Public recordAt risk
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-24 15:42 UTC
devicechain-io / graphql-go
GraphQL server with a focus on ease of use
devicechain-io/graphql-go holds a health index of 48 out of 100, placing it in the At risk band. It scores highest on Vitality (75/100) and lowest on Community & Adoption (12/100). It was last updated 6 days ago. 2 contributors account for most of its recent work.
48
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
48
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
DeviceChainOrganization
0 followers2 public repossince Feb 2022
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/graph-gophers/graphql-gopoints to another repo — not scored | v1.10.2 | - | 15 | 65 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
75
Development activity
71Good
How it's scored
| 36/36 | Push recency — last push 6 days ago |
| 16.6/36 | Commit cadence — 24/52 weeks with commits |
| 18/18 | Commit volume — 129 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 129 |
| human_commit_share | 0.92 |
| days_since_last_push | 6 |
| active_weeks_last_year | 24 |
Release discipline
80Good
How it's scored
| 16.2/27 | Ships releases — 16 version tags (no GitHub releases) |
| 36/36 | Release recency — latest release 6 days ago |
| 19.8/27 | Release cadence — a release every ~56.8 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 16 |
| latest_release_tag | v1.10.2-dc.2 |
| releases_from_tags | yes |
| days_since_latest_release | 6 |
| mean_days_between_releases | 56.8 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
12
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
25Critical
How it's scored
| 0/22.5 | README |
| 22.5/22.5 | License — recognized license (BSD-2-Clause) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | no |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
37
Maintainer resilience (bus factor)
64Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 14.8/22.5 | Commit distribution — top contributor authored 34% of commits |
| 13.5/13.5 | Contributor breadth — 86 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 10 contributing companies or organizations |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 86 |
| top_contributor_share | 0.341 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
42At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 0/25 | Owner reach — 0 followers of devicechain-io |
| 12.4/25 | Track record — 2 public repos, account ~4 yr old |
Inputs used
| followers | 0 |
| owner_type | Organization |
| is_verified | — |
| owner_login | devicechain-io |
| public_repos | 2 |
| account_age_days | 1,623 |
Engineering Quality
Are baseline engineering and documentation practices in place?
62
Engineering practices
80Good
How it's scored
| 24/24 | CI workflows — 2 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yml |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
35At risk
How it's scored
| 0/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | no |
| has_docs_dir | yes |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
48
Security posture
48At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 10 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool detected: CodeQL |
| 2/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 6.8/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 1.5/7.5 | Vulnerabilities — 8 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 4.8 |
Excluded from scoring (no data or not applicable): ci_tests, packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
73
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 92 of 92 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
85Excellent
How it's scored
| 12.6/18 | One-command bootstrap — go.mod (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yml |
| 11/11 | Static type checking — internal/validation/testdata/tsconfig.json |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 14 of the last 100 commits agent-authored or agent-credited |
| 8/8 | Automated maintenance — 8 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum, package-lock.json |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | internal/validation/testdata/tsconfig.json |
| agent_commit_share | 0.14 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.08 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 54.5/55 | Manageable file sizes — 1/122 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 127,422 |
| source_files_sampled | 122 |
| oversized_source_files | 1 |
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — example/enum/schema.graphql, example/federation/compatibility/schema.graphql, example/prefetch/schema.graphql |
| 0/20 | MCP server |
| 40/40 | Runnable examples — example |
Inputs used
| example_dirs | example |
| has_mcp_signal | no |
| api_schema_files | example/enum/schema.graphql, example/federation/compatibility/schema.graphql, example/prefetch/schema.graphql |
Key facts
0GitHub stars
86contributors
129commits, last 12 months
6days since last push
16releases
2bus factor
0open issues
Gopackage ecosystems
Data collection warnings
- Community profile unavailable
- go package 'github.com/graph-gophers/graphql-go' points at a different repository (https://github.com/graph-gophers/graphql-go); excluded from ecosystem scoring
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 4.8 / 10
4.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 10 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool detected: CodeQL |
| 4 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 9 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 2 | Vulnerabilities | 8 existing vulnerabilities detected |
Direct dependencies 3
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/opentracing/opentracing-go | v1.2.0 | go.mod |
| Go | go.opentelemetry.io/otel | v1.43.0 | go.mod |
| Go | go.opentelemetry.io/otel/trace | v1.43.0 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 2273,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 625225,
"HTML": 3434,
"Shell": 1933,
"JavaScript": 899
},
"pushed_at": "2026-07-18T15:34:07Z",
"created_at": "2026-07-18T15:16:27Z",
"owner_type": "Organization",
"updated_at": "2026-07-18T15:16:27Z",
"description": "GraphQL server with a focus on ease of use",
"is_archived": false,
"is_disabled": false,
"license_spdx": "BSD-2-Clause",
"default_branch": "main",
"license_spdx_raw": "BSD-2-Clause",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "DeviceChain",
"type": "Organization",
"login": "devicechain-io",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/99508440?v=4",
"created_at": "2022-02-11T20:06:33Z",
"is_verified": null,
"public_repos": 2,
"account_age_days": 1623
},
"license": {
"state": "standard",
"spdx_id": "BSD-2-Clause",
"raw_spdx": "BSD-2-Clause",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v1.10.2",
"kind": "patch",
"published_at": "2026-05-19T23:57:44Z"
},
{
"tag": "v1.10.2-dc.2",
"kind": "prerelease",
"published_at": "2026-07-18T15:33:45Z"
},
{
"tag": "v1.10.1",
"kind": "patch",
"published_at": "2026-05-13T12:23:15Z"
},
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2026-05-10T11:32:33Z"
},
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2026-02-25T07:44:06Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2025-09-09T11:06:15Z"
},
{
"tag": "v1.7.2",
"kind": "patch",
"published_at": "2025-09-02T09:30:57Z"
},
{
"tag": "v1.7.1",
"kind": "patch",
"published_at": "2025-08-27T12:23:06Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2025-08-19T13:15:23Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2025-02-22T11:42:48Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2022-12-19T09:28:47Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2022-04-10T22:16:13Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2022-01-18T21:14:45Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2021-09-13T19:45:26Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2021-04-30T21:06:34Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2021-03-29T11:03:28Z"
}
],
"recent_commits": [
{
"oid": "4fb3f753699b39a7e1b1da9ec4ef3451402417ed",
"body": "…ample/federation/integration/gateway/form-data-4.0.6\n\nchore(deps): bump form-data from 4.0.4 to 4.0.6 in /example/federation/integration/gateway",
"is_bot": false,
"headline": "Merge pull request #762 from graph-gophers/dependabot/npm_and_yarn/ex…",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-07-02T06:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60399cce0c057df21ea57830560daeddcb6915f2",
"body": "fix: return reflect.Value from Field.resolve to preserve Go interface",
"is_bot": false,
"headline": "Merge pull request #764 from janisz/fix/issue-763-interface-method-index",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-07-02T06:00:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4505fc3747fc62f2f0535ac448c363dec9cfc307",
"body": "Signed-off-by: Pavel Nikolov <me@pavelnikolov.net>",
"is_bot": false,
"headline": "test: add list test",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-07-02T05:56:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc45bd2e9f87532031b6bed82413b0e62ddb9607",
"body": "- Rename test fixtures to include issue number (issue763ThingResolver,\n issue763ConcreteThingResolver) matching established convention\n- Add comment on AaExtra explaining why it exists and why its name matters\n- Use RunTest (singular) instead of RunTests for single test case\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: address code review findings in issue 763 test",
"author_name": "Tomasz Janiszewski",
"author_login": "janisz",
"committed_at": "2026-06-22T14:50:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dbe7959b702902842f6b0de4666412ce7325005f",
"body": "… type (#763)\n\nField.resolve() returned any, which erases the Go interface type via\nresult.Interface(). When the concrete type has extra methods, method\nindices computed against the interface at build time don't match the\nconcrete type at runtime, causing a reflect panic.\n\nReturning reflect.Value instead avoids the type-erasing round-trip.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: return reflect.Value from Field.resolve to preserve Go interface…",
"author_name": "Tomasz Janiszewski",
"author_login": "janisz",
"committed_at": "2026-06-22T14:39:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "750a4b9fc7b51a70d2b4520b2d3022a55a2371a3",
"body": "When a resolver method returns a Go interface and the concrete type has\nextra exported methods, method indices computed at schema-build time\ndon't match at runtime because reflect.ValueOf(any) unwraps to the\nconcrete type.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: add regression test for issue #763",
"author_name": "Tomasz Janiszewski",
"author_login": "janisz",
"committed_at": "2026-06-22T14:36:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d88339b0586344b722bf94b66b0f4079f4a1cb1d",
"body": "Bumps [form-data](https://github.com/form-data/form-data) from 4.0.4 to 4.0.6.\n- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/form-data/form-data/compare/v4.0.4...v4.0.6)\n\n---\nupdated-dependencies:\n- dependency-name: form-data\n dependency-version: 4.0.6\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps): bump form-data in /example/federation/integration/gateway",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-21T10:54:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a0143779f0a934f5255902074e7d922769ad9b8",
"body": "…ample/federation/integration/gateway/qs-6.15.2\n\nchore(deps): bump qs from 6.14.2 to 6.15.2 in /example/federation/integration/gateway",
"is_bot": false,
"headline": "Merge pull request #759 from graph-gophers/dependabot/npm_and_yarn/ex…",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-29T09:18:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6a3c2eb08cddf844869862b297fe3833d15ee09",
"body": "Bumps [qs](https://github.com/ljharb/qs) from 6.14.2 to 6.15.2.\n- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/ljharb/qs/compare/v6.14.2...v6.15.2)\n\n---\nupdated-dependencies:\n- dependency-name: qs\n dependency-version: 6.15.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps): bump qs in /example/federation/integration/gateway",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-23T12:20:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "622118ba45b8c6768bbb6d6439e043f8c97917b8",
"body": null,
"is_bot": false,
"headline": "docs: remove unnecessary comment",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-20T09:57:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "945316a96f2b309c04584a8f30f6b33422313669",
"body": "chore: update example deps",
"is_bot": false,
"headline": "Merge pull request #758 from graph-gophers/bump-examp-deps",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-19T23:57:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "816453caab1db7495ba7c6c62a1ba6295c24557f",
"body": null,
"is_bot": false,
"headline": "chore: update example deps",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-19T23:57:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "662c575248cd6afcd665afb2ec49be3ff5ffa4d6",
"body": "fix: clone inherits validate deprecated",
"is_bot": false,
"headline": "Merge pull request #757 from graph-gophers/fix-clone-copy-deprecated",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-19T23:55:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2377c2563f58c8ab16f17f78c2a941d433f4a9cc",
"body": null,
"is_bot": false,
"headline": "fix: clone inherits validate deprecated",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-19T23:53:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fce271cf182683ff78fd2a99788ad1474912fdec",
"body": "feat: validate deprecated fields",
"is_bot": false,
"headline": "Merge pull request #756 from graph-gophers/validate-deprecated",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-19T23:44:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2ef73f16aba3926e93910570ebe687c51922d6d",
"body": null,
"is_bot": false,
"headline": "docs: update changelog",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-19T23:41:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7ae1bbd2df8e3fdb7214e52b9100279da1bda21",
"body": null,
"is_bot": false,
"headline": "feat: validate deprecated fields",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-19T23:35:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "132a487e31aff9ca911a65955e4828c847a3a1a4",
"body": "refactor(exec): lookupOrBuildExec",
"is_bot": false,
"headline": "Merge pull request #753 from graph-gophers/refactor-lookupOrBuildExec",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-14T10:58:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5d8331a306f0b8eb7a407d3f0b808c77ca82f66",
"body": null,
"is_bot": false,
"headline": "refactor(exec): lookupOrBuildExec",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-13T12:24:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0ad3826f7c026e236d362da281b8a50fe90fc87",
"body": "chore(deps): bump utf8 to v1.1.1",
"is_bot": false,
"headline": "Merge pull request #752 from graph-gophers/bump-gw-js-dep",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-13T12:23:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ba36f9d95d1aa0d39b5ebbcd55797b2a00d37ff",
"body": null,
"is_bot": false,
"headline": "chore(deps): bump utf8 to v1.1.1",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-13T12:22:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96e74a3d3e84ff9fba5ab0fbcc9ea42c47531a68",
"body": "fix: recursive interfaces panic",
"is_bot": false,
"headline": "Merge pull request #751 from graph-gophers/fix-recursive-interface-bug",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-13T12:16:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3541722bc122547e8df9e65664dd35a15c9a925",
"body": null,
"is_bot": false,
"headline": "fix: recursive interfaces panic",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-13T12:14:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aecaa39c11e207703a9ca409ab11de9f41fe214d",
"body": "fix: Resolver cycles where one of the types is a union",
"is_bot": false,
"headline": "Merge pull request #750 from preng69/fix/resolver-cycles-with-union",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-13T11:15:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f94be82c20be969cf3fe8141b907b725815f264",
"body": null,
"is_bot": false,
"headline": "fix: Resolver cycles where one of the types is a union",
"author_name": "Pål-Robert Engnæs",
"author_login": "preng69",
"committed_at": "2026-05-13T09:26:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc66b2d326a9e386f9b1c4849adc5fc3e7fc9db4",
"body": null,
"is_bot": false,
"headline": "ci: delete actionlint",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T11:32:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a71c49384e023454bc853c0762716881d2156aa0",
"body": "ci: add actionlint action",
"is_bot": false,
"headline": "Merge pull request #747 from graph-gophers/add-actionlint",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T10:46:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49e62a028cd6e42438da3f06ef70f0ccfc4011ee",
"body": null,
"is_bot": false,
"headline": "ci: add actionlint action",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T10:44:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09cfdf0f44aa3674bb82cc0e0279391068fa7b95",
"body": "ci: test go fix error",
"is_bot": false,
"headline": "Merge pull request #746 from graph-gophers/test-fix-any",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T10:17:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "392d042f27a1cfe5cec68d1cec3c3f7705dd684e",
"body": null,
"is_bot": false,
"headline": "ci: separate gofmt and go fix errs",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T10:16:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "074e2bee13273c85672a70e1c2db2b18fe5cfe22",
"body": null,
"is_bot": false,
"headline": "ci: revert test any",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T10:08:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc766db9df8acf1b6508619b94a016400e7d430d",
"body": null,
"is_bot": false,
"headline": "ci: go v1.25 any rule check",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T10:06:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d5f0d5c9ee3144e762b0e50bd7b358a58f81877",
"body": null,
"is_bot": false,
"headline": "ci: test go fix error",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T06:54:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4224c42a7230e48207e8e934b9823a7938cf88a4",
"body": "ci: go fix check",
"is_bot": false,
"headline": "Merge pull request #745 from graph-gophers/pr-go-fix-check",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T06:53:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c5499404bc7959c41079445da2eeb5d0c003dea",
"body": null,
"is_bot": false,
"headline": "ci: go fix check",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T06:51:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f24fbe9d2d07a4de93a81db6e956ad478d68165",
"body": "ci: format and update workflows",
"is_bot": false,
"headline": "Merge pull request #744 from graph-gophers/repo-cleanup",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T06:43:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f767142957f267d3f7135f1ea5a185547496673a",
"body": null,
"is_bot": false,
"headline": "ci: format and update workflows",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T06:38:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4368a24af19d1b19aa76628fe2e47909e3a208e9",
"body": "…ample/federation/integration/gateway/ip-address-10.2.0\n\nchore(deps): bump ip-address from 10.1.0 to 10.2.0 in /example/federation/integration/gateway",
"is_bot": false,
"headline": "Merge pull request #742 from graph-gophers/dependabot/npm_and_yarn/ex…",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T05:42:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f4e7aa7053a2236aa5b5669c96a6606cc697b11",
"body": "chore: remove unneded script",
"is_bot": false,
"headline": "Merge pull request #743 from graph-gophers/repo-cleanup",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T05:38:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "670ba506da839cf07762150b41af8dc59e6b0493",
"body": null,
"is_bot": false,
"headline": "chore: remove unneded script",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-05-10T05:38:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "475a92ef210199bb2f09fe98617d401649457a38",
"body": "Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.1.0 to 10.2.0.\n- [Commits](https://github.com/beaugunderson/ip-address/commits)\n\n---\nupdated-dependencies:\n- dependency-name: ip-address\n dependency-version: 10.2.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps): bump ip-address in /example/federation/integration/gateway",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-07T00:43:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6697aa0720a03b9c3310a190cf2822753ab61a4c",
"body": "fix: impl field default values",
"is_bot": false,
"headline": "Merge pull request #741 from graph-gophers/issue-154",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-29T11:04:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b0db56b76ba6eedc0c04733701f3cc4574f9320",
"body": "Co-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "fix: impl field default values",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-29T11:02:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7a34c37c11f48863b0c568ffbac046d99053180a",
"body": "fix: missing isDeprecated",
"is_bot": false,
"headline": "Merge pull request #740 from graph-gophers/add-missing-isdeprecated",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-29T08:10:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27b978070df5f92675334e8d92d34b8658c1d172",
"body": null,
"is_bot": false,
"headline": "fix: missing isDeprecated",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-29T08:07:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07b839b63a9831305f86af95ed128eb3ddd33a31",
"body": "fix(introspection): include deprecation reason",
"is_bot": false,
"headline": "Merge pull request #739 from graph-gophers/introspect-deprecation-reason",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-27T23:16:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c5f9f1ca1a78e63b28bfca06374294949a1f3f9",
"body": null,
"is_bot": false,
"headline": "fix(introspection): include deprecation reason",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-27T23:12:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "261f1f0187501d30abe3e006c2856851f2da5789",
"body": "fix: introspection query",
"is_bot": false,
"headline": "Merge pull request #738 from graph-gophers/fix-tojson-introsp-query",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-27T22:26:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf8c53d92fd775d11f4085905445d4cb58b4f8e1",
"body": "Co-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "fix: introspection query",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-27T22:25:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2b69c6cc88095cda936848089f3f2f1145938bc2",
"body": "…cated-arg\n\nfix(introspection): support includeDeprecated on args and inputFields",
"is_bot": false,
"headline": "Merge pull request #737 from graph-gophers/introspection-includedepre…",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-27T06:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc821edffb18f0e2db76205cda125388bba456b8",
"body": "Co-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "fix(introspection): support includeDeprecated on args and inputFields",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-27T06:28:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e6acf98638e956e0155bb685a749cfe1f1fc46ff",
"body": "feat: support full unicode in lexer",
"is_bot": false,
"headline": "Merge pull request #736 from graph-gophers/full-unicode-support-in-lexer",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-27T04:14:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92d089f27b5f6fc5e10f801ad78f72624069e410",
"body": null,
"is_bot": false,
"headline": "doc: fix comment typo",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-27T04:12:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2121d9315e66161aeb75b2241fd6a15cce405fe6",
"body": "Co-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "doc(norm): pkg-level doc",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-27T03:59:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "aa1d86b87231f0c0209df732452dcafa67b350ca",
"body": "Co-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "feat: support full unicode in lexer",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-27T00:41:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2794fa39eb581b43a954def4cf78763db6bcca64",
"body": "fix: deprecated reason non-nullable",
"is_bot": false,
"headline": "Merge pull request #735 from graph-gophers/deprecated-arg-non-null",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T23:17:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c596ceb0d3301ae9eb4d01e8663d1267cae2b0b",
"body": null,
"is_bot": false,
"headline": "fix: deprecated reason non-nullable",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T23:16:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8983aa95f7a558d41ac624beec3e2a808608193",
"body": "feat(validation): deprecated iface impl discrepancy",
"is_bot": false,
"headline": "Merge pull request #734 from graph-gophers/deprecated-dir-discrepancy",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T22:59:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ca7d97f99f99b8e01cb3a2ad2598f29e9956cc3",
"body": null,
"is_bot": false,
"headline": "feat(validation): deprecated iface impl discrepancy",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T22:57:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a63c969502c41beece1d4053ed9694bf28b2eba0",
"body": "doc: include default query",
"is_bot": false,
"headline": "Merge pull request #733 from graph-gophers/update-example-gw",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T11:08:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "665f04366e5da80c6c1d6f41dac8d4ef20e57c5c",
"body": "Co-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "doc: include default query",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T11:08:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ba5332d3a300537be8020d8e42f1952d2f68b1f1",
"body": "chore: update js deps",
"is_bot": false,
"headline": "Merge pull request #732 from graph-gophers/update-js-deps",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T11:07:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d086648d88b4d0ae1f5d9005ba965a6a93d9bd6d",
"body": "Co-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "chore: update js deps",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T11:06:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "672adbe985e8d5af60f111ace6e35b8fafe7df62",
"body": "…rity\n\ntest(subscription): validation parity with graphql-js",
"is_bot": false,
"headline": "Merge pull request #731 from graph-gophers/subscription-validation-pa…",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T10:53:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5250dd0c00072ee35478c112be946f67128c087",
"body": "Co-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "test: compare full response",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T10:51:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c047c742ffb4fb8c88f134a41830cfc588a3af16",
"body": null,
"is_bot": false,
"headline": "fix: reject empty query at parse time",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T10:37:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1096456603c84546b4096b91abc0e2dcf65a84f",
"body": "Co-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "fix: disallow skip or include dirs on top level subscr",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T10:35:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f07a3c92189fc7bf9db6fc3a2f6739a697c79210",
"body": null,
"is_bot": false,
"headline": "test: subscription validation improvement",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T01:42:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "414fe208883d445d8f2ec0ff20ec9acf6fc6f2ee",
"body": "* chore: ignore dot files\n\nCo-authored-by: Copilot <copilot@github.com>\n\n* chore: go ignore node_modules\n\n* test: use noop test panic logger\n\n* refactor: query errors str builder\n\n* docs: update testdata readme\n\n---------\n\nCo-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "Small improvements (#730)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-25T00:01:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b3545b868e96cb2770a4ca443f669ece2347fedd",
"body": null,
"is_bot": false,
"headline": "docs: update testdata readme",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-24T23:59:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "289aa41390c97562268594ae8dac258e665020c1",
"body": null,
"is_bot": false,
"headline": "refactor: query errors str builder",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-24T23:59:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2b706943a3cb878d4cf95901e6925fb4222ff37",
"body": null,
"is_bot": false,
"headline": "test: use noop test panic logger",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-24T23:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e9463e3c607b52ec3cdd19ece7aafe36639e073",
"body": null,
"is_bot": false,
"headline": "chore: go ignore node_modules",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-24T23:57:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2ccdc5c23e278795d26bafc2b0ce0827441d271",
"body": "Co-authored-by: Copilot <copilot@github.com>",
"is_bot": false,
"headline": "chore: ignore dot files",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-24T23:57:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "40394f8e3829cc75402f81d292a551ce015658f4",
"body": null,
"is_bot": false,
"headline": "doc: update readme content and formatting",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-14T21:04:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "874fbd029b1f988a9eeaee4c0ae72bcbf5be44b7",
"body": null,
"is_bot": false,
"headline": "feat: exec doc",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-14T21:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31f96d6977a4d41fe4c3a22f1b82d2ec80350af6",
"body": null,
"is_bot": false,
"headline": "refactor: examples and reuse graphiql",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-13T21:16:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec4acb28b208c3f2e3f6baeed6309bcaf6a140e5",
"body": null,
"is_bot": false,
"headline": "chore: update otel dep (#723)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-12T23:08:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48753c8038386a5de1de2cfcd4d8eeddb8ff6b56",
"body": null,
"is_bot": false,
"headline": "Bump GH actions to their latest versions (#722)",
"author_name": "Andreas Deininger",
"author_login": "deining",
"committed_at": "2026-04-01T22:56:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8dc30dd68bcf514220ce729b3ed59d0485fc62ff",
"body": null,
"is_bot": false,
"headline": "fix: failing build (#721)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-04-01T21:37:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4bed8feb9e5df40acd354bf3b336fd7377c14a5e",
"body": null,
"is_bot": false,
"headline": "docs: fix typos (#720)",
"author_name": "Andreas Deininger",
"author_login": "deining",
"committed_at": "2026-04-01T20:25:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a70b60103d463b48f2e654e45abed8a7caedfe9b",
"body": null,
"is_bot": false,
"headline": "fix: incorrect conversion between integer types (#719)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-03-31T21:44:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe1e9523e5d02e274efe02fabfb1c4e9aedbad89",
"body": "* refactor: address pr 716 feedback\n\n* fix: formatting",
"is_bot": false,
"headline": "refactor: address pr 716 feedback (#718)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-03-31T21:27:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38039f42c2ed4d96976003de102fc5a381b94411",
"body": null,
"is_bot": false,
"headline": "feat: max sub query len",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-03-29T22:44:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8962e1afa2bf9252477101a9315175ab87cd4df3",
"body": null,
"is_bot": false,
"headline": "chore: delete issue file (#717)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-03-27T06:41:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63f5bb0f4bf1247c1d408cd322628ba76a72b68f",
"body": null,
"is_bot": false,
"headline": "feat: allow int64 custom scalars (#716)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-03-27T06:26:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2a08576f7f3eaeabbaf8b8a9d409bfd0ea49bdf",
"body": null,
"is_bot": true,
"headline": "chore(deps): bump @apollo/server (#715)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-27T01:11:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99a0caf919ff754ecfbacdfdcee797e981822a07",
"body": null,
"is_bot": true,
"headline": "chore(deps): bump brace-expansion (#714)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-26T23:14:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "420d2ccb6a015de613eabb66fd817ce4c8b59eaa",
"body": null,
"is_bot": false,
"headline": "fix: trace ctx (#713)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-03-26T21:03:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a92b5b89be6f7ee0f2581954fc8e3a1096cd9de",
"body": null,
"is_bot": false,
"headline": "refactor: improve validation performance (#712)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-03-26T20:33:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "645abb7bf48ba0e4ab61454a88c83f515e1fc785",
"body": "…y (#709)\n\nBumps [minimatch](https://github.com/isaacs/minimatch) from 10.2.2 to 10.2.4.\n- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)\n- [Commits](https://github.com/isaacs/minimatch/compare/v10.2.2...v10.2.4)\n\n---\nupdated-dependencies:\n- dependency-name: minimatch\n dependency-version: 10.2.4\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump minimatch in /example/federation/integration/gatewa…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-25T21:39:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4092d0f75b031fea307cb64ee43dafa513c375f0",
"body": "…711)",
"is_bot": true,
"headline": "chore(deps): bump @apollo/federation-internals and @apollo/gateway (#…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-14T01:05:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42c1893e68c64d45f334f837ab70a85f1b8c0726",
"body": "* chore: validation parity with graphql-js\n\n* chore: improve validation parity\n\n* test: coverage script",
"is_bot": false,
"headline": "chore: validation parity with graphql-js (#708)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-03-02T15:40:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "239c057b390d57a4de7826651d8932a9cda22feb",
"body": "* feat: add oneOf directive\n* chore: update validation testdata",
"is_bot": false,
"headline": "feat: add oneOf directive (#707)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-02-28T06:39:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "283c427bfaaa41f3790d330d20db2bacb5ea1374",
"body": null,
"is_bot": false,
"headline": "chore: fixes and bump dep versions (#705)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-02-25T08:13:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "265886af4c5e6a958f53bd9256bba013885f2199",
"body": null,
"is_bot": false,
"headline": "chore: update changelog (#704)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-02-25T07:46:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d8c6eb7cac5f1a4bf83e00baaecd33ca19c2b5d",
"body": null,
"is_bot": false,
"headline": "chore: modernize go code (#703)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-02-25T07:36:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4dfc8e1fae8828e7517035700187d934a31844c",
"body": "* feat: use mem pool to reduce allocs\n\n* fix: panic handler\n\n* fix: schema clone fields",
"is_bot": false,
"headline": "feat: use mem pool to reduce allocs (#702)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-02-24T21:03:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b3c7538f7cc4da1d80b300481ad819227b61d6e",
"body": null,
"is_bot": false,
"headline": "feat: clone schema (#697)",
"author_name": "Pavel Nikolov",
"author_login": "pavelnikolov",
"committed_at": "2026-02-24T19:08:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73f66d552687d8a2fb5ffcf7e7daf0baa968bf50",
"body": "Removes [tar](https://github.com/isaacs/node-tar). It's no longer used after updating ancestor dependency [make-fetch-happen](https://github.com/npm/make-fetch-happen). These dependencies need to be updated together.\n\n\nRemoves `tar`\n\nUpdates `make-fetch-happen` from 11.1.1 to 15.0.3\n- [Release notes\n[…]\nen\n dependency-version: 15.0.3\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump tar and make-fetch-happen (#701)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-24T06:27:57Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 16,
"commits_last_year": 129,
"latest_release_at": "2026-07-18T15:33:45Z",
"latest_release_tag": "v1.10.2-dc.2",
"releases_from_tags": true,
"days_since_last_push": 6,
"active_weeks_last_year": 24,
"days_since_latest_release": 6,
"mean_days_between_releases": 56.8
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/graph-gophers/graphql-go",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": false,
"registry_url": "https://pkg.go.dev/github.com/graph-gophers/graphql-go",
"is_deprecated": false,
"latest_version": "v1.10.2",
"repository_url": "https://github.com/graph-gophers/graphql-go",
"versions_count": 15,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-05-19T23:57:44Z",
"latest_version_yanked": null,
"days_since_latest_publish": 65
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [
"example/enum/schema.graphql",
"example/federation/compatibility/schema.graphql",
"example/prefetch/schema.graphql"
],
"has_devcontainer": false,
"typecheck_configs": [
"internal/validation/testdata/tsconfig.json"
],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 127422,
"source_files_sampled": 122,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/opentracing/opentracing-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
},
{
"name": "go.opentelemetry.io/otel",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "go.opentelemetry.io/otel/trace",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 2,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "pavelnikolov",
"commits": 264,
"avatar_url": "https://avatars.githubusercontent.com/u/441740?v=4"
},
{
"type": "User",
"login": "neelance",
"commits": 256,
"avatar_url": "https://avatars.githubusercontent.com/u/16184?v=4"
},
{
"type": "User",
"login": "tonyghita",
"commits": 56,
"avatar_url": "https://avatars.githubusercontent.com/u/779738?v=4"
},
{
"type": "User",
"login": "dackroyd",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/23301187?v=4"
},
{
"type": "User",
"login": "gracenoah",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/36455668?v=4"
},
{
"type": "User",
"login": "seansorr",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/159576823?v=4"
},
{
"type": "User",
"login": "eloyekunle",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/11166933?v=4"
},
{
"type": "User",
"login": "fadi-alkatut",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/44017676?v=4"
},
{
"type": "User",
"login": "tinnywang",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/1168893?v=4"
},
{
"type": "User",
"login": "matiasanaya",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/1661017?v=4"
}
],
"contributors_sampled": 86,
"top_contributor_share": 0.341
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"codeql-analysis.yml",
"go.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 10 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool detected: CodeQL",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 4,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 2,
"reason": "8 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "4fb3f753699b39a7e1b1da9ec4ef3451402417ed",
"ran_at": "2026-07-24T15:42:15Z",
"aggregate_score": 4.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/devicechain-io/graphql-go",
"host": "github.com",
"name": "graphql-go",
"owner": "devicechain-io"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"security": 48,
"vitality": 75,
"community": 12,
"governance": 37,
"engineering": 62
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 75,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"commits_last_year": 129,
"human_commit_share": 0.92,
"days_since_last_push": 6,
"active_weeks_last_year": 24
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "24/52 weeks with commits",
"points": 16.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 24
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "129 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 129
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"releases_count": 16,
"latest_release_tag": "v1.10.2-dc.2",
"releases_from_tags": true,
"days_since_latest_release": 6,
"mean_days_between_releases": 56.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "16 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 16
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~56.8 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 56.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 12,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (BSD-2-Clause)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "BSD-2-Clause"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 37,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 86,
"top_contributor_share": 0.341
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 34% of commits",
"points": 14.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 34
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "86 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 86
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"followers": 0,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "devicechain-io",
"public_repos": 2,
"account_age_days": 1623
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of devicechain-io",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "devicechain-io"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "2 public repos, account ~4 yr old",
"points": 12.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 2
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 62,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": false,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 48,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 4.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected: CodeQL",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "8 existing vulnerabilities detected",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 7
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 73,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "92 of 92 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 92,
"sampled": 92
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"internal/validation/testdata/tsconfig.json"
],
"agent_commit_share": 0.14,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.08
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "internal/validation/testdata/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "internal/validation/testdata/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "14 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 14,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "8 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 8,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 127422,
"source_files_sampled": 122,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/122 source files over 60KB",
"points": 54.5,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 122,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"example"
],
"has_mcp_signal": false,
"api_schema_files": [
"example/enum/schema.graphql",
"example/federation/compatibility/schema.graphql",
"example/prefetch/schema.graphql"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "example/enum/schema.graphql, example/federation/compatibility/schema.graphql, example/prefetch/schema.graphql",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example/enum/schema.graphql, example/federation/compatibility/schema.graphql, example/prefetch/schema.graphql"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Community profile unavailable",
"go package 'github.com/graph-gophers/graphql-go' points at a different repository (https://github.com/graph-gophers/graphql-go); excluded from ecosystem scoring",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-24T15:42:32.532351Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/devicechain-io/graphql-go.svg",
"full_name": "devicechain-io/graphql-go",
"license_state": "standard",
"license_spdx": "BSD-2-Clause"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.