Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 19:07 UTC

eschnett / spack

A flexible package manager designed to support multiple versions, configurations, platforms, and compilers.

PythonCustom license★ 0 stars⑂ 1 forksince Nov 2015forkView on GitHub ↗

eschnett/spack holds a health index of 27 out of 100, placing it in the Critical band. It scores highest on Sustainability & Governance (55/100) and lowest on Community & Adoption (9/100). It was last updated 1089 days ago. 7 contributors account for most of its recent work.

27
overall / 100
Critical

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

27
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Abandonment Policy applies a 85% multiplier to weighted overall health.

Ownership

Erik SchnetterPersonal account
241 followers350 public repossince Mar 2010Perimeter Institute for Theoretical Physics

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

20Critical · 22% of overall
How it's scored
0/36Push recency — last push 1,089 days ago
0/36Commit cadence — 0/52 weeks with commits
0/18Commit volume — 0 commits in the last year
0/10OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Inputs used
commits_last_year0
human_commit_share1
days_since_last_push1,089
active_weeks_last_year0
How it's scored
16.2/27Ships releases — 28 version tags (no GitHub releases)
0/36Release recency — latest release 1,983 days ago
27/27Release cadence — a release every ~40.2 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count28
latest_release_tagv0.16.1
releases_from_tagsyes
days_since_latest_release1,983
mean_days_between_releases40.2
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

9Critical · 18% of overall
How it's scored
0/60Stars — 0 stars
0/25Forks — 1 forks
0/15Watchers — 1 watchers
Inputs used
forks1
stars0
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
0/22.5README
16.9/22.5License — license file present, not a recognized license
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeno
has_licenseno
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

55Moderate · 24% of overall
How it's scored
51.3/54Bus factor — 7 contributor(s) cover half of all commits
18/22.5Commit distribution — top contributor authored 20% of commits
13.5/13.5Contributor breadth — 100 contributors
10/10OpenSSF Scorecard: Contributors — project has 95 contributing companies or organizations
Inputs used
bus_factor7
contributors_sampled100
top_contributor_share0.202
How it's scored
0/46.8Issue resolution — no issues or no data
0/38.3PR acceptance — 0/1 decided PRs merged
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Inputs used
merged_prs0
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs1
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
17.1/25Owner reach — 241 followers of eschnett
25/25Track record — 350 public repos, account ~16 yr old
Inputs used
followers241
owner_typeUser
is_verified
owner_logineschnett
public_repos350
account_age_days5,990
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.

Engineering Quality

Are baseline engineering and documentation practices in place?

40At risk · 20% of overall
How it's scored
0/24CI workflows
24/24Tests present
16/16Linter config — .flake8
0/9.6Pre-commit hooks
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — no data
Inputs used
has_cino
has_testsyes
has_editorconfigno
has_linter_configyes
has_precommit_configno
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.

Documentation

25Critical
How it's scored
0/30README
0/25Documentation directory
15/15Documentation / homepage site — http://scalability-llnl.github.io/spack
0/10Repository description
0/10Topics
10/10Wiki
Inputs used
topics
has_wikiyes
homepagehttp://scalability-llnl.github.io/spack
has_readmeno
has_docs_dirno
has_descriptionno

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

27Critical · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — no data
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 95 contributing companies or organizations
0/10Dangerous-Workflow — no data
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.2/2.5License — license file detected
0/7.5Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5Packaging — no data
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — no data
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated13
scorecard_versionv5.5.0
checks_inconclusive5
scorecard_aggregate2.7
Excluded from scoring (no data or not applicable): ci_tests, dangerous_workflow, packaging, signed_releases, token_permissions. Remaining weights renormalized.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

53Moderate · 0% of overall
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 97 of 100 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.97
agent_instruction_files
agent_instruction_max_bytes
How it's scored
18/18One-command bootstrap — lib/spack/docs/Makefile, lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile, lib/spack/spack/test/data/make/affirmative/check_test/Makefile, lib/spack/spack/test/data/make/affirmative/expansion/Makefile, lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile, lib/spack/spack/test/data/make/affirmative/include/Makefile, lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile, lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile, lib/spack/spack/test/data/make/affirmative/spaces/Makefile, lib/spack/spack/test/data/make/affirmative/test_check/Makefile, lib/spack/spack/test/data/make/affirmative/three_targets/Makefile, lib/spack/spack/test/data/make/negative/partial_match/Makefile, lib/spack/spack/test/data/make/negative/variable/Makefile, var/spack/repos/builtin/packages/alglib/Makefile
22/22Automated tests
11/11Lint / format config — .flake8
0/11Static type checking
10/10Reproducible environment — Dockerfile
0/10Demonstrated agent practice — no agent-authored commits among the last 100
0/8Automated maintenance — no automated dependency updates observed
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfiles
has_dockerfileyes
typed_languageno
bootstrap_fileslib/spack/docs/Makefile, lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile, lib/spack/spack/test/data/make/affirmative/check_test/Makefile, lib/spack/spack/test/data/make/affirmative/expansion/Makefile, lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile, lib/spack/spack/test/data/make/affirmative/include/Makefile, lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile, lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile, lib/spack/spack/test/data/make/affirmative/spaces/Makefile, lib/spack/spack/test/data/make/affirmative/test_check/Makefile, lib/spack/spack/test/data/make/affirmative/three_targets/Makefile, lib/spack/spack/test/data/make/negative/partial_match/Makefile, lib/spack/spack/test/data/make/negative/variable/Makefile, var/spack/repos/builtin/packages/alglib/Makefile
has_devcontainerno
has_linter_configyes
typecheck_configs
agent_commit_share0
toolchain_manifests
dependency_bot_commit_share0
How it's scored
0/45Type-checkable code — Python without a type-check config
55/55Manageable file sizes — 4/4,461 source files over 60KB
Inputs used
primary_languagePython
largest_source_bytes172,983
source_files_sampled4,461
oversized_source_files4

Key facts

0GitHub stars
100contributors
0commits, last 12 months
1,089days since last push
28releases
7bus factor
0open issues
package ecosystems

Data collection warnings

  • Community profile unavailable
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

More detail

OpenSSF Scorecard 2.7 / 10
2.7aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-26 19:07 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
n/aCI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
10Contributorsproject has 95 contributing companies or organizations
n/aDangerous-Workflowno workflows found
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
9Licenselicense file detected
0Maintained0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
n/aPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
n/aToken-PermissionsNo tokens found
10Vulnerabilities0 existing vulnerabilities detected
All dependencies not collected

The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 184708,
      "has_wiki": true,
      "homepage": "http://scalability-llnl.github.io/spack",
      "languages": {
        "C": 47613,
        "C++": 2693,
        "Lua": 2761,
        "Tcl": 2366,
        "HTML": 1563,
        "CMake": 4495,
        "Shell": 129480,
        "Python": 9533895,
        "Makefile": 10118,
        "Dockerfile": 18667
      },
      "pushed_at": "2023-08-02T13:26:58Z",
      "created_at": "2015-11-17T21:48:07Z",
      "owner_type": "User",
      "updated_at": "2019-12-19T19:35:09Z",
      "description": "A flexible package manager designed to support multiple versions, configurations, platforms, and compilers.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "develop",
      "license_spdx_raw": "NOASSERTION",
      "primary_language": "Python",
      "significant_languages": [
        "Python"
      ]
    },
    "owner": {
      "blog": "http://www.perimeterinstitute.ca/personal/eschnetter/",
      "name": "Erik Schnetter",
      "type": "User",
      "login": "eschnett",
      "company": "Perimeter Institute for Theoretical Physics",
      "location": "Waterloo, Ontario, Canada",
      "followers": 241,
      "avatar_url": "https://avatars.githubusercontent.com/u/213514?v=4",
      "created_at": "2010-03-01T22:50:05Z",
      "is_verified": null,
      "public_repos": 350,
      "account_age_days": 5990
    },
    "license": {
      "state": "custom",
      "spdx_id": null,
      "raw_spdx": "NOASSERTION",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.16.1",
          "kind": "patch",
          "published_at": "2021-02-19T19:06:33Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2020-11-18T12:22:09Z"
        },
        {
          "tag": "v0.15.4",
          "kind": "patch",
          "published_at": "2020-08-13T07:41:59Z"
        },
        {
          "tag": "v0.15.3",
          "kind": "patch",
          "published_at": "2020-07-28T09:11:06Z"
        },
        {
          "tag": "v0.15.2",
          "kind": "patch",
          "published_at": "2020-07-23T23:04:26Z"
        },
        {
          "tag": "v0.15.1",
          "kind": "patch",
          "published_at": "2020-07-10T23:54:49Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2020-06-30T23:21:32Z"
        },
        {
          "tag": "v0.14.2",
          "kind": "patch",
          "published_at": "2020-04-15T21:32:01Z"
        },
        {
          "tag": "v0.14.1",
          "kind": "patch",
          "published_at": "2020-03-20T19:29:44Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2020-02-24T01:08:15Z"
        },
        {
          "tag": "v0.13.4",
          "kind": "patch",
          "published_at": "2020-02-07T22:52:07Z"
        },
        {
          "tag": "v0.13.3",
          "kind": "patch",
          "published_at": "2019-12-24T07:48:11Z"
        },
        {
          "tag": "v0.13.2",
          "kind": "patch",
          "published_at": "2019-12-05T06:02:41Z"
        },
        {
          "tag": "v0.13.1",
          "kind": "patch",
          "published_at": "2019-11-05T09:49:17Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2019-10-26T06:19:36Z"
        },
        {
          "tag": "v0.12.1",
          "kind": "patch",
          "published_at": "2019-01-13T22:29:07Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2018-11-13T17:05:17Z"
        },
        {
          "tag": "v0.11.2",
          "kind": "patch",
          "published_at": "2018-02-07T16:45:29Z"
        },
        {
          "tag": "v0.11.1",
          "kind": "patch",
          "published_at": "2018-01-19T21:28:26Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2018-01-17T22:14:45Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2017-01-17T09:36:03Z"
        },
        {
          "tag": "v0.9.1",
          "kind": "patch",
          "published_at": "2016-05-18T15:30:13Z"
        },
        {
          "tag": "v0.8.17",
          "kind": "patch",
          "published_at": "2015-03-24T17:17:18Z"
        },
        {
          "tag": "v0.8.16",
          "kind": "patch",
          "published_at": "2015-03-14T03:41:59Z"
        },
        {
          "tag": "v0.8.15",
          "kind": "patch",
          "published_at": "2015-02-24T18:42:58Z"
        },
        {
          "tag": "v0.8.11",
          "kind": "patch",
          "published_at": "2014-11-06T21:22:15Z"
        },
        {
          "tag": "v0.8.10",
          "kind": "patch",
          "published_at": "2014-10-28T06:04:47Z"
        },
        {
          "tag": "v0.8.5",
          "kind": "patch",
          "published_at": "2014-09-19T16:56:00Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "bcb534541c4f5b925585cb390b42f2a6fadbe6fb",
          "body": null,
          "is_bot": false,
          "headline": "Various cleanups as suggested during review",
          "author_name": "Erik Schnetter",
          "author_login": "eschnett",
          "committed_at": "2019-12-19T19:34:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89a42f9bb771fa8228d1b3decf693ed08d6c10aa",
          "body": null,
          "is_bot": false,
          "headline": "Nsimd: New package",
          "author_name": "Erik Schnetter",
          "author_login": "eschnett",
          "committed_at": "2019-12-19T16:52:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af249d3cf6617cd635ed7aa54dddd83d7eb09cef",
          "body": "…builtin\n\nWe shouldn't allow packages to have missing dependencies in the mainline.\n\n- [x] Add a test to enforce this.",
          "is_bot": false,
          "headline": "package_sanity: add a test to enforce no nonexisting dependencies in …",
          "author_name": "Todd Gamblin",
          "author_login": "tgamblin",
          "committed_at": "2019-12-19T05:10:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "531f370e0d3256202e1eb40dce669e8ae2ebb15a",
          "body": "- Add an optional argument so that `possible_dependencies()` will report\n  missing dependencies.\n- Add a test to ensure it works.\n- Ignore missing dependencies in `possible_dependencies()` by default.",
          "is_bot": false,
          "headline": "possible_dependencies() now reports missing dependencies",
          "author_name": "Todd Gamblin",
          "author_login": "tgamblin",
          "committed_at": "2019-12-19T05:10:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "81b147cc0af9205061b4197b682b3058ce185c08",
          "body": "- this version allows getting possible dependencies of multiple packages\n  or specs at once.\n\n- New method handles calling `PackageBase.possible_dependencies` multiple\n  times and passing `visited` dict around.",
          "is_bot": false,
          "headline": "package: add spack.package.possible_dependencies method",
          "author_name": "Todd Gamblin",
          "author_login": "tgamblin",
          "committed_at": "2019-12-19T05:10:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3799b2c7bc8224f7cc4453e5cd6fdbea2cc71f1",
          "body": "`Environment.added_specs()` has a loop around calls to\n`Package.installed()`, which can result in repeated DB queries.  Optimize\nthis with a read transaction in `Environment`.",
          "is_bot": false,
          "headline": "performance: speed up `spack find` in environments",
          "author_name": "Todd Gamblin",
          "author_login": "tgamblin",
          "committed_at": "2019-12-19T00:07:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e9c8d236cc4b75e929d6212245a517d3847dc5d",
          "body": "`spack spec -I` queries the database for installation status and should\nuse a read transaction around calls to `Spec.tree()`.",
          "is_bot": false,
          "headline": "performance: `spack spec` should use a read transacction with -I",
          "author_name": "Todd Gamblin",
          "author_login": "tgamblin",
          "committed_at": "2019-12-19T00:07:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f73cdac731a0f5955c1843535b21ce1101d897c3",
          "body": "Checks for deprecated specs were repeatedly taking out read locks on the\ndatabase, which can be very slow.\n\n- [x] put a read transaction around the deprecation check",
          "is_bot": false,
          "headline": "concretization: improve performance by avoiding database locks",
          "author_name": "Todd Gamblin",
          "author_login": "tgamblin",
          "committed_at": "2019-12-19T00:07:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "33335c9d0a4a64bb59a169795ef1afed2c8aa0ac",
          "body": "`get_platform()` is pretty expensive and can be called many times in a\nspack invocation.\n\n- [x] memoize `get_platform()`",
          "is_bot": false,
          "headline": "performance: memoize spack.architecture.get_platform()",
          "author_name": "Todd Gamblin",
          "author_login": "tgamblin",
          "committed_at": "2019-12-19T00:07:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92c2c47f720d75c12e0bc1a30b92522e82770d58",
          "body": null,
          "is_bot": false,
          "headline": "aspell: Rename 'darwin.patch' and apply it to all targets. (#14206)",
          "author_name": "t-karatsu",
          "author_login": "t-karatsu",
          "committed_at": "2019-12-18T23:10:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8da6fcf324637bca329b0ac8c48da76b2730649a",
          "body": "Added checksum for latest NetCDF release 4.7.3",
          "is_bot": false,
          "headline": "NETCDF-C: Add latest release 4.7.3 (#14214)",
          "author_name": "Greg Sjaardema",
          "author_login": "gsjaardema",
          "committed_at": "2019-12-18T23:09:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67603d71bc3a3ffd5ef33446da58bfb8790901de",
          "body": "* Add dependencies for hpcrypt\r\n\r\n* address review comments\r\n\r\n* flake\r\n\r\n* license-fix\r\n\r\n* fix checksums\r\n\r\n* Update py-hvace homepage\r\n\r\nCo-Authored-By: Adam J. Stewart <ajstewart426@gmail.com>\r\n\r\n* update py-hvac url\r\n\r\nCo-Authored-By: Adam J. Stewart <ajstewart426@gmail.com>",
          "is_bot": false,
          "headline": "Add dependencies for hpcrypt (#8067)",
          "author_name": "Greg Becker",
          "author_login": "becker33",
          "committed_at": "2019-12-18T23:09:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "135cf4835f5b646c4aaa0e2eb5552c80fc3a5ce8",
          "body": "…#14124)",
          "is_bot": false,
          "headline": "amrex: Define module directry when compiling with Fujitsu compiler. (…",
          "author_name": "t-karatsu",
          "author_login": "t-karatsu",
          "committed_at": "2019-12-18T19:47:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52894f5c718bb3b4605e2f1dc7ed09ffb9aab18c",
          "body": "pkgconfig is the virtual provider, pkg-config is an implementation.",
          "is_bot": false,
          "headline": "Fix pkgconfig dependencies (#14175)",
          "author_name": "Michael Kuhn",
          "author_login": "michaelkuhn",
          "committed_at": "2019-12-18T19:46:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5052ce803d73aac0b8ce84280cb054623f129b87",
          "body": "Added checksum for recent 1.12.1 release.",
          "is_bot": false,
          "headline": "PNETCDF: Update to include latest release 1.12.1 (#14213)",
          "author_name": "Greg Sjaardema",
          "author_login": "gsjaardema",
          "committed_at": "2019-12-18T19:45:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99a19596c4dd9b928c48d3e3bcac0a41c1276600",
          "body": "Added checksum and tag name for last two SEACAS releases.",
          "is_bot": false,
          "headline": "SEACAS: Update to include new versions (#14212)",
          "author_name": "Greg Sjaardema",
          "author_login": "gsjaardema",
          "committed_at": "2019-12-18T19:45:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52ebc19b4e0401e66d292c8f5090c73830dce2e4",
          "body": "doesn't understand a custom, user-defined compiler version.  However, if\nthe compiler's version check fails, you can't build anything with the\ncustom compiler.\n\n- [x] Be more lenient: fall back to the custom compiler version and use\n  it verbatim if the version check fails.",
          "is_bot": false,
          "headline": "bugfix: don't fail if checking for \"real\" compiler version",
          "author_name": "Todd Gamblin",
          "author_login": "tgamblin",
          "committed_at": "2019-12-18T19:37:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4eb54b6358c5825d69558662d0ef1787e75a24ab",
          "body": "`pgcc -V` was failing on power machines because it returns 2 (despite\ncorrectly printing version information).  On x86_64 machines the same\ncommand returns 0 and doesn't cause an error.\n\n- [x] Ignore return value of 2 for pgcc when doign a version check",
          "is_bot": false,
          "headline": "bugfix: `pgcc -V` returns 2 on power machines",
          "author_name": "Todd Gamblin",
          "author_login": "tgamblin",
          "committed_at": "2019-12-18T19:37:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa5e8aa87670fdd437a7a159d8dcb74187d46155",
          "body": null,
          "is_bot": false,
          "headline": "wireshark: remove non-existing dependencies (#14209)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-18T18:55:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09b17ea147af6f9a1ad4d3b0fef289b7656e9171",
          "body": null,
          "is_bot": false,
          "headline": "py-scikit-optimize: fix test dependency (#14210)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-18T18:47:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0607579fd381ee6ee1d637f0bb760ab0d1d34d2d",
          "body": "* package py-zc-lockfile\r\n\r\n* package py-zc-lockfile\r\n\r\n* autopep8, docutils cleanup\r\n\r\n* Update var/spack/repos/builtin/packages/py-zc-lockfile/package.py\r\n\r\nCo-Authored-By: Adam J. Stewart <ajstewart426@gmail.com>\r\n\r\n* Update var/spack/repos/builtin/packages/py-zc-lockfile/package.py\r\n\r\nCo-Authored-By: Adam J. Stewart <ajstewart426@gmail.com>\r\n\r\n* dependency at wrong level\r\n\r\n* license bits\r\n\r\n* Remove py-zc-buildout dependency",
          "is_bot": false,
          "headline": "New package: py-zc-lockfile (#13586)",
          "author_name": "Marc Mengel",
          "author_login": "marcmengel",
          "committed_at": "2019-12-18T18:17:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "201a62d957c3d00450b4b259ab27b564ea8553a4",
          "body": "* add new package : filebench\r\n\r\n* remove alpha version and duplicated autoheader cmd\r\n\r\n* refine automake cmd in sh()\r\n\r\n* refine filebench url as a stable tarball link",
          "is_bot": false,
          "headline": "add new package : filebench (#14158)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-18T17:30:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a1b6e1cfc167eece90c01f9872a6ca99f4b6ede",
          "body": "* add new package : hama\r\n\r\n* mv hama/hama/package.py to hama/package.py",
          "is_bot": false,
          "headline": "add new package : hama (#14159)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-18T17:29:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e12c49c28598de591d178c2769815c53c1389cf",
          "body": "* add new package : hbase\r\n\r\n* add hbase description\r\n\r\n* refine hbase version and depends",
          "is_bot": false,
          "headline": "Hbase (#14161)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-18T17:29:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae3eac0b1946ce76b578c9c40d994a601a223761",
          "body": "…ng. (#14203)\n\n* root: Rationalize and improve version, variant and ROOT option handling.\r\n\r\n* Completely re-vamp CMake option handling for readability and maintainability:\r\n  * Three categories of option: control, builtin and feature, alphabetically sorted.\r\n  * Each option is described as a list: \n[…]\nn `-Dcxx=X`.\r\n* Remove old version 5.34.38 (wrong build system).\r\n\r\nSee README.md for more details of option-related changes.\r\n\r\n* Flake8\r\n\r\n* `rpath` option is a control option rather than a feature.",
          "is_bot": false,
          "headline": "root: Rationalize and improve version, variant and ROOT option handli…",
          "author_name": "Chris Green",
          "author_login": "greenc-FNAL",
          "committed_at": "2019-12-18T17:14:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3511245ca4d0fa7dd87f9fc19c770c70771330e8",
          "body": null,
          "is_bot": false,
          "headline": "Add abseil-cpp package (#14208)",
          "author_name": "Jimmy Tang",
          "author_login": "jcftang",
          "committed_at": "2019-12-18T15:33:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9583bde7390473918358b057f50a5b259aca6af2",
          "body": "* Add new DD4hep release and some forgotten build requirements\r\n\r\n* PR review suggestions\r\n\r\nUse master naming convention for development branch, and put versions in decreasing order.",
          "is_bot": false,
          "headline": "Add new DD4hep release and some forgotten build requirements (#14195)",
          "author_name": "Hadrien G",
          "author_login": "HadrienG2",
          "committed_at": "2019-12-18T15:32:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a24b973fa4ca80f867a0167ed66beb6aabec0e08",
          "body": null,
          "is_bot": false,
          "headline": "package/gdal add v2.4.3 (#14204)",
          "author_name": "Sinan",
          "author_login": "Sinan81",
          "committed_at": "2019-12-18T03:57:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60a22f1a7a71a7387235b7daa5b9d96d2824050c",
          "body": "* rose: Update boost dependency for rose\r\n\r\n* rose: Updated rose to version 0.9.12.45\r\n\r\n* rose: Updated jdk dependency\r\n\r\n* rose: Updated rose to version 0.9.13.0\r\n\r\n* rose: Fixed formatting\r\n\r\n* rose: Added maintainer and switch dependency to java@8",
          "is_bot": false,
          "headline": "Update and Fix ROSE Package (#14186)",
          "author_name": "Nathan Pinnow",
          "author_login": "pinnown",
          "committed_at": "2019-12-18T00:18:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5db646d7686e682e7686ff2b8f44a13c42bfd990",
          "body": "Add the latest release of openPMD-api, v0.10.2",
          "is_bot": false,
          "headline": "openPMD-api: 0.10.2 (#14201)",
          "author_name": "Axel Huebl",
          "author_login": "ax3l",
          "committed_at": "2019-12-18T00:16:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07f522bed6a285507aadd66df89b14022e1e2a04",
          "body": "* add new package : openresty\r\n\r\n* remove rc version",
          "is_bot": false,
          "headline": "add new package : openresty (#14169)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-17T20:30:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a0d15a5c9148065fd6460306c5483d99177ff9b",
          "body": "* add new package : nicstat\r\n\r\n* refine nicstat edit operation\r\n\r\n* refine CMODEL regex expression",
          "is_bot": false,
          "headline": "add new package : nicstat (#14173)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-17T20:29:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc69256a5981c2d3ed65084580bef105c57361fd",
          "body": "* Added package for Half C++ header-only library.\r\n\r\nFixed an checksum for Hydrogen 1.3.2.  Cleaned up the Clara package to\r\nnot create an empty bin directory.\r\n\r\n* Fixed flake8\r\n\r\n* Added maintainer",
          "is_bot": false,
          "headline": "Added package for Half C++ header-only library. (#14189)",
          "author_name": "Brian Van Essen",
          "author_login": "bvanessen",
          "committed_at": "2019-12-17T20:29:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a52df46e2cfc81f15c2ecfa4536500e0e8cec1f2",
          "body": "* add new package : haproxy\r\n\r\n* add url_for_version() and refine haproxy build code",
          "is_bot": false,
          "headline": "add new package : haproxy (#14160)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-17T18:50:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd8be44f62a9989742a88e2c287d4afb7bc416ef",
          "body": "* add new package : cosbench\r\n\r\n* add cosbench depends and remove unstable version\r\n\r\n* Update var/spack/repos/builtin/packages/cosbench/package.py\r\n\r\nCo-Authored-By: Adam J. Stewart <ajstewart426@gmail.com>\r\n\r\n* Update var/spack/repos/builtin/packages/cosbench/package.py\r\n\r\nCo-Authored-By: Adam J. Stewart <ajstewart426@gmail.com>",
          "is_bot": false,
          "headline": "add new package : cosbench (#14171)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-17T18:48:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f657f73e9477fcd3b6495af3c022f380b4656ded",
          "body": "* tf verbosity\r\n\r\n* Add more debug flags\r\n\r\n\tmodified:   var/spack/repos/builtin/packages/py-tensorflow/package.py\r\n\r\n* Fix later\r\n\r\n* More debug/verbose options.\r\n\r\n\tmodified:   var/spack/repos/builtin/packages/py-tensorflow/package.py",
          "is_bot": false,
          "headline": "tf verbosity to better enable debugging (#14177)",
          "author_name": "Sajid Ali",
          "author_login": "s-sajid-ali",
          "committed_at": "2019-12-17T18:46:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a41380649fa46cfb18b0892275cf899f759954a",
          "body": null,
          "is_bot": false,
          "headline": "sollve: add a version 1.0a2 (#14188)",
          "author_name": "Shintaro Iwasaki",
          "author_login": "shintaro-iwasaki",
          "committed_at": "2019-12-17T18:38:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bda848cb92372a699c36241ae58ab042fd8790e",
          "body": null,
          "is_bot": false,
          "headline": "LAMMPS: Fix USER-REAXC package variant (#14192)",
          "author_name": "Yuanqi Wang",
          "author_login": "plasmas",
          "committed_at": "2019-12-17T18:35:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18c2029fef2725396d95b9ff7d11bb61ae8037a8",
          "body": "Thanks!",
          "is_bot": false,
          "headline": "Fix argparse rST parsing of help messages (#14014)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-17T18:23:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "189eb5b883517c57d026b22732c0019e51bb4671",
          "body": null,
          "is_bot": false,
          "headline": "Add py-scipy 1.4.0 (#14193)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-17T16:00:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d831db37ca62cfff2545a26dc72dcbe1cfce3031",
          "body": null,
          "is_bot": false,
          "headline": "adios2: Fix use of builtin __clear_cache (#14123)",
          "author_name": "t-karatsu",
          "author_login": "t-karatsu",
          "committed_at": "2019-12-17T13:08:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5eca4f14706a9590407f14c9c76e5a8bb663e9df",
          "body": "Vendors for ARM come out of `/proc/cpuinfo` as hex numbers instead of readable strings.\r\n\r\n- Add support for associating vendor names with the hex numbers.\r\n- Also move these mappings from Python code to `microarchitectures.json`\r\n- Move darwin feature name mappings to `microarchitectures.json` as well",
          "is_bot": false,
          "headline": "microarchitectures: readable names for AArch64 vendors (#13825)",
          "author_name": "Massimiliano Culpo",
          "author_login": "alalazo",
          "committed_at": "2019-12-17T08:47:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4ff92e42dbbb4c6a302da31a4424759ac84c58b",
          "body": "MRNet had an optional dependency on `cti`, which doesn't exist.  Remove\r\nit from the repo, at least until someone adds `cti` back.",
          "is_bot": false,
          "headline": "mrnet: remove nonexisting cti dependency (#14178)",
          "author_name": "Todd Gamblin",
          "author_login": "tgamblin",
          "committed_at": "2019-12-17T03:03:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ceec7e21984db4ddb51756a6178e6c305b27238",
          "body": null,
          "is_bot": false,
          "headline": "Harden shell detection when procfs is available (#13950)",
          "author_name": "Massimiliano Culpo",
          "author_login": "alalazo",
          "committed_at": "2019-12-16T22:51:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e366d5b5591db1e39e4ccd99528b4cafb7e76518",
          "body": null,
          "is_bot": false,
          "headline": "New ACTS version (#14180)",
          "author_name": "Hadrien G",
          "author_login": "HadrienG2",
          "committed_at": "2019-12-16T16:25:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ece934084c98fd2f539bd9516e0fa51cbbcccb3",
          "body": "* add new package : py-s3cmd\r\n\r\n* add some depends and move depends behind the version",
          "is_bot": false,
          "headline": "add new package : py-s3cmd (#14166)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-16T16:20:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f80491826b9129ac2a8a5af7d08941d936eb12d0",
          "body": "Before this commit we used to run the entire unit test suite\r\nin the presence of a failure. Since we currently rely a lot\r\non the state of the filesystem etc. the end report was most\r\nof the time showing spurious failures that were a consequence\r\nof the first failing test.\r\n\r\nThis PR makes unit tests exit at the first failing test\r\n\r\nAlso, pin codecov at v4.5.4 (last one supporting Python 2.6)",
          "is_bot": false,
          "headline": "Travis exits at the first failing test, pin codecov at v4.5.4 (#14179)",
          "author_name": "Massimiliano Culpo",
          "author_login": "alalazo",
          "committed_at": "2019-12-16T09:56:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f1d7286462dbfe25bd7ad67a56af06e8a17e28e",
          "body": null,
          "is_bot": false,
          "headline": "match bootstrapped compiler to architecture (#14059)",
          "author_name": "Greg Becker",
          "author_login": "becker33",
          "committed_at": "2019-12-15T00:42:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60580f587179f57e182f9ff957dc96c3ac079c0a",
          "body": "* when constructing package hash, default to including a method in the content hash if we can't determine whether it would be included by examining the AST\r\n* add a test for updated content-hash calculations\r\n* refactor content hash tests to eliminate repeated lines",
          "is_bot": false,
          "headline": "package hash: gracefully handle @when with non-string args (#14153)",
          "author_name": "Peter Scheibel",
          "author_login": "scheibelp",
          "committed_at": "2019-12-14T22:31:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "410bce91d4f21c7870a13d223ba9fbc584cab478",
          "body": null,
          "is_bot": false,
          "headline": "hpctoolkit: update git branch for version 'gpu' (#14155)",
          "author_name": "Mark W. Krentel",
          "author_login": "mwkrentel",
          "committed_at": "2019-12-14T18:37:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34128ca70dde66d18459b8c9df60c52370eadb8c",
          "body": null,
          "is_bot": false,
          "headline": "Updated Hydrogen version to 1.3.2 (#14156)",
          "author_name": "Brian Van Essen",
          "author_login": "bvanessen",
          "committed_at": "2019-12-14T18:36:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e9fb6b309fea90d0ff161a4202180b9d0c4e43c",
          "body": null,
          "is_bot": false,
          "headline": "add new package : memcached (#14162)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-14T18:28:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "986df8c2330e4b94a162ba22f0596651abea56ef",
          "body": null,
          "is_bot": false,
          "headline": "add new package : jstorm (#14163)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-14T18:27:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f0e2c4397e71ec85ccbbdfed168f6d3775a72ee",
          "body": null,
          "is_bot": false,
          "headline": "add new package : logstash (#14164)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-14T18:26:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72390ecd6285efa58cbbabd4b48759f82863f16a",
          "body": null,
          "is_bot": false,
          "headline": "add new package : pig (#14165)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-14T18:26:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43712b4982901b317255692877e5874825bb92f9",
          "body": null,
          "is_bot": false,
          "headline": "add new package : rabbitmq (#14167)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-14T18:21:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f4521d418fba6450caf6b2d75ad1d628be61526",
          "body": null,
          "is_bot": false,
          "headline": "add new package : zookeeper (#14170)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-14T18:19:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f40520c6bf22bd7da345dd93eaf1071cb332b667",
          "body": null,
          "is_bot": false,
          "headline": "add new package : bind9 (#14172)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-14T18:16:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "33028c8955e8d1b65416e52169a53b40d9a0dbe4",
          "body": null,
          "is_bot": false,
          "headline": "add new package : rt-tests (#14174)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-14T18:12:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f757b6f4e5e74843c48cc655e8cb5d1efe58826f",
          "body": "…14128)\n\n* Patch: explicitly use xbitmaps include dir in the automake package\r\n\r\n* Added dependencies required for autoreconf: libtool, autoconf, automake, m4",
          "is_bot": false,
          "headline": "Patch: explicitly use xbitmaps include dir in the automake package (#…",
          "author_name": "Andras Wacha",
          "author_login": "awacha",
          "committed_at": "2019-12-14T16:54:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e668b115378dbb9f68d6ac6d88dd6d8b53d12bb",
          "body": "* add new package : cassandra\r\n\r\n* make stable version as a preferred one",
          "is_bot": false,
          "headline": "add new package : cassandra (#14144)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-14T04:21:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43e9fe95eae9de2fba1f4e9dcec4a7cfcafa2933",
          "body": null,
          "is_bot": false,
          "headline": "Add latest version of jq (#14134)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-13T21:44:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f589f69a6c464fe1b0dd3e0541011220718b8fea",
          "body": "* making berkeley-db package fetch from oracle website\r\n\r\n* removed blank space\r\n\r\n* making flake8 happy\r\n\r\n* fixing typos and order of versions",
          "is_bot": false,
          "headline": "FIX: Making berkeley-db package fetch from correct links (#14147)",
          "author_name": "Matthieu Dorier",
          "author_login": "mdorier",
          "committed_at": "2019-12-13T21:19:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0167ceb10437311e6c8ae5541492e0034130214f",
          "body": "* Add shared option to ParaView.\r\n\r\n* Use append for one attribute",
          "is_bot": false,
          "headline": "Add shared option to ParaView. (#14131)",
          "author_name": "Dan Lipsa",
          "author_login": "danlipsa",
          "committed_at": "2019-12-13T21:19:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83baf35246c4de05cf08d18e384139c64f3dfe89",
          "body": null,
          "is_bot": false,
          "headline": "Add new aws-parallelcluster package (#14139)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-13T18:55:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "268914e7a29231da882457a6e4744c9661526a73",
          "body": null,
          "is_bot": false,
          "headline": "Add latest version of py-tabulate (#14138)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-13T18:54:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "988b377382c5fcb0eec12798e756b64ba7fd8006",
          "body": null,
          "is_bot": false,
          "headline": "Add latest version of py-ipaddress (#14137)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-13T18:54:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da501564cb12751814f51cd713f80e3eec5b2406",
          "body": null,
          "is_bot": false,
          "headline": "Add latest version of py-botocore (#14136)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-13T18:54:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5db615fecadc18f5364d03499a9d1c73f70228a2",
          "body": null,
          "is_bot": false,
          "headline": "Add latest version of py-boto3 (#14135)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-13T18:54:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e19a9343b15df4a9e690b7b57fb8ce29f1ef56d",
          "body": null,
          "is_bot": false,
          "headline": "Add latest version of oniguruma (#14133)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-13T18:53:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6594083685632c4f5cb8011417bdfe8d0245cd1",
          "body": null,
          "is_bot": false,
          "headline": "Update CMake to version 3.16 (#14152)",
          "author_name": "Seth R. Johnson",
          "author_login": "sethrj",
          "committed_at": "2019-12-13T18:53:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e5c926a95fa45196a3bdb892f8f1cc076c4543e",
          "body": null,
          "is_bot": false,
          "headline": "gmodel: fix error (#14140)",
          "author_name": "noguchi-k",
          "author_login": "noguchi-k",
          "committed_at": "2019-12-13T18:53:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "481a920fe89ea7f0e518b8cf815f966715b20ca3",
          "body": null,
          "is_bot": false,
          "headline": "add new package : activemq (#14142)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-13T18:51:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3344bb0a967c4217f6fa1d701b2c4dfb89d578aa",
          "body": null,
          "is_bot": false,
          "headline": "add new package : alluxio (#14143)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-13T18:51:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2520806df263c0137617bc2449e3c46178e9515c",
          "body": "* docker: add missing module to ubuntu images\r\n* docker: fix issue with missing locale\r\n* docker: one package per line + rm python2 support\r\n* docker: ubuntu image also needs 'file' for buildcache creation",
          "is_bot": false,
          "headline": "docker: add `file`, adjust locale, and use python3 for ubuntu (#13508)",
          "author_name": "Scott Wittenburg",
          "author_login": "scottwittenburg",
          "committed_at": "2019-12-13T18:22:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f5724e908334523583c2f4e132639ee14def462",
          "body": "Prevent `spack help install` from getting too cluttered with CDash-specific documentation.",
          "is_bot": false,
          "headline": "Split out CDash options to a separate help document (#13704)",
          "author_name": "Zack Galbreath",
          "author_login": "zackgalbreath",
          "committed_at": "2019-12-13T18:15:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c2305e86714f61da1a5415e8cd1831b75ab2f14",
          "body": null,
          "is_bot": false,
          "headline": "Patch fetching: remove unnecessary argument",
          "author_name": "Peter Josef Scheibel",
          "author_login": "scheibelp",
          "committed_at": "2019-12-13T07:38:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8199f22e7c31c6f9e2c70ac7e45a6d98414a5310",
          "body": "BundlePackages use a noop fetch strategy. The mirror logic was assuming\nthat the fetcher had a resource to cach after performing a fetch. This adds\na special check to skip caching if the stage is associated with a\nBundleFetchStrategy. Note that this should allow caching resources\nassociated with BundlePackages.",
          "is_bot": false,
          "headline": "Mirrors: skip attempts to fetch BundlePackages",
          "author_name": "Peter Josef Scheibel",
          "author_login": "scheibelp",
          "committed_at": "2019-12-13T07:38:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b62ba7609d524d3bd7d03dd29ba4841c22ccd43d",
          "body": "When updating a mirror, Spack was re-retrieving all patches (since the\nfetch logic for patches is separate). This updates the patch logic to\nallow the mirror logic to avoid this.",
          "is_bot": false,
          "headline": "Mirrors: avoid re-downloading patches",
          "author_name": "Peter Josef Scheibel",
          "author_login": "scheibelp",
          "committed_at": "2019-12-13T07:38:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "754dd6eb1fcf933f446c9288f74383c8feab9c31",
          "body": "Since cache_mirror does the fetch itself, it also needs to do the\nchecksum itself if it wants to verify that the source stored in the\nmirror is valid. Note that this isn't strictly required because fetching\n(including from mirrors) always separately verifies the checksum.",
          "is_bot": false,
          "headline": "Mirrors: perform checksum of fetched sources",
          "author_name": "Peter Josef Scheibel",
          "author_login": "scheibelp",
          "committed_at": "2019-12-13T07:38:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2cc50aa6ab1cfb36ba618dca8849a304011a4b2",
          "body": "The targets for the cosmetic paths in mirrrors were being calculated\nincorrectly as of fb3a3ba: the symlinks used relative paths as targets,\nand the relative path was computed relative to the wrong directory.",
          "is_bot": false,
          "headline": "Mirrors: fix cosmetic symlink targets",
          "author_name": "Peter Josef Scheibel",
          "author_login": "scheibelp",
          "committed_at": "2019-12-13T07:38:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b64f458102e24d1b1e358083bbbfa2676cb3b824",
          "body": "When creating a cosmetic symlink for a resource in a mirror, remove\nit if it already exists. The symlink is removed in case the logic to\ncreate the symlink has changed.",
          "is_bot": false,
          "headline": "Allow repeated invocations of 'mirror create'",
          "author_name": "Peter Josef Scheibel",
          "author_login": "scheibelp",
          "committed_at": "2019-12-13T07:38:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03203a86b4337559c9db10bfcbcb186709430e99",
          "body": "* fix libev url\r\n\r\n* remove list_url in libev",
          "is_bot": false,
          "headline": "fix libev url (#14066)",
          "author_name": "darmac",
          "author_login": "darmac",
          "committed_at": "2019-12-13T04:58:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d7b9de3be0d6b32c72088c8299b44a91a615093",
          "body": null,
          "is_bot": false,
          "headline": "compile python with sqlite loadable extensions (#14132)",
          "author_name": "Sinan",
          "author_login": "Sinan81",
          "committed_at": "2019-12-13T04:58:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddfca1b2f260678078bcaf3b3bb7c82a762639e9",
          "body": null,
          "is_bot": false,
          "headline": "cmake: Fix checksum of 4075.patch (#14125)",
          "author_name": "t-karatsu",
          "author_login": "t-karatsu",
          "committed_at": "2019-12-12T18:57:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d98b433a3c14af5aaba03fd439f6e47cb970bac6",
          "body": null,
          "is_bot": false,
          "headline": "Fix py-jupyter-client version ranges (#14126)",
          "author_name": "iarspider",
          "author_login": "iarspider",
          "committed_at": "2019-12-12T17:31:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2f45fb4daad1c86606fb13ca35ee973a3ac6198",
          "body": "* charmpp: fix build failing from broken hardlink\r\n\r\n* charmpp: use setup_dependent_build_environment",
          "is_bot": false,
          "headline": "charmpp: fix build failing from broken hardlink (#13922)",
          "author_name": "Justin S",
          "author_login": "codeandkey",
          "committed_at": "2019-12-12T02:20:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fec3a852c74febda1c16abe5f5dfe618cbb8c69b",
          "body": "PR #13975 added makefile filtering to replace gcc/g++ with the spack\r\ncompiler. This conflicts with other filtering that is done in the package to\r\nadd paths for dependencies. The text of the dependency paths might\r\nhave 'gcc' in the path name, depending on the install_path_scheme, and\r\nthat was bei\n[…]\n mangle\r\nthe path to the dependecy resulting in a failed build.\r\n\r\nThis PR moves the compiler filters to be before the other filters to\r\nmake sure that the compiler is set before the dependency paths.",
          "is_bot": false,
          "headline": "Fix replacement of embedded 'gcc' in augustus (#14116)",
          "author_name": "Glenn Johnson",
          "author_login": "glennpj",
          "committed_at": "2019-12-12T02:19:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "695c09a8b7d46533f09e4a742463b5e6c0c6ee22",
          "body": "* Add missing dependency on setuptools to py-subprocess32\r\n\r\n* Update package.py\r\n\r\n* Update var/spack/repos/builtin/packages/py-subprocess32/package.py\r\n\r\nCo-Authored-By: Adam J. Stewart <ajstewart426@gmail.com>\r\n\r\n* Update package.py",
          "is_bot": false,
          "headline": "Add missing dependency on setuptools to py-subprocess32 (#14074)",
          "author_name": "iarspider",
          "author_login": "iarspider",
          "committed_at": "2019-12-12T02:18:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53f73e280a04f956d0e5a9059d1ac273f111910e",
          "body": null,
          "is_bot": false,
          "headline": "Bugfix for bad hydrogen tags (#14119)",
          "author_name": "Brian Van Essen",
          "author_login": "bvanessen",
          "committed_at": "2019-12-12T02:17:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f9d37c3464cf9867ed8e7960d27d11eff0d323a",
          "body": "* TensorFlow: must specify CUDA compute capabilities\r\n\r\n* Correctly restrict cuda_arch version ranges",
          "is_bot": false,
          "headline": "TensorFlow: must specify CUDA compute capabilities (#14118)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-12T02:16:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ec1917d9b7141b5eda59a5fbd0890936150653a",
          "body": null,
          "is_bot": false,
          "headline": "Add try-except for Python installation (#14122)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-12T02:16:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47615566eadeb0043c586912243e612a4ce94661",
          "body": null,
          "is_bot": false,
          "headline": "Fix JDK 8 download URLs (#14120)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-12T02:16:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aac45154fd1683fefc34e58d9bacfadcdc8dc0d8",
          "body": "* Fix py-ppft source extension\r\n\r\n* PEP-8 fix\r\n\r\n* Update package.py\r\n\r\n* Apply suggestions from code review\r\n\r\nCo-Authored-By: Adam J. Stewart <ajstewart426@gmail.com>",
          "is_bot": false,
          "headline": "Fix py-ppft source extension (#14077)",
          "author_name": "iarspider",
          "author_login": "iarspider",
          "committed_at": "2019-12-11T20:05:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d07e988fbcd7698a7776e71aecb7eaabdbdb05be",
          "body": "* Fix py-pox build recipe\r\n\r\n* PEP-8 fix\r\n\r\n* Update package.py\r\n\r\n* Apply suggestions from code review\r\n\r\nCo-Authored-By: Adam J. Stewart <ajstewart426@gmail.com>",
          "is_bot": false,
          "headline": "Fix py-pox build recipe (#14078)",
          "author_name": "iarspider",
          "author_login": "iarspider",
          "committed_at": "2019-12-11T20:04:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a254f7011eb9d48f3c5995d2794f9d014bffc834",
          "body": "* Fix py-notebook for Python2\r\n\r\n* PEP-8 fix\r\n\r\n* Update package.py\r\n\r\n* Update package.py\r\n\r\n* Syntax fix\r\n\r\n* Update var/spack/repos/builtin/packages/py-notebook/package.py\r\n\r\nCo-Authored-By: Adam J. Stewart <ajstewart426@gmail.com>",
          "is_bot": false,
          "headline": "Fix py-notebook for Python2 (#14079)",
          "author_name": "iarspider",
          "author_login": "iarspider",
          "committed_at": "2019-12-11T20:04:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34adebc7cf24d5ade731745149de3c423b8874b0",
          "body": "* Fix py-hypothesis\r\n\r\n* Update package.py\r\n\r\n* Update package.py\r\n\r\n* Update package.py",
          "is_bot": false,
          "headline": "Fix py-hypothesis (#14084)",
          "author_name": "iarspider",
          "author_login": "iarspider",
          "committed_at": "2019-12-11T20:04:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f7a58b142cf30ffdc8bff074742d4f658ab3e2f",
          "body": null,
          "is_bot": false,
          "headline": "Fix constexpr for llvm 9.0 (#14095)",
          "author_name": "Dan Lipsa",
          "author_login": "danlipsa",
          "committed_at": "2019-12-11T20:03:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "69a91b5b6b305ffb0d8d2d2ce1a15616ee88bdef",
          "body": null,
          "is_bot": false,
          "headline": "Add grass 7.8.2 (#14115)",
          "author_name": "Adam J. Stewart",
          "author_login": "adamjstewart",
          "committed_at": "2019-12-11T20:00:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee0b9bfa5b1322bfc490b2e571db0e7f33e34b85",
          "body": null,
          "is_bot": false,
          "headline": "Added new versions of hydrogen (#14103)",
          "author_name": "Brian Van Essen",
          "author_login": "bvanessen",
          "committed_at": "2019-12-11T18:23:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 28,
      "commits_last_year": 0,
      "latest_release_at": "2021-02-19T19:06:33Z",
      "latest_release_tag": "v0.16.1",
      "releases_from_tags": true,
      "days_since_last_push": 1089,
      "active_weeks_last_year": 0,
      "days_since_latest_release": 1983,
      "mean_days_between_releases": 40.2
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": []
    },
    "popularity": {
      "forks": 1,
      "stars": 0,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2017-01-21",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "lib/spack/docs/Makefile",
        "lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile",
        "lib/spack/spack/test/data/make/affirmative/check_test/Makefile",
        "lib/spack/spack/test/data/make/affirmative/expansion/Makefile",
        "lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile",
        "lib/spack/spack/test/data/make/affirmative/include/Makefile",
        "lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile",
        "lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile",
        "lib/spack/spack/test/data/make/affirmative/spaces/Makefile",
        "lib/spack/spack/test/data/make/affirmative/test_check/Makefile",
        "lib/spack/spack/test/data/make/affirmative/three_targets/Makefile",
        "lib/spack/spack/test/data/make/negative/partial_match/Makefile",
        "lib/spack/spack/test/data/make/negative/variable/Makefile",
        "var/spack/repos/builtin/packages/alglib/Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 172983,
      "source_files_sampled": 4461,
      "oversized_source_files": 4,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [],
      "dependencies": [],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 7,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "tgamblin",
          "commits": 2313,
          "avatar_url": "https://avatars.githubusercontent.com/u/299842?v=4"
        },
        {
          "type": "User",
          "login": "adamjstewart",
          "commits": 1291,
          "avatar_url": "https://avatars.githubusercontent.com/u/12021217?v=4"
        },
        {
          "type": "User",
          "login": "alalazo",
          "commits": 757,
          "avatar_url": "https://avatars.githubusercontent.com/u/4199709?v=4"
        },
        {
          "type": "User",
          "login": "davydden",
          "commits": 520,
          "avatar_url": "https://avatars.githubusercontent.com/u/8023934?v=4"
        },
        {
          "type": "User",
          "login": "becker33",
          "commits": 418,
          "avatar_url": "https://avatars.githubusercontent.com/u/13971568?v=4"
        },
        {
          "type": "User",
          "login": "hartzell",
          "commits": 314,
          "avatar_url": "https://avatars.githubusercontent.com/u/312978?v=4"
        },
        {
          "type": "User",
          "login": "eschnett",
          "commits": 285,
          "avatar_url": "https://avatars.githubusercontent.com/u/213514?v=4"
        },
        {
          "type": "User",
          "login": "michaelkuhn",
          "commits": 281,
          "avatar_url": "https://avatars.githubusercontent.com/u/4062614?v=4"
        },
        {
          "type": "User",
          "login": "healther",
          "commits": 228,
          "avatar_url": "https://avatars.githubusercontent.com/u/4048699?v=4"
        },
        {
          "type": "User",
          "login": "scheibelp",
          "commits": 227,
          "avatar_url": "https://avatars.githubusercontent.com/u/1659704?v=4"
        }
      ],
      "contributors_sampled": 100,
      "top_contributor_share": 0.202
    },
    "quality_signals": {
      "has_ci": false,
      "has_tests": true,
      "ci_workflows": [],
      "has_docs_dir": false,
      "linter_configs": [
        ".flake8"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 95 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": null,
            "reason": "no workflows found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 9,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": null,
            "reason": "No tokens found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "bcb534541c4f5b925585cb390b42f2a6fadbe6fb",
        "ran_at": "2026-07-26T19:07:32Z",
        "aggregate_score": 2.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": null,
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/eschnett/spack",
    "host": "github.com",
    "name": "spack",
    "owner": "eschnett"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "critical",
      "name": "Overall health",
      "note": "Abandonment Policy applies a 85% multiplier to weighted overall health.",
      "notes": [
        {
          "code": "abandonment_overall_adjustment",
          "params": {
            "cap": 0,
            "pct": 85
          }
        }
      ],
      "value": 27,
      "inputs": {
        "security": 27,
        "vitality": 20,
        "community": 9,
        "governance": 55,
        "engineering": 40,
        "abandonment_cap": null,
        "abandonment_state": "at_risk",
        "abandonment_multiplier": 85,
        "weighted_overall_before_abandonment": 32,
        "overall_after_abandonment_multiplier": 27
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "critical",
        "name": "Vitality",
        "value": 20,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "commits_last_year": 0,
              "human_commit_share": 1,
              "days_since_last_push": 1089,
              "active_weeks_last_year": 0
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1089 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1089
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "0/52 weeks with commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "0 commits in the last year",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 48,
            "inputs": {
              "releases_count": 28,
              "latest_release_tag": "v0.16.1",
              "releases_from_tags": true,
              "days_since_latest_release": 1983,
              "mean_days_between_releases": 40.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "28 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 28
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 1983 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 1983
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~40.2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 40.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "cap": null,
              "state": "at_risk",
              "guards": [
                "no_open_demand"
              ],
              "signals": [
                "release_stall",
                "scorecard_unmaintained"
              ],
              "red_flag": true,
              "multiplier_pct": 85,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": 0,
              "unanswered_open_issues": 0,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 2410,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "no human commit for 2410 days; 2 unmet obligation(s): releases stalled, Scorecard reports it unmaintained",
                "points": 85,
                "status": "partial",
                "details": [
                  {
                    "code": "abandonment_flagged",
                    "params": {
                      "days": 2410,
                      "count": 2,
                      "signals": "releases stalled, Scorecard reports it unmaintained"
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 9,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 1,
              "stars": 0,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 19,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file present, not a recognized license",
                "points": 16.9,
                "status": "partial",
                "details": [
                  {
                    "code": "license_custom",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 55,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "excellent",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 93,
            "inputs": {
              "bus_factor": 7,
              "contributors_sampled": 100,
              "top_contributor_share": 0.202
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "7 contributor(s) cover half of all commits",
                "points": 51.3,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 20% of commits",
                "points": 18,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 20
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "100 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 95 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "0/1 decided PRs merged",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 0,
                      "decided": 1
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 65,
            "inputs": {
              "followers": 241,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "eschnett",
              "public_repos": 350,
              "account_age_days": 5990
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "241 followers of eschnett",
                "points": 17.1,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 241,
                      "login": "eschnett"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "350 public repos, account ~16 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 350
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 16
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 40,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 50,
            "inputs": {
              "has_ci": false,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".flake8",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".flake8"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "critical",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": "http://scalability-llnl.github.io/spack",
              "has_readme": false,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "http://scalability-llnl.github.io/spack",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "critical",
        "name": "Security",
        "value": 27,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "dangerous_workflow",
                    "packaging",
                    "signed_releases",
                    "token_permissions"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 27,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 13,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 5,
              "scorecard_aggregate": 2.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 95 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no workflows found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "No tokens found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 15
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 53,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.97,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "97 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 97,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [
                "lib/spack/docs/Makefile",
                "lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile",
                "lib/spack/spack/test/data/make/affirmative/check_test/Makefile",
                "lib/spack/spack/test/data/make/affirmative/expansion/Makefile",
                "lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile",
                "lib/spack/spack/test/data/make/affirmative/include/Makefile",
                "lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile",
                "lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile",
                "lib/spack/spack/test/data/make/affirmative/spaces/Makefile",
                "lib/spack/spack/test/data/make/affirmative/test_check/Makefile",
                "lib/spack/spack/test/data/make/affirmative/three_targets/Makefile",
                "lib/spack/spack/test/data/make/negative/partial_match/Makefile",
                "lib/spack/spack/test/data/make/negative/variable/Makefile",
                "var/spack/repos/builtin/packages/alglib/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "lib/spack/docs/Makefile, lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile, lib/spack/spack/test/data/make/affirmative/check_test/Makefile, lib/spack/spack/test/data/make/affirmative/expansion/Makefile, lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile, lib/spack/spack/test/data/make/affirmative/include/Makefile, lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile, lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile, lib/spack/spack/test/data/make/affirmative/spaces/Makefile, lib/spack/spack/test/data/make/affirmative/test_check/Makefile, lib/spack/spack/test/data/make/affirmative/three_targets/Makefile, lib/spack/spack/test/data/make/negative/partial_match/Makefile, lib/spack/spack/test/data/make/negative/variable/Makefile, var/spack/repos/builtin/packages/alglib/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lib/spack/docs/Makefile, lib/spack/spack/test/data/make/affirmative/capital_makefile/Makefile, lib/spack/spack/test/data/make/affirmative/check_test/Makefile, lib/spack/spack/test/data/make/affirmative/expansion/Makefile, lib/spack/spack/test/data/make/affirmative/gnu_makefile/GNUmakefile, lib/spack/spack/test/data/make/affirmative/include/Makefile, lib/spack/spack/test/data/make/affirmative/lowercase_makefile/makefile, lib/spack/spack/test/data/make/affirmative/prerequisites/Makefile, lib/spack/spack/test/data/make/affirmative/spaces/Makefile, lib/spack/spack/test/data/make/affirmative/test_check/Makefile, lib/spack/spack/test/data/make/affirmative/three_targets/Makefile, lib/spack/spack/test/data/make/negative/partial_match/Makefile, lib/spack/spack/test/data/make/negative/variable/Makefile, var/spack/repos/builtin/packages/alglib/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".flake8",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".flake8"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 172983,
              "source_files_sampled": 4461,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/4461 source files over 60KB",
                "points": 55,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 4461,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Community profile unavailable",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T19:07:52.957465Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/e/eschnett/spack.svg",
  "full_name": "eschnett/spack",
  "license_state": "custom",
  "license_spdx": null
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statistics.