotlin to build-mode: none",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-04-21T09:05:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ff514114169f04890218713b0d2c9bc7088c8d6",
          "body": "All 4 SDK gates green (Go SDK, Node SDK, Python SDK, Python Guard SDK). The only FAILED check (Analyze (java-kotlin) from the default setup) is the exact noise this PR removes — CAP's default CodeQL setup Java analyzer with no Gradle wrapper. Post-merge, the new workflow auto-disables default setup and the noise goes away.",
          "is_bot": false,
          "headline": "ci: narrow CodeQL matrix to languages the repo actually ships",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-04-21T08:11:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5f993e58b7c7b5719b4feae633038050cf2f5ff",
          "body": "Admin-merge because the only still-running check (Analyze (rust)) is cosmetic — CAP has no Rust source; CodeQL is scanning nothing. All real checks green: Go SDK, Node SDK, Python SDK, Python Guard SDK, CodeQL analyzers for go/js/python/java/etc. Follow-up PR will narrow the CodeQL language matrix to drop the empty-scan noise.",
          "is_bot": false,
          "headline": "ci: bump Go directive to 1.25.9 to absorb stdlib vuln fixes",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-04-21T08:04:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "418890003e58514a8083db400f20e1522f9d0d5f",
          "body": "Merging via admin override: the red Go SDK check is an unrelated environmental failure (govulncheck against Go 1.25.8 stdlib; fix is in 1.25.9). The PR diff only touches sdk/node/package-lock.json; Node SDK, Python SDK, Python Guard SDK, and CodeQL all green. Follow-up PR bumps the Go runner to unblock future merges.",
          "is_bot": true,
          "headline": "chore(deps): bump protobufjs 7.5.4 → 7.5.5 in /sdk/node",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-21T07:55:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4185ff342218bfebb28dd7d8c1da19e5bb5e6efa",
          "body": "[WIRE] Add auth_token (field 18) to Heartbeat for worker attestation.\n[WIRE] Add ready_topics (field 6) to Handshake for readiness declaration.\n\nAgent.Start() now publishes handshake automatically in all 3 SDKs\n(Go, Python, Node). This gives all 36+ existing workers handshake\nat startup with zero co\n[…]\ng a gap where no worker\nin the ecosystem was sending handshake.\n\nAdded publishHandshake() to Python and Node SDKs (previously Go-only).\nUpdated heartbeat builders to accept auth_token across all SDKs.",
          "is_bot": false,
          "headline": "feat: v2.9.0 — worker attestation, readiness, and automatic handshake",
          "author_name": "yaront1111",
          "author_login": null,
          "committed_at": "2026-04-07T12:00:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7b5242941e8d5820e9e76bb3cab091f4d1040a82",
          "body": null,
          "is_bot": false,
          "headline": "fix: install pytest for Python SDK CI tests",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-03-30T12:46:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01f85dcf870908a67e9f3630d01e23f63609e466",
          "body": null,
          "is_bot": false,
          "headline": "fix: upgrade Go to 1.25.8 and enforce govulncheck in CI",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-03-30T12:42:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a26474d5465e75e0cb3ccff249e3fe07fb534a6",
          "body": "…gnature (#38)\n\ntest_runtime.py and test_middleware.py each define a local MockNATS\nwith subscribe(self, subject, queue, cb) — queue as required positional.\nThe runtime calls subscribe(subject, cb=callback) without queue for\ndirect worker subscriptions, causing TypeError.\n\nFix: make queue and cb optional kwargs matching the real nats-py API\nand the canonical cap.testing.MockNATS.\n\n80 passed, 2 skipped (was 74 passed, 6 failed).\n\nCo-authored-by: Your Name <you@example.com>",
          "is_bot": false,
          "headline": "fix(python-sdk): align test MockNATS.subscribe() with runtime call si…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-03-29T08:46:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7bbddd9a154c5055c5d0223ae001bc459cbe846d",
          "body": "…version\n\n* chore(deps): bump github.com/nats-io/nats-server/v2\n\nBumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.12.4 to 2.12.6.\n- [Release notes](https://github.com/nats-io/nats-server/releases)\n- [Changelog](https://github.com/nats-io/nats-server/blob/main/\n[…]\nom>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Yaron <76696443+yaront1111@users.noreply.github.com>\nCo-authored-by: Your Name <you@example.com>",
          "is_bot": true,
          "headline": "chore(deps): bump nats-server/v2 to 2.12.6 + fix python-sdk protobuf …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-28T23:53:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d9bb08da63c84c92f39d74501d024a33d62b9c9f",
          "body": "Add input_content, input_content_type, and input_size_bytes fields\nto PolicyCheckRequest for pre-execution content-level policy scanning.",
          "is_bot": false,
          "headline": "feat(proto): add input content fields to PolicyCheckRequest",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-03-26T20:54:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f7ec217c905d93214bb02134dba613c418cb516",
          "body": "…riptions",
          "is_bot": false,
          "headline": "fix: MockNATS.subscribe queue param optional for direct subject subsc…",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-03-24T08:27:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3425a6976426634a2c0090237cf50a6a7b166bb7",
          "body": "- Go SDK: fix ValidateRedisURL (url.Parse not substring), log swallowed\n  errors in Close/FlushTimeout, add godoc to all exports, make defaults\n  configurable via Option pattern\n- Python SDK: deduplicate DEFAULT_PROTOCOL_VERSION to constants.py,\n  extract verify_packet_signature to verify.py, unify \n[…]\nx bare exceptions\n- Node SDK: add try-catch on signature verification\n- Protobuf: add field validation bounds on repeated fields and budgets\n- Examples: remove fake API key default from crewai example",
          "is_bot": false,
          "headline": "feat: SDK security hardening + code quality (v2.8.2)",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-03-24T08:20:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "919fa37a9d62fd5d88dffa6bb8545694ed374c3e",
          "body": "Add redis_ssl_context_from_env() matching Go SDK's RedisTLSConfigFromEnv pattern,\nTLS-aware RedisBlobStore, and direct worker subject subscription for scheduler dispatch.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(python-sdk): add Redis TLS support and direct worker dispatch",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-03-23T15:27:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a2985ea27d414a5288a9acce334722a403722b96",
          "body": "PHP, .NET, Ruby, and Rust SDKs incorrectly declared MIT license.\nAll CAP SDKs must be Apache-2.0 to match the root LICENSE and\nGOVERNANCE.md. Go, Node, and Python were already correct.",
          "is_bot": false,
          "headline": "fix: align SDK licenses to Apache-2.0",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-03-22T20:52:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9f773e81be6587b083fa02a3cba75085d6a1c18",
          "body": "ci: make govulncheck continue-on-error for stdlib vulns",
          "is_bot": false,
          "headline": "Merge pull request #36 from cordum-io/fix/ci-govulncheck-stdlib",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-03-19T10:23:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3c8bd3da14a1575be185df0da49c94fe1cdf1b2",
          "body": "GO-2026-4602 and GO-2026-4601 are Go stdlib vulnerabilities that\nrequire go1.25.8 to fix. Since CAP targets go1.24, these failures\nare outside our control. Mark the step continue-on-error until we\ncan upgrade.",
          "is_bot": false,
          "headline": "ci: make govulncheck continue-on-error for stdlib vulns",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-03-19T10:23:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63db23e8c762d8c02d60465de7ab72be1693fbda",
          "body": "…lang.org/grpc-1.79.3\n\nchore(deps): bump google.golang.org/grpc from 1.64.1 to 1.79.3",
          "is_bot": false,
          "headline": "Merge pull request #34 from cordum-io/dependabot/go_modules/google.go…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-03-19T10:10:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ad23d7cde7b414f4c21dd43cd9b2765d24d7181",
          "body": "Community launch kit: governance, examples, playground & blog posts",
          "is_bot": false,
          "headline": "Merge pull request #35 from cordum-io/feat/community-launch-kit",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-03-19T10:09:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67f6f3f8b49cc07a46e8460609842d584c667691",
          "body": "…ound, good-first-issues\n\nAdd community-facing materials for the CAP open-source launch:\n\n- GOVERNANCE.md with project governance model\n- Framework integration examples (AutoGen, CrewAI, LangChain)\n- Launch-kit blog posts (intro, MCP comparison, LangChain governance)\n- Good-first-issue templates for\n[…]\nDocker-based playground for trying CAP locally\n- API reference docs, updated README and CONTRIBUTING guide\n- Issue template for good-first-issues\n- .gitignore updates for .NET and Rust build artifacts",
          "is_bot": false,
          "headline": "feat: community launch kit — governance, examples, blog posts, playgr…",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-03-19T10:06:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "889ae326d998ea043b74494c1a4131957b1c7c1b",
          "body": "Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.64.1 to 1.79.3.\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.64.1...v1.79.3)\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.79.3\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump google.golang.org/grpc from 1.64.1 to 1.79.3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-19T00:48:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "545cb1382d4bcd553235affa35638a5a062a8c6b",
          "body": "…e/minimatch-9.0.9\n\nchore(deps): bump minimatch from 9.0.5 to 9.0.9 in /sdk/node",
          "is_bot": false,
          "headline": "Merge pull request #33 from cordum-io/dependabot/npm_and_yarn/sdk/nod…",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-03-18T13:30:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87dd3ec763351c46394ad164d02c25137c230093",
          "body": "Bumps [minimatch](https://github.com/isaacs/minimatch) from 9.0.5 to 9.0.9.\n- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)\n- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.5...v9.0.9)\n\n---\nupdated-dependencies:\n- dependency-name: minimatch\n  dependency-version: 9.0.9\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump minimatch from 9.0.5 to 9.0.9 in /sdk/node",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-01T21:01:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67e62f6ba0e0a02db5f891a048d9733e371e961e",
          "body": "* feat(sdk/go): add TLS helpers, ManagedWorker, and bus helpers\n\nAdd generic CAP functionality previously locked in Cordum's sdk/runtime wrapper:\n\n- sdk/go/tls.go: NATSTLSConfigFromEnv(), RedisTLSConfigFromEnv() for\n  building *tls.Config from NATS_TLS_*/REDIS_TLS_* environment variables\n- sdk/go/wo\n[…]\nS connection\n- Test: replace os.Unsetenv with t.Setenv for proper cleanup\n- Test: use fmt.Sprintf for job IDs instead of fragile rune arithmetic\n\n---------\n\nCo-authored-by: Your Name <you@example.com>",
          "is_bot": false,
          "headline": "feat(sdk/go): add TLS helpers, ManagedWorker, and bus helpers (#31)",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-02-23T18:10:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1ba757135e6d7a14657815ad6af8d907d8f3f0c5",
          "body": "Add generic CAP functionality previously locked in Cordum's sdk/runtime wrapper:\n\n- sdk/go/tls.go: NATSTLSConfigFromEnv(), RedisTLSConfigFromEnv() for\n  building *tls.Config from NATS_TLS_*/REDIS_TLS_* environment variables\n- sdk/go/worker/helpers.go: DirectSubject(), Publisher interface,\n  PublishC\n[…]\nb semaphore, and graceful shutdown\n- sdk/go/runtime: NewRedisBlobStoreWithTLS/WithPing, PingRedis,\n  ValidateRedisURL\n\nFull test coverage for all new code.\n\nCo-authored-by: Your Name <you@example.com>",
          "is_bot": false,
          "headline": "feat(sdk/go): add TLS helpers, ManagedWorker, and bus helpers (#30)",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-02-23T19:23:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5c4bdb7bc93cee7d7e68d15c2b95823bf2f341ee",
          "body": "Bumps [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) from 3.25.3 to 3.25.5.\n- [Release notes](https://github.com/protocolbuffers/protobuf/releases)\n- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.25.3...v3.25.5)\n\n---\nupdated-dependencies:\n- depend\n[…]\nndency-version: 3.25.5\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump com.google.protobuf:protobuf-java in /sdk/java (#29)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-21T21:14:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1d1ee49daa0e11b1cc5ab812f09f12a577f6fd81",
          "body": "* feat: SDK feature parity & language coverage — scaffolding + docs\n\nAdd heartbeat helpers (Python, Node), progress/cancel emission helpers\n(Go, Python, Node), C++ SDK hardening (signing, codec, runtime,\nmiddleware, metrics), and full SDK scaffolding for Java, Rust, C#/.NET,\nPHP, and Ruby. Update do\n[…]\nstart, usage, and API reference\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Your Name <you@example.com>\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: SDK feature parity & language coverage (#28)",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-02-21T19:15:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a87bef615a8711a0452f1c02a7874c46ea99f784",
          "body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump SDK versions to 2.5.3",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T20:29:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f312d26307e6ba15e7e04725576dbc2dd9c7a635",
          "body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump SDK versions to 2.0.20",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T17:06:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "833d9bc89106e421ea9f939a2ae6f2bfe051936c",
          "body": "feat: SDK Developer Experience & Onboarding (Epic)",
          "is_bot": false,
          "headline": "Merge pull request #27 from cordum-io/feat/sdk-dx-onboarding",
          "author_name": "Yaron",
          "author_login": "yaront1111",
          "committed_at": "2026-02-17T20:29:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d433c10f6e174ed188eda0284bd54f06bfef08f5",
          "body": "- Python SDK: convert test_metrics.py from pytest to unittest (CI uses unittest)\n- Guard SDK: add missing _cache attribute in test_on_error.py mock factory\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: resolve CI failures in Python SDK and Guard SDK tests",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T17:20:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6654945f9ae83e674e5cb14f0e38c05064179d75",
          "body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump SDK versions (Node/Python 2.0.19, Guard 0.1.1)",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T21:08:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "706beec528cd8e28167c85e667dec6cbdd7e0d34",
          "body": null,
          "is_bot": false,
          "headline": "merge: Guard SDK fail-open/closed config (task-361f64b2)",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T20:00:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "207178d84b2c952eabd8f84d2c04829a92b93b8c",
          "body": null,
          "is_bot": false,
          "headline": "merge: Guard SDK policy caching (task-1d3e353b)",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T18:13:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92d17d0c04f8d8b25ac36b95074b3f3b0bf8814c",
          "body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(guard): add Caching section to README",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T21:17:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d091bfa0ba8b1307081a4bf8903abd4191d4e92d",
          "body": null,
          "is_bot": false,
          "headline": "merge: Guard SDK mock mode (task-e5810855)",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T18:26:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4e0a449f263fdfd49180c06a64dd1c3006e367f",
          "body": null,
          "is_bot": false,
          "headline": "merge: troubleshooting guide (task-8ab83e01)",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T18:54:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0be39efa0acf7b5bd7d589914d4e37249b19d7af",
          "body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: link troubleshooting guide from root README",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T21:37:35Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d7723b7627856165f04343d8ad7b636e297a9093",
          "body": null,
          "is_bot": false,
          "headline": "merge: observability helpers (task-b175c426)",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T20:48:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8e958bb641dd029f3a064bbcb6628a2d74f851b",
          "body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: add metrics hook tests and document observability in all SDKs",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T21:31:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ad4ac70ce33aee4abdc3c72b9433e02d4a1c27e1",
          "body": null,
          "is_bot": false,
          "headline": "merge: middleware pattern (task-e92a85f1)",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T20:10:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35ea106c6ec80908a9ab334f46544e3e604aa1ea",
          "body": "Covers NATS/Redis connection, signing, proto errors, stuck jobs,\nimport/build issues, heartbeats, and envelope decoding. Each entry\nincludes symptoms, cause, and solution with SDK-specific commands.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add troubleshooting guide with 10 common issues",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T19:35:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "97b20eb135aa5801311750e5a2525e52106f9240",
          "body": null,
          "is_bot": false,
          "headline": "merge: API reference docs generation (task-a49b9be5)",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T19:22:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d5518ecc721108cbe0511817827533bcccaf0e9",
          "body": "Call OnJobReceived when a job arrives, OnJobCompleted on success,\nOnJobFailed on failure across Go runtime/worker, Node runtime/worker,\nand Python runtime/worker. Move MetricsHook to shared capsdk package\nso both Go runtime and worker can use the same interface.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: wire MetricsHook into all SDK dispatch chains",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T19:09:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6a1d3fa3cffac73177bb630ff31e241e5708cf67",
          "body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(guard): add Testing section for MockCordumClient to README",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T18:48:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9b94b2bb57728cd238ab53720b0b5c44079b3ff1",
          "body": "Covers default allow/deny, configured responses, require_approval\nflow, throttle duration, @guard decorator integration, call_log\nrecording, and context manager support.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(guard): add 17 tests for MockCordumClient",
          "author_name": "Your Name",
          "author_login": null,
          "committed_at": "2026-02-17T20:05:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        }
      ],
      "releases_count": 37,
      "commits_last_year": 245,
      "latest_release_at": "2026-07-22T20:01:47Z",
      "latest_release_tag": "v2.17.0",
      "releases_from_tags": false,
      "days_since_last_push": 7,
      "active_weeks_last_year": 21,
      "days_since_latest_release": 7,
      "mean_days_between_releases": 10.3
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 100,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/cordum-io/cap/v2",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/cordum-io/cap/v2",
          "is_deprecated": false,
          "latest_version": "v2.17.0",
          "repository_url": "https://github.com/cordum-io/cap",
          "versions_count": 51,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-22T15:23:14Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 7
        }
      ]
    },
    "popularity": {
      "forks": 3,
      "stars": 8,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2026-03-03",
            "count": 1
          },
          {
            "date": "2026-04-27",
            "count": 1
          },
          {
            "date": "2026-04-29",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 3,
        "total_forks": 3
      },
      "star_history": null,
      "open_issues_and_prs": 2
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [
        "proto/cordum/agent/v1/alert.proto",
        "proto/cordum/agent/v1/buspacket.proto",
        "proto/cordum/agent/v1/handshake.proto",
        "proto/cordum/agent/v1/heartbeat.proto",
        "proto/cordum/agent/v1/job.proto",
        "proto/cordum/agent/v1/policy.proto",
        "proto/cordum/agent/v1/safety.proto"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [
        "sdk/node/tsconfig.json",
        "sdk/python/cap/py.typed"
      ],
      "toolchain_manifests": [
        "go.mod",
        "sdk/dotnet/src/Cordum.Cap/Cordum.Cap.csproj",
        "sdk/dotnet/test/Cordum.Cap.Tests/Cordum.Cap.Tests.csproj",
        "sdk/java/build.gradle",
        "sdk/java/pom.xml",
        "sdk/rust/Cargo.toml"
      ],
      "largest_source_bytes": 1102362,
      "source_files_sampled": 709,
      "oversized_source_files": 17,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "2.0.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3jxr-9vmj-r5cp",
              "GHSA-f886-m6hf-6m8v",
              "GHSA-mh99-v99m-4gvg"
            ],
            "fixed_version": "5.0.8",
            "advisory_count": 3,
            "oldest_advisory_days": 125
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "2.1.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-mh99-v99m-4gvg"
            ],
            "fixed_version": "5.0.8",
            "advisory_count": 1,
            "oldest_advisory_days": 5
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.2.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-52cp-r559-cp3m"
            ],
            "fixed_version": "4.3.0",
            "advisory_count": 1,
            "oldest_advisory_days": 9
          },
          {
            "name": "serialize-javascript",
            "direct": false,
            "version": "6.0.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-5c6j-r48x-rmvq",
              "GHSA-qj8w-gfj5-8c6v"
            ],
            "fixed_version": "7.0.5",
            "advisory_count": 2,
            "oldest_advisory_days": 152
          },
          {
            "name": "protobufjs",
            "direct": false,
            "version": "7.6.3",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-j3f2-48v5-ccww"
            ],
            "fixed_version": "8.6.6",
            "advisory_count": 1,
            "oldest_advisory_days": 9
          },
          {
            "name": "setuptools",
            "direct": false,
            "version": "82.0.1",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 6.1,
            "advisory_ids": [
              "GHSA-h35f-9h28-mq5c",
              "PYSEC-2026-3447"
            ],
            "fixed_version": "83.0.0",
            "advisory_count": 2,
            "oldest_advisory_days": 21
          },
          {
            "name": "yaml",
            "direct": false,
            "version": "2.8.2",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 4.3,
            "advisory_ids": [
              "GHSA-48c2-rrv3-qjmp"
            ],
            "fixed_version": "2.8.3",
            "advisory_count": 1,
            "oldest_advisory_days": 126
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.4",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5841"
            ],
            "fixed_version": "1.18.7",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.52.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 22
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 15
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 15
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 4,
          "unknown": 4,
          "moderate": 3
        },
        "advisory_count": 15,
        "affected_count": 11,
        "assessed_count": 263,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 36,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/nats-io/nats-server/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.12.6"
        },
        {
          "name": "github.com/nats-io/nats.go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.49.0"
        },
        {
          "name": "github.com/redis/go-redis/v9",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v9.7.3"
        },
        {
          "name": "google.golang.org/grpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.82.1"
        },
        {
          "name": "google.golang.org/protobuf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/nats-io/nats-server/v2",
            "direct": true,
            "version": "v2.12.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nats-io/nats.go",
            "direct": true,
            "version": "v1.49.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/redis/go-redis/v9",
            "direct": true,
            "version": "v9.7.3",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": true,
            "version": "v1.82.1",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": true,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "async-nats",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "ecdsa",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "futures",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "p256",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "prost",
            "direct": false,
            "version": "0.13.5",
            "ecosystem": "crates"
          },
          {
            "name": "prost-build",
            "direct": false,
            "version": "0.13.5",
            "ecosystem": "crates"
          },
          {
            "name": "prost-types",
            "direct": false,
            "version": "0.13.5",
            "ecosystem": "crates"
          },
          {
            "name": "protoc-bin-vendored",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "rand_core",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "thiserror",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tokio",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tracing",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "github.com/antithesishq/antithesis-sdk-go",
            "direct": false,
            "version": "v0.6.0-default-no-op",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dgryski/go-rendezvous",
            "direct": false,
            "version": "v0.0.0-20200823014737-9f7001d12a5f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-tpm",
            "direct": false,
            "version": "v0.9.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/minio/highwayhash",
            "direct": false,
            "version": "v1.0.4-0.20251030100505-070ab1a87a76",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nats-io/jwt/v2",
            "direct": false,
            "version": "v2.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nats-io/nkeys",
            "direct": false,
            "version": "v0.4.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nats-io/nuid",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.52.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260414002931-afd174a4e478",
            "ecosystem": "go"
          },
          {
            "name": "com.google.protobuf:protobuf-java",
            "direct": false,
            "version": "3.25.5",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.protobuf:protobuf-java-util",
            "direct": false,
            "version": "3.25.5",
            "ecosystem": "maven"
          },
          {
            "name": "io.grpc:grpc-protobuf",
            "direct": false,
            "version": "1.62.2",
            "ecosystem": "maven"
          },
          {
            "name": "io.grpc:grpc-stub",
            "direct": false,
            "version": "1.62.2",
            "ecosystem": "maven"
          },
          {
            "name": "io.nats:jnats",
            "direct": false,
            "version": "2.19.1",
            "ecosystem": "maven"
          },
          {
            "name": "javax.annotation:javax.annotation-api",
            "direct": false,
            "version": "1.3.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-surefire-plugin",
            "direct": false,
            "version": "3.2.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter",
            "direct": false,
            "version": "5.10.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.xolstice.maven.plugins:protobuf-maven-plugin",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "maven"
          },
          {
            "name": "@babel/helper-string-parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-validator-identifier",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/types",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@cspotcode/source-map-support",
            "direct": false,
            "version": "0.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "@gerrit0/mini-shiki",
            "direct": false,
            "version": "3.22.0",
            "ecosystem": "npm"
          },
          {
            "name": "@isaacs/cliui",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@jsdoc/salty",
            "direct": false,
            "version": "0.2.12",
            "ecosystem": "npm"
          },
          {
            "name": "@pkgjs/parseargs",
            "direct": false,
            "version": "0.11.0",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/aspromise",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/base64",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/codegen",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/eventemitter",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/fetch",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/float",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/inquire",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/path",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/pool",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/utf8",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@protobufjs/utf8",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@publint/pack",
            "direct": false,
            "version": "0.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@redis/bloom",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@redis/client",
            "direct": false,
            "version": "1.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "@redis/graph",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@redis/json",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "@redis/search",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@redis/time-series",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/engine-oniguruma",
            "direct": false,
            "version": "3.22.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/langs",
            "direct": false,
            "version": "3.22.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/themes",
            "direct": false,
            "version": "3.22.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/types",
            "direct": false,
            "version": "3.22.0",
            "ecosystem": "npm"
          },
          {
            "name": "@shikijs/vscode-textmate",
            "direct": false,
            "version": "10.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@tsconfig/node10",
            "direct": false,
            "version": "1.0.12",
            "ecosystem": "npm"
          },
          {
            "name": "@tsconfig/node12",
            "direct": false,
            "version": "1.0.11",
            "ecosystem": "npm"
          },
          {
            "name": "@tsconfig/node14",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@tsconfig/node16",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/chai",
            "direct": false,
            "version": "4.3.20",
            "ecosystem": "npm"
          },
          {
            "name": "@types/google-protobuf",
            "direct": false,
            "version": "3.15.12",
            "ecosystem": "npm"
          },
          {
            "name": "@types/hast",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/linkify-it",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/markdown-it",
            "direct": false,
            "version": "14.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/mdurl",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/mocha",
            "direct": false,
            "version": "10.0.10",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "18.19.130",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "26.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/unist",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "acorn",
            "direct": false,
            "version": "8.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn",
            "direct": false,
            "version": "8.17.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn-jsx",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "acorn-walk",
            "direct": false,
            "version": "8.3.4",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "arg",
            "direct": false,
            "version": "4.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "assertion-error",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "bluebird",
            "direct": false,
            "version": "3.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "browser-stdout",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "camelcase",
            "direct": false,
            "version": "6.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "catharsis",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "chai",
            "direct": false,
            "version": "4.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "check-error",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "chokidar",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "cliui",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "cluster-key-slot",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "color-convert",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "color-name",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "create-require",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "decamelize",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "deep-eql",
            "direct": false,
            "version": "4.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "deep-is",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "diff",
            "direct": false,
            "version": "8.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "eastasianwidth",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "9.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "entities",
            "direct": false,
            "version": "4.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "escalade",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "escape-string-regexp",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "escape-string-regexp",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "escodegen",
            "direct": false,
            "version": "1.14.3",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "3.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "espree",
            "direct": false,
            "version": "9.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "esprima",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "estraverse",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "estraverse",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "esutils",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-levenshtein",
            "direct": false,
            "version": "2.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "find-up",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "flat",
            "direct": false,
            "version": "5.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "foreground-child",
            "direct": false,
            "version": "3.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "fs.realpath",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "generic-pool",
            "direct": false,
            "version": "3.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-caller-file",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "get-func-name",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "10.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "8.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "google-protobuf",
            "direct": false,
            "version": "3.21.4",
            "ecosystem": "npm"
          },
          {
            "name": "graceful-fs",
            "direct": false,
            "version": "4.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "has-flag",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "he",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "inflight",
            "direct": false,
            "version": "1.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-path-inside",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "is-plain-obj",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-unicode-supported",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "jackspeak",
            "direct": false,
            "version": "3.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "js2xmlparser",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "jsdoc",
            "direct": false,
            "version": "4.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "json5",
            "direct": false,
            "version": "2.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "klaw",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "levn",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "linkify-it",
            "direct": false,
            "version": "5.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "locate-path",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "lodash",
            "direct": false,
            "version": "4.18.1",
            "ecosystem": "npm"
          },
          {
            "name": "log-symbols",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "long",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "loupe",
            "direct": false,
            "version": "2.3.7",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "10.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "lunr",
            "direct": false,
            "version": "2.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "make-error",
            "direct": false,
            "version": "1.3.6",
            "ecosystem": "npm"
          },
          {
            "name": "markdown-it",
            "direct": false,
            "version": "14.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "markdown-it",
            "direct": false,
            "version": "14.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "markdown-it-anchor",
            "direct": false,
            "version": "8.6.7",
            "ecosystem": "npm"
          },
          {
            "name": "marked",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "mdurl",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "5.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "9.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "minimist",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "minipass",
            "direct": false,
            "version": "7.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "mkdirp",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "mocha",
            "direct": false,
            "version": "11.7.5",
            "ecosystem": "npm"
          },
          {
            "name": "mri",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "nats",
            "direct": false,
            "version": "2.29.3",
            "ecosystem": "npm"
          },
          {
            "name": "nkeys.js",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "optionator",
            "direct": false,
            "version": "0.8.3",
            "ecosystem": "npm"
          },
          {
            "name": "p-limit",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-locate",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "package-json-from-dist",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "package-manager-detector",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-exists",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-scurry",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "pathval",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "prelude-ls",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "protobufjs",
            "direct": false,
            "version": "7.6.3",
            "ecosystem": "npm"
          },
          {
            "name": "protobufjs",
            "direct": false,
            "version": "7.6.5",
            "ecosystem": "npm"
          },
          {
            "name": "protobufjs-cli",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "publint",
            "direct": false,
            "version": "0.3.21",
            "ecosystem": "npm"
          },
          {
            "name": "punycode.js",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "randombytes",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "readdirp",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "redis",
            "direct": false,
            "version": "4.7.1",
            "ecosystem": "npm"
          },
          {
            "name": "require-directory",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "requizzle",
            "direct": false,
            "version": "0.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "sade",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "safe-buffer",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.8.5",
            "ecosystem": "npm"
          },
          {
            "name": "serialize-javascript",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "source-map",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "4.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "7.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "strip-bom",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-json-comments",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "8.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "tmp",
            "direct": false,
            "version": "0.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "ts-mocha",
            "direct": false,
            "version": "11.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "ts-node",
            "direct": false,
            "version": "10.9.2",
            "ecosystem": "npm"
          },
          {
            "name": "ts-protoc-gen",
            "direct": false,
            "version": "0.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "tsconfig-paths",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "tweetnacl",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "type-check",
            "direct": false,
            "version": "0.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "type-detect",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "typedoc",
            "direct": false,
            "version": "0.28.17",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "5.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "uc.micro",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "uglify-js",
            "direct": false,
            "version": "3.19.3",
            "ecosystem": "npm"
          },
          {
            "name": "underscore",
            "direct": false,
            "version": "1.13.8",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "5.26.5",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "v8-compile-cache-lib",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "word-wrap",
            "direct": false,
            "version": "1.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "workerpool",
            "direct": false,
            "version": "9.3.4",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "8.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "xmlcreate",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "y18n",
            "direct": false,
            "version": "5.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "yallist",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "yaml",
            "direct": false,
            "version": "2.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "yargs",
            "direct": false,
            "version": "17.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "21.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-unparser",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "yn",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "yocto-queue",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": false,
            "version": "3.25.76",
            "ecosystem": "npm"
          },
          {
            "name": "Google.Protobuf",
            "direct": false,
            "version": "3.25.3",
            "ecosystem": "nuget"
          },
          {
            "name": "Grpc.Tools",
            "direct": false,
            "version": "2.62.0",
            "ecosystem": "nuget"
          },
          {
            "name": "Microsoft.NET.Test.Sdk",
            "direct": false,
            "version": "17.9.0",
            "ecosystem": "nuget"
          },
          {
            "name": "NATS.Net",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "nuget"
          },
          {
            "name": "xunit",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "nuget"
          },
          {
            "name": "xunit.runner.visualstudio",
            "direct": false,
            "version": "2.5.7",
            "ecosystem": "nuget"
          },
          {
            "name": "basis-company/nats",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "ext-openssl",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "google/protobuf",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "php",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "phpunit/phpunit",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "build",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "cordum-guard",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "crewai",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "cryptography",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio",
            "direct": false,
            "version": "1.76.0",
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio-tools",
            "direct": false,
            "version": "1.76.0",
            "ecosystem": "pypi"
          },
          {
            "name": "httpx",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-core",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "llama-index-core",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "mypy",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "nats-py",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "packaging",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pdoc",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "protobuf",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "protobuf",
            "direct": false,
            "version": "6.33.5",
            "ecosystem": "pypi"
          },
          {
            "name": "pyautogen",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pytest",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-asyncio",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "redis",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "respx",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "setuptools",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "setuptools",
            "direct": false,
            "version": "82.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "twine",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "wheel",
            "direct": false,
            "version": "0.47.0",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 299,
        "direct_count": 5,
        "indirect_count": 294
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 67,
        "open_issues": 1,
        "closed_ratio": 0.9,
        "closed_issues": 9,
        "closed_unmerged_prs": 9
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "yaront1111",
          "commits": 42,
          "avatar_url": "https://avatars.githubusercontent.com/u/76696443?v=4"
        },
        {
          "type": "User",
          "login": "bigboycoder1",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/261812014?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.955
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "codeql.yml",
        "community-triage.yml",
        "governance.yml",
        "onboarding.yml",
        "playground.yml",
        "proto-codegen.yml",
        "publish-go.yml",
        "publish-node.yml",
        "publish-python-guard.yml",
        "publish-python.yml",
        "registry-verify.yml",
        "release-tag-validate.yml",
        "release-truth.yml",
        "sdk-gates.yml",
        "wiki-sync.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": true,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 8,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 2/26 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 2,
            "reason": "dependency not pinned by hash detected -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 8,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "14 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "e580c670d54a7563c749835c7dd09d81f116c823",
        "ran_at": "2026-07-30T12:46:51Z",
        "aggregate_score": 6.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-30T10:34:16Z",
      "oldest_open_prs": [
        {
          "number": 90,
          "created_at": "2026-07-22T20:16:59Z",
          "last_comment_at": "2026-07-22T20:17:22Z",
          "last_comment_author": "coderabbitai"
        }
      ],
      "last_merged_pr_at": "2026-07-22T15:20:06Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 62,
          "created_at": "2026-06-22T21:39:55Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/cordum-io/cap",
    "host": "github.com",
    "name": "cap",
    "owner": "cordum-io"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 68,
      "inputs": {
        "security": 74,
        "vitality": 87,
        "community": 51,
        "governance": 54,
        "engineering": 76
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 87,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "commits_last_year": 245,
              "human_commit_share": 0.82,
              "days_since_last_push": 7,
              "active_weeks_last_year": 21
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 7 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "21/52 weeks with commits",
                "points": 14.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 21
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "245 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 245
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 37,
              "latest_release_tag": "v2.17.0",
              "releases_from_tags": false,
              "days_since_latest_release": 7,
              "mean_days_between_releases": 10.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "37 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 37
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 7 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~10.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 10.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 7,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 7 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 51,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 16,
            "inputs": {
              "forks": 3,
              "stars": 8,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "8 stars",
                "points": 13.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "3 forks",
                "points": 2.5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 13,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.955
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 96% of commits",
                "points": 1,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 96
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "merged_prs": 67,
              "open_issues": 1,
              "closed_issues": 9,
              "issue_closed_ratio": 0.9,
              "closed_unmerged_prs": 9
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "90% of issues closed",
                "points": 42.1,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 90
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "67/76 decided PRs merged",
                "points": 33.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 67,
                      "decided": 76
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 2/26 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 45,
            "inputs": {
              "followers": 15,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "cordum-io",
              "public_repos": 4,
              "account_age_days": 236
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "15 followers of cordum-io",
                "points": 8.7,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 15,
                      "login": "cordum-io"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "4 public repos, account ~0 yr old",
                "points": 6.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 4
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/cordum-io/cap/v2"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 7
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 7 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "51 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 51
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 76,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "16 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": "https://github.com/cordum-io/cap",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://github.com/cordum-io/cap",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 74,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 67,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 6.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 2/26 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "14 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 263 resolved dependencies against OSV; 36 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 263
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 36
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 15,
              "affected_packages": 11,
              "assessed_packages": 263,
              "unassessed_packages": 36,
              "affected_by_severity": "high 4, moderate 3, unknown 4",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 263,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 69,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "82 of 82 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 82,
                      "sampled": 82
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "package-lock.json"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "sdk/node/tsconfig.json",
                "sdk/python/cap/py.typed"
              ],
              "agent_commit_share": 0.18,
              "toolchain_manifests": [
                "go.mod",
                "sdk/dotnet/src/Cordum.Cap/Cordum.Cap.csproj",
                "sdk/dotnet/test/Cordum.Cap.Tests/Cordum.Cap.Tests.csproj",
                "sdk/java/build.gradle",
                "sdk/java/pom.xml",
                "sdk/rust/Cargo.toml"
              ],
              "dependency_bot_commit_share": 0.18
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod, sdk/dotnet/src/Cordum.Cap/Cordum.Cap.csproj, sdk/dotnet/test/Cordum.Cap.Tests/Cordum.Cap.Tests.csproj (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod, sdk/dotnet/src/Cordum.Cap/Cordum.Cap.csproj, sdk/dotnet/test/Cordum.Cap.Tests/Cordum.Cap.Tests.csproj"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "sdk/node/tsconfig.json, sdk/python/cap/py.typed",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "sdk/node/tsconfig.json, sdk/python/cap/py.typed"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "18 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 18,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "18 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 18,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 1102362,
              "source_files_sampled": 709,
              "oversized_source_files": 17
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "17/709 source files over 60KB",
                "points": 53.7,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 709,
                      "oversized": 17
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "good",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": [
                "proto/cordum/agent/v1/alert.proto",
                "proto/cordum/agent/v1/buspacket.proto",
                "proto/cordum/agent/v1/handshake.proto",
                "proto/cordum/agent/v1/heartbeat.proto",
                "proto/cordum/agent/v1/job.proto",
                "proto/cordum/agent/v1/policy.proto",
                "proto/cordum/agent/v1/safety.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "proto/cordum/agent/v1/alert.proto, proto/cordum/agent/v1/buspacket.proto, proto/cordum/agent/v1/handshake.proto, proto/cordum/agent/v1/heartbeat.proto, proto/cordum/agent/v1/job.proto, proto/cordum/agent/v1/policy.proto, proto/cordum/agent/v1/safety.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "proto/cordum/agent/v1/alert.proto, proto/cordum/agent/v1/buspacket.proto, proto/cordum/agent/v1/handshake.proto, proto/cordum/agent/v1/heartbeat.proto, proto/cordum/agent/v1/job.proto, proto/cordum/agent/v1/policy.proto, proto/cordum/agent/v1/safety.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-30T12:47:17.090394Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/cordum-io/cap.svg",
  "full_name": "cordum-io/cap",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}