Public record
Software health reportschema 0.30.0 · metrics 2.3.1 · 2026-08-04 00:56 UTC

eth-cscs / manta

Another CLI for Alps

Rust · ShellBSD-3-Clause★ 23 stars⑂ 4 forkssince Mar 2023View on GitHub ↗
KindLibraryCommand-line toolNetwork serviceTerminal interfacehow this is determined
#alps#cli#csm#productivity#cscs

eth-cscs/manta holds a health index of 78 out of 100, placing it in the Good band. It scores highest on Vitality (88/100) and lowest on Community & Adoption (42/100). It was last updated 15 days ago. A single contributor accounts for most of its recent work.

78
overall / 100
Good

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.

78
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

The weighted overall 67 is calibrated to 78 on the published index scale (record calibration 2026-08-02).

Ownership

Swiss National Supercomputing Center (CSCS)Organization
181 followers142 public repossince Oct 2013

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publishTags
crates.iomanta-cli1.71.141712722 days agocliproductivity
crates.iomanta-server2.0.0-beta.6211222 days ago—
crates.iomanta-shared2.0.0-beta.624205722 days ago—

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

88Excellent · 21% of overall

Development activity

87Excellent
How it's scored
28.8/36Push recency — last push 15 days ago
29.8/36Commit cadence — 43/52 weeks with commits
18/18Commit volume — 964 commits in the last year
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year964
human_commit_share0.89
days_since_last_push15
active_weeks_last_year43

Release discipline

90Excellent
How it's scored
27/27Ships releases — 100 releases published
36/36Release recency — latest release 22 days ago
27/27Release cadence — a release every ~2.3 days
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Inputs used
releases_count100
latest_release_tagv2.0.0-beta.62
releases_from_tagsno
days_since_latest_release22
mean_days_between_releases2.3

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

42Weak · 17% of overall

Popularity & adoption

30At Risk
How it's scored
21.8/60Stars — 23 stars
4/25Forks — 4 forks
4.7/15Watchers — 8 watchers
Inputs used
forks4
stars23
watchers8
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community health

50Moderate
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (BSD-3-Clause)
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
readme_badges0
has_contributingno
has_issue_templateno
has_code_of_conductno
readme_badge_services—
has_pull_request_templateno

Ecosystem adoption (downloads)

49Weak
How it's scored
39.1/80Monthly downloads — 848 downloads/month across crates
0/20Registry dependents — not reported by this ecosystem
Inputs used
packagesmanta-cli, manta-server, manta-shared
dependents—
ecosystemscrates
total_downloads5,424
monthly_downloads848
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

66Good · 23% of overall

Maintainer resilience (bus factor)

31At Risk
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
7.7/22.5Commit distribution — top contributor authored 66% of commits
8.1/13.5Contributor breadth — 6 contributors
6/10OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Inputs used
bus_factor1
contributors_sampled6
top_contributor_share0.659

Issue & PR responsiveness

77Good
How it's scored
38.6/42Issue resolution — 92% of issues closed
28.6/30PR acceptance — 20/21 decided PRs merged
0/13Newcomer PR acceptance — no first-time contributor's PR decided in 30d
0/15OpenSSF Scorecard: Code-Review — Found 1/30 approved changesets -- score normalized to 0
Inputs used
merged_prs20
open_issues7
closed_issues81
prs_merged_7d0
prs_decided_7d0
prs_merged_30d1
prs_decided_30d1
issue_closed_ratio0.92
closed_unmerged_prs1
first_time_authors_30d0
first_time_prs_merged_30d0
first_time_prs_decided_30d0
Excluded from scoring (no data or not applicable): newcomer_pr_acceptance. Remaining weights renormalized.

Ownership & stewardship

71Good
How it's scored
30/30Ownership backing — organization-owned
0/20Verified domain
16.2/25Owner reach — 181 followers of eth-cscs
25/25Track record — 142 public repos, account ~12 yr old
Inputs used
followers181
owner_typeOrganization
is_verified—
owner_logineth-cscs
public_repos142
account_age_days4,668

Package maintenance

100Exceptional
How it's scored
25/25Published & resolvable — 3 package(s) on crates
35/35Publish recency — latest publish 22 days ago
20/20Version history — 127 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesmanta-cli, manta-server, manta-shared
ecosystemscrates
any_deprecatedno
min_days_since_publish22

Engineering Quality

Are baseline engineering and documentation practices in place?

81Excellent · 19% of overall

Engineering practices

68Good
How it's scored
24/24CI workflows — 5 workflow(s)
24/24Tests present
0/16Linter config
0/9.6Pre-commit hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 3 out of 3 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configno
has_precommit_configno

Documentation

100Exceptional
How it's scored
30/30README
25/25Documentation directory
15/15Documentation / homepage site — https://eth-cscs.github.io/manta/
10/10Repository description
10/10Topics — 5 topics
10/10Wiki
Inputs used
topicsalps, cli, csm, productivity, cscs
has_wikiyes
homepagehttps://eth-cscs.github.io/manta/
has_readmeyes
has_docs_diryes
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

47Weak · 16% of overall

Security posture

47Weak
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5CI-Tests — 3 out of 3 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 1/30 approved changesets -- score normalized to 0
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated18
scorecard_versionv5.5.0
checks_inconclusive0
scorecard_aggregate4.7

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.

79Good · 4% of overall

Agent context & guidance

85Excellent
How it's scored
45/45Agent instructions — CLAUDE.md
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 88 of 89 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.989
agent_instruction_filesCLAUDE.md
agent_instruction_max_bytes2,147

Verify loop (build / test / typecheck)

66Good
How it's scored
12.6/18One-command bootstrap — Cargo.toml, crates/manta-cli/Cargo.toml, crates/manta-server/Cargo.toml (toolchain convention, no task runner)
22/22Automated tests
0/11Lint / format config
11/11Static type checking — Rust (statically typed)
10/10Reproducible environment — Dockerfile
10/10Demonstrated agent practice — 6 of the last 100 commits agent-authored or agent-credited
0/8Automated maintenance — no automated dependency updates observed
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfiles—
has_dockerfileyes
typed_languageyes
bootstrap_files—
has_devcontainerno
has_linter_configno
typecheck_configs—
agent_commit_share0.06
toolchain_manifestsCargo.toml, crates/manta-cli/Cargo.toml, crates/manta-server/Cargo.toml, crates/manta-shared/Cargo.toml
dependency_bot_commit_share0

Code legibility for models

100Exceptional
How it's scored
45/45Type-checkable code — Rust (statically typed)
55/55Manageable file sizes — 0/228 source files over 60KB
Inputs used
primary_languageRust
largest_source_bytes40,182
source_files_sampled228
oversized_source_files0

Machine-readable interfaces

80Excellent
How it's scored
40/40API schema (OpenAPI/GraphQL/proto) — crates/manta-cli/openapi.json
0/20MCP server
40/40Runnable examples — examples
Inputs used
example_dirsexamples
has_mcp_signalno
api_schema_filescrates/manta-cli/openapi.json

Key facts

23GitHub stars
6contributors
964commits, last 12 months
15days since last push
100releases
1bus factor
7open issues
crates.iopackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • No resolved dependencies carried a version and a supported ecosystem

More detail

Star and fork history 0 ★ / 4 ⇿
0Stars
4Forks

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

1223344412023-072024-022024-10

Each point covers 2 days.

OpenSSF Scorecard 4.7 / 10
4.7aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-08-04 00:56 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
10CI-Tests3 out of 3 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 1/30 approved changesets -- score normalized to 0
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
10Security-Policysecurity policy file detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Direct dependencies 70
RegistryPackageVersion constraintManifest
crates.iomanta-shared—crates/manta-cli/Cargo.toml
crates.ionodeset0.5.0crates/manta-cli/Cargo.toml
crates.iochrono0.4.41crates/manta-cli/Cargo.toml
crates.ioanyhow1.0.44crates/manta-cli/Cargo.toml
crates.ioreqwest0.13.4crates/manta-cli/Cargo.toml
crates.ioserde1.0.219crates/manta-cli/Cargo.toml
crates.ioserde_json1.0.140crates/manta-cli/Cargo.toml
crates.ioserde_yaml0.9.34crates/manta-cli/Cargo.toml
crates.iotracing0.1crates/manta-cli/Cargo.toml
crates.iotokio1.45crates/manta-cli/Cargo.toml
crates.iotokio-util0.7.4crates/manta-cli/Cargo.toml
crates.iominijinja—crates/manta-cli/Cargo.toml
crates.iouuid1.16.0crates/manta-cli/Cargo.toml
crates.iogit20.21crates/manta-cli/Cargo.toml
crates.iodialoguer0.12.0crates/manta-cli/Cargo.toml
crates.iofutures0.3.31crates/manta-cli/Cargo.toml
crates.iotoml_edit0.22.27crates/manta-cli/Cargo.toml
crates.ioclap4.5.60crates/manta-cli/Cargo.toml
crates.ioclap_complete4.5.66crates/manta-cli/Cargo.toml
crates.ioclap_mangen0.3.0crates/manta-cli/Cargo.toml
crates.iocomfy-table7.2.2crates/manta-cli/Cargo.toml
crates.iocrossterm0.29.0crates/manta-cli/Cargo.toml
crates.ioexecute0.2.13crates/manta-cli/Cargo.toml
crates.iois_executable1.0.1crates/manta-cli/Cargo.toml
crates.ioconfig0.15.19crates/manta-cli/Cargo.toml
crates.iotokio-tungstenite0.29crates/manta-cli/Cargo.toml
crates.ioself_update0.44crates/manta-cli/Cargo.toml
crates.ioxz20.1crates/manta-cli/Cargo.toml
crates.iotar0.4crates/manta-cli/Cargo.toml
crates.iosemver1.0crates/manta-cli/Cargo.toml
crates.ioprogenitor-client0.14crates/manta-cli/Cargo.toml
crates.iomanta-shared—crates/manta-server/Cargo.toml
crates.iomanta-backend-dispatcher—crates/manta-server/Cargo.toml
crates.iocsm-rs—crates/manta-server/Cargo.toml
crates.ioochami-rs—crates/manta-server/Cargo.toml
crates.ioaxum0.8crates/manta-server/Cargo.toml
crates.ioaxum-server0.8crates/manta-server/Cargo.toml
crates.iotower-http0.6crates/manta-server/Cargo.toml
crates.iotokio—crates/manta-server/Cargo.toml
crates.iotokio-util—crates/manta-server/Cargo.toml
crates.iofutures—crates/manta-server/Cargo.toml
crates.ioutoipa—crates/manta-server/Cargo.toml
crates.ioutoipa-swagger-ui9crates/manta-server/Cargo.toml
crates.iorustls0.23crates/manta-server/Cargo.toml
crates.iobase64—crates/manta-server/Cargo.toml
crates.iochrono—crates/manta-server/Cargo.toml
crates.iordkafka—crates/manta-server/Cargo.toml
crates.iocomfy-table7.2.2crates/manta-server/Cargo.toml
crates.ioglobset0.4crates/manta-server/Cargo.toml
crates.iohostlist-parser0.1.6crates/manta-server/Cargo.toml
crates.ioregex—crates/manta-server/Cargo.toml
crates.ioreqwest—crates/manta-server/Cargo.toml
crates.ioserde—crates/manta-server/Cargo.toml
crates.ioserde_json—crates/manta-server/Cargo.toml
crates.ioserde_yaml—crates/manta-server/Cargo.toml
crates.iotracing—crates/manta-server/Cargo.toml
crates.iomanta-backend-dispatcher—crates/manta-shared/Cargo.toml
crates.iobase64—crates/manta-shared/Cargo.toml
crates.ioserde—crates/manta-shared/Cargo.toml
crates.ioserde_json—crates/manta-shared/Cargo.toml
crates.ioserde_yaml—crates/manta-shared/Cargo.toml
crates.iochrono—crates/manta-shared/Cargo.toml
crates.ioutoipa—crates/manta-shared/Cargo.toml
crates.iotracing—crates/manta-shared/Cargo.toml
crates.iotracing-subscriber—crates/manta-shared/Cargo.toml
crates.ioconfig—crates/manta-shared/Cargo.toml
crates.iodirectories—crates/manta-shared/Cargo.toml
crates.iotoml_edit—crates/manta-shared/Cargo.toml
crates.ioreqwest—crates/manta-shared/Cargo.toml
crates.iothiserror—crates/manta-shared/Cargo.toml
All dependencies 47

Full resolved dependency set from the GitHub dependency graph: 36 direct and 11 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
crates.ioanyhow—direct
crates.ioaxum—direct
crates.ioaxum-server—direct
crates.iobase64—direct
crates.iochrono—direct
crates.ioclap—direct
crates.ioclap_complete—direct
crates.ioclap_mangen—direct
crates.iocomfy-table—direct
crates.ioconfig—direct
crates.iocrossterm—direct
crates.iodialoguer—direct
crates.ioexecute—direct
crates.iofutures—direct
crates.iogit2—direct
crates.iohostlist-parser—direct
crates.iois_executable—direct
crates.ionodeset—direct
crates.ioprogenitor-client—direct
crates.ioreqwest—direct
crates.iorustls—direct
crates.ioself_update—direct
crates.iosemver—direct
crates.ioserde—direct
crates.ioserde_json—direct
crates.ioserde_yaml—direct
crates.iotar—direct
crates.iotokio—direct
crates.iotokio-tungstenite—direct
crates.iotokio-util—direct
crates.iotoml_edit—direct
crates.iotower-http—direct
crates.iotracing—direct
crates.ioutoipa-swagger-ui—direct
crates.iouuid—direct
crates.ioxz2—direct
crates.ioassert_cmd—indirect
crates.iohttp-body-util—indirect
crates.ioopenapiv3—indirect
crates.iopredicates—indirect
crates.ioprettyplease—indirect
crates.ioprogenitor—indirect
crates.iosyn—indirect
crates.iotempfile—indirect
crates.iotoml—indirect
crates.iotower—indirect
crates.iowiremock—indirect
Dependency advisories not assessed

Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "alps",
        "cli",
        "csm",
        "productivity",
        "cscs"
      ],
      "is_fork": false,
      "size_kb": 8012,
      "has_wiki": true,
      "homepage": "https://eth-cscs.github.io/manta/",
      "languages": {
        "Roff": 51669,
        "Rust": 1477296,
        "Shell": 373137,
        "Elvish": 96682,
        "Dockerfile": 5726
      },
      "pushed_at": "2026-07-19T13:29:08Z",
      "created_at": "2023-03-27T13:31:03Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-17T12:03:56Z",
      "description": "Another CLI for Alps",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "BSD-3-Clause",
      "default_branch": "main",
      "license_spdx_raw": "BSD-3-Clause",
      "primary_language": "Rust",
      "significant_languages": [
        "Rust",
        "Shell"
      ]
    },
    "owner": {
      "blog": "https://www.cscs.ch/",
      "name": "Swiss National Supercomputing Center (CSCS)",
      "type": "Organization",
      "login": "eth-cscs",
      "company": null,
      "location": "Lugano, Switzerland",
      "followers": 181,
      "avatar_url": "https://avatars.githubusercontent.com/u/5744410?v=4",
      "created_at": "2013-10-22T07:14:44Z",
      "is_verified": null,
      "public_repos": 142,
      "account_age_days": 4668
    },
    "license": {
      "state": "standard",
      "spdx_id": "BSD-3-Clause",
      "raw_spdx": "BSD-3-Clause",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.0.0-beta.62",
          "kind": "prerelease",
          "published_at": "2026-07-12T19:59:26Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.62",
          "kind": "other",
          "published_at": "2026-07-12T19:38:36Z"
        },
        {
          "tag": "v2.0.0-beta.61",
          "kind": "prerelease",
          "published_at": "2026-06-28T09:14:39Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.61",
          "kind": "other",
          "published_at": "2026-06-28T08:47:42Z"
        },
        {
          "tag": "v2.0.0-beta.60",
          "kind": "prerelease",
          "published_at": "2026-06-25T12:37:23Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.60",
          "kind": "other",
          "published_at": "2026-06-25T12:10:21Z"
        },
        {
          "tag": "v2.0.0-beta.59",
          "kind": "prerelease",
          "published_at": "2026-06-22T10:13:56Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.59",
          "kind": "other",
          "published_at": "2026-06-22T09:51:54Z"
        },
        {
          "tag": "v2.0.0-beta.57",
          "kind": "prerelease",
          "published_at": "2026-06-22T10:00:32Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.57",
          "kind": "other",
          "published_at": "2026-06-22T09:37:52Z"
        },
        {
          "tag": "v2.0.0-beta.56",
          "kind": "prerelease",
          "published_at": "2026-06-16T01:23:38Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.56",
          "kind": "other",
          "published_at": "2026-06-16T01:05:20Z"
        },
        {
          "tag": "v1.71.1",
          "kind": "patch",
          "published_at": "2026-06-15T09:39:16Z"
        },
        {
          "tag": "v2.0.0-beta.55",
          "kind": "prerelease",
          "published_at": "2026-06-14T20:37:29Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.55",
          "kind": "other",
          "published_at": "2026-06-14T20:14:27Z"
        },
        {
          "tag": "v2.0.0-beta.54",
          "kind": "prerelease",
          "published_at": "2026-06-14T00:35:03Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.54",
          "kind": "other",
          "published_at": "2026-06-14T00:10:49Z"
        },
        {
          "tag": "v2.0.0-beta.53",
          "kind": "prerelease",
          "published_at": "2026-06-09T07:28:22Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.53",
          "kind": "other",
          "published_at": "2026-06-09T07:15:56Z"
        },
        {
          "tag": "v2.0.0-beta.50",
          "kind": "prerelease",
          "published_at": "2026-06-07T02:45:02Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.50",
          "kind": "other",
          "published_at": "2026-06-07T02:28:23Z"
        },
        {
          "tag": "v2.0.0-beta.48",
          "kind": "prerelease",
          "published_at": "2026-06-06T21:43:25Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.48",
          "kind": "other",
          "published_at": "2026-06-06T21:27:01Z"
        },
        {
          "tag": "v2.0.0-beta.46",
          "kind": "prerelease",
          "published_at": "2026-06-06T14:12:24Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.46",
          "kind": "other",
          "published_at": "2026-06-06T13:53:58Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.44",
          "kind": "other",
          "published_at": "2026-06-06T13:41:42Z"
        },
        {
          "tag": "v2.0.0-beta.43",
          "kind": "prerelease",
          "published_at": "2026-06-05T22:34:58Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.43",
          "kind": "other",
          "published_at": "2026-06-05T22:15:43Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.42",
          "kind": "other",
          "published_at": "2026-06-05T22:11:21Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.41",
          "kind": "other",
          "published_at": "2026-06-05T22:04:17Z"
        },
        {
          "tag": "v2.0.0-beta.39",
          "kind": "prerelease",
          "published_at": "2026-06-05T21:44:27Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.39",
          "kind": "other",
          "published_at": "2026-06-05T21:25:31Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.32",
          "kind": "other",
          "published_at": "2026-06-04T18:27:45Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.32",
          "kind": "other",
          "published_at": "2026-06-04T18:11:58Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.32",
          "kind": "other",
          "published_at": "2026-06-04T18:12:06Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.30",
          "kind": "other",
          "published_at": "2026-06-04T17:58:27Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.30",
          "kind": "other",
          "published_at": "2026-06-04T17:34:50Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.30",
          "kind": "other",
          "published_at": "2026-06-04T17:34:44Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.27",
          "kind": "other",
          "published_at": "2026-06-04T15:25:43Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.27",
          "kind": "other",
          "published_at": "2026-06-04T15:11:13Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.27",
          "kind": "other",
          "published_at": "2026-06-04T15:11:05Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.26",
          "kind": "other",
          "published_at": "2026-06-04T14:55:51Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.26",
          "kind": "other",
          "published_at": "2026-06-04T14:39:00Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.26",
          "kind": "other",
          "published_at": "2026-06-04T14:39:00Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.25",
          "kind": "other",
          "published_at": "2026-06-04T14:25:16Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.25",
          "kind": "other",
          "published_at": "2026-06-04T14:11:27Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.25",
          "kind": "other",
          "published_at": "2026-06-04T14:10:48Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.24",
          "kind": "other",
          "published_at": "2026-06-04T13:56:17Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.24",
          "kind": "other",
          "published_at": "2026-06-04T13:39:43Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.24",
          "kind": "other",
          "published_at": "2026-06-04T13:39:42Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.23",
          "kind": "other",
          "published_at": "2026-06-04T10:13:16Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.23",
          "kind": "other",
          "published_at": "2026-06-04T09:52:40Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.23",
          "kind": "other",
          "published_at": "2026-06-04T09:52:33Z"
        },
        {
          "tag": "v1.71.0",
          "kind": "minor",
          "published_at": "2026-06-03T00:15:57Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.20",
          "kind": "other",
          "published_at": "2026-06-02T23:27:50Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.20",
          "kind": "other",
          "published_at": "2026-06-02T23:04:47Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.20",
          "kind": "other",
          "published_at": "2026-06-02T23:04:46Z"
        },
        {
          "tag": "v1.70.0",
          "kind": "minor",
          "published_at": "2026-06-02T20:10:39Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.19",
          "kind": "other",
          "published_at": "2026-06-01T12:48:47Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.19",
          "kind": "other",
          "published_at": "2026-06-01T12:25:30Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.19",
          "kind": "other",
          "published_at": "2026-06-01T12:25:23Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.17",
          "kind": "other",
          "published_at": "2026-05-31T17:08:22Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.17",
          "kind": "other",
          "published_at": "2026-05-31T16:53:15Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.17",
          "kind": "other",
          "published_at": "2026-05-31T16:53:11Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.16",
          "kind": "other",
          "published_at": "2026-05-30T22:59:49Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.16",
          "kind": "other",
          "published_at": "2026-05-30T22:46:19Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.16",
          "kind": "other",
          "published_at": "2026-05-30T22:46:19Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.15",
          "kind": "other",
          "published_at": "2026-05-27T21:01:31Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.15",
          "kind": "other",
          "published_at": "2026-05-27T20:44:31Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.15",
          "kind": "other",
          "published_at": "2026-05-27T20:44:23Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.14",
          "kind": "other",
          "published_at": "2026-05-26T07:48:52Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.14",
          "kind": "other",
          "published_at": "2026-05-26T07:31:06Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.14",
          "kind": "other",
          "published_at": "2026-05-26T07:31:04Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.13",
          "kind": "other",
          "published_at": "2026-05-23T19:25:43Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.13",
          "kind": "other",
          "published_at": "2026-05-23T19:08:33Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.13",
          "kind": "other",
          "published_at": "2026-05-23T19:08:27Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.12",
          "kind": "other",
          "published_at": "2026-05-23T08:06:41Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.12",
          "kind": "other",
          "published_at": "2026-05-23T07:47:42Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.12",
          "kind": "other",
          "published_at": "2026-05-23T07:47:40Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.11",
          "kind": "other",
          "published_at": "2026-05-22T16:16:58Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.11",
          "kind": "other",
          "published_at": "2026-05-22T16:16:48Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.10",
          "kind": "other",
          "published_at": "2026-05-21T14:28:45Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.10",
          "kind": "other",
          "published_at": "2026-05-21T14:06:40Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.10",
          "kind": "other",
          "published_at": "2026-05-21T14:06:35Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.9",
          "kind": "other",
          "published_at": "2026-05-20T11:14:03Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.9",
          "kind": "other",
          "published_at": "2026-05-20T10:57:27Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.9",
          "kind": "other",
          "published_at": "2026-05-20T10:57:24Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.8",
          "kind": "other",
          "published_at": "2026-05-20T10:17:05Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.8",
          "kind": "other",
          "published_at": "2026-05-20T10:04:54Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.8",
          "kind": "other",
          "published_at": "2026-05-20T10:04:39Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.7",
          "kind": "other",
          "published_at": "2026-05-19T06:58:26Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.7",
          "kind": "other",
          "published_at": "2026-05-19T06:44:16Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.7",
          "kind": "other",
          "published_at": "2026-05-19T06:44:11Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.6",
          "kind": "other",
          "published_at": "2026-05-18T23:53:20Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.6",
          "kind": "other",
          "published_at": "2026-05-18T23:38:04Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.6",
          "kind": "other",
          "published_at": "2026-05-18T23:38:03Z"
        },
        {
          "tag": "manta-cli-v2.0.0-beta.5",
          "kind": "other",
          "published_at": "2026-05-18T23:23:42Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.5",
          "kind": "other",
          "published_at": "2026-05-18T23:06:47Z"
        },
        {
          "tag": "manta-server-v2.0.0-beta.5",
          "kind": "other",
          "published_at": "2026-05-18T23:06:29Z"
        },
        {
          "tag": "manta-shared-v2.0.0-beta.4",
          "kind": "other",
          "published_at": "2026-05-18T22:32:16Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "41af6045b118591e9f529b44d75efe0d75d04a7f",
          "body": "* fix(server): order images before applying --limit\n\n`service::image::get_images` truncated to `params.limit` before\nsorting, so the cap sliced the backend's arbitrary ordering rather\nthan the newest images: `manta get images --most-recent` returned an\narbitrary image. The sort was also ascending, c\n[…]\n-first, so\nreword to describe newest-N selection with oldest-first display.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "manta get images can filter by image creation date (#106)",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-07-17T12:03:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "278ce9e68f2c2a20969ebfe99cdabed65d3cc874",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-07T18:16:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9bb5254943f6f4c150d16e19bc498745bb9b4cd0",
          "body": "Reintroduce the CLI-local `read_only` flag in `cli.toml` and the two\n`config set/unset read-only` subcommands that toggle it. The CLI's\nread-only gate now consults `AppContext::read_only` (populated from\n`cli.toml`) instead of the `manta-read-only` JWT realm role.\n\n- `SessionContext.is_read_only` an\n[…]\n_read_only`\nfrom `manta config show -o json` — switch back to top-level\n`.read_only`. Operators who removed the `read_only` line from\n`cli.toml` per the interim §2.8 need not act (default is `false`).",
          "is_bot": false,
          "headline": "feat(cli)!: source read-only from cli.toml, not JWT",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1ae2df4f06e65be9b63f8984e8d7371f7ebed8b6",
          "body": "Restructure the text output of `manta config show` so each field sits\nunder the source it came from — local config file, JWT token, or\nserver API — instead of a flat list with `(from token)` /\n`(from token+server)` annotations on individual lines.\n\nWhen `--site X` overrides a different cli.toml `sit\n[…]\nnstant regardless of auth state.\n\nBREAKING CHANGE for shell scripts that grep the text output. JSON\nis additive only — `configured_site` joins the existing keys; no\nexisting key is renamed or removed.",
          "is_bot": false,
          "headline": "feat(cli)!: group `manta config show` text output by value provenance",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "193c2bc94c82570552f77131bd0fa21baef57f75",
          "body": "…s / Reference)\n\nGUIDE.md grew organically to 14 top-level sections; this commit adds\nexplicit tier structure on top of the existing numbering so operators\ncan find the right section faster.\n\n- Part I (Getting started): §1 only — the read-only \"is everything\n  wired up\" smoke test.\n- Part II (Workfl\n[…]\nCLI.md, README.md,\nSECURITY.md, crates/manta-cache/README.md) keeps resolving. Each\nnew Part heading carries a 2-3 sentence intro describing what the\ntier covers and when an operator would land on it.",
          "is_bot": false,
          "headline": "docs(guide): organise sections into 3 tiers (Getting started / How-to…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d4018ddbfe4774ad82f34cd72be3181b443c0a2",
          "body": "GUIDE.md §12 (--dry-run) didn't mention that --dry-run bypasses the\nread-only gate; GUIDE.md §13.3 (Checking your read-only status)\ndidn't point at --dry-run as the preview escape hatch for operators\nwith the role. Two small reciprocal cross-links so the relationship\nis discoverable from either direction.",
          "is_bot": false,
          "headline": "docs(guide): cross-link --dry-run and read-only sections",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a20d65bf744e07a24870ddf8ee2c6986cc49e14e",
          "body": "Add a short Conventions paragraph immediately before \"What changed\nat a high level\" so first-time readers know:\n- (BREAKING)-tagged sections require operator action before upgrade\n- §-numbering is audience-then-topic, not chronological\n- Between-release deltas live in CHANGELOG.md",
          "is_bot": false,
          "headline": "docs(migrating): explain (BREAKING) tag convention and numbering scheme",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e86a858b78e00e6e7a08cf0b08159d9b6402db28",
          "body": "Doc audit surfaced that CLI.md only mentioned `--dry-run` in scattered\nper-subcommand entries; a top-level statement was missing. Add a\ncompact universal-flag note in the TL;DR preamble, cross-linking to\nGUIDE.md §12 for the full semantics (no prose duplication). Also\ncalls out the one short-alias quirk (`manta add group` uses `-D`\nfor `--description` because `-d` is reserved for `--dry-run`).",
          "is_bot": false,
          "headline": "docs(cli): add universal --dry-run note to CLI.md preamble",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a968ce12315c98344c0f2cee7ba3e0524d19f919",
          "body": "User-doc review surfaced 7 issues across files Task 5's sweep missed\n(README.md, ARCHITECTURE.md) plus precision/discoverability nits in\nthe files it touched. Fixes:\n\n- README.md + ARCHITECTURE.md: the \"independent of the cli.toml flag\"\n  claim about the JWT-role server gate is now factually wrong (\n[…]\no operators discover the inspection path.\n- MIGRATING.md §2.7: plain-text \"see §2.8\" → markdown hyperlink;\n  add a CLI-side troubleshooting step (currently only documents\n  server-side curl/log path).",
          "is_bot": false,
          "headline": "docs: tighten read-only doc gaps from JWT SessionContext review",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "77795b5deea21a6c7d9bf496680648a6a4d59299",
          "body": "GUIDE.md §13 collapses the old \"CLI-side flag\" and \"JWT role\"\nsubsections into a single section that describes the single\ncanonical mechanism (the role). MIGRATING.md gains §2.8\ncovering the removed cli.toml flag and the deleted subcommands.\nSECURITY.md drops the row about the cli.toml toggle and updates\nthe cross-references. CLI.md drops the documentation for the\nremoved `config set/unset read-only` subcommands.",
          "is_bot": false,
          "headline": "docs: reframe CLI read-only as JWT-derived",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3106f6c92f84332e34655dc2acb2b1d1bde511dc",
          "body": "BREAKING: `manta config set read-only` and `manta config unset\nread-only` are no longer accepted. The CLI's read-only mode is\ncontrolled by the bearer token's `manta-read-only` realm role;\nthe local cli.toml flag was already removed in the previous\ncommit.",
          "is_bot": false,
          "headline": "feat(cli)!: remove `config set/unset read-only` subcommands",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55f9e4934dee62da20d1b558123281533f9666b5",
          "body": "BREAKING: `read_only` is no longer read from cli.toml. The CLI's\nread-only gate now consults the bearer token's `manta-read-only`\nrealm role, mirrored on a new SessionContext attached to\nAppContext.\n\n- AppContext.session: Option<SessionContext> populated once per\n  authenticated invocation in proces\n[…]\n\n  labelling (\"from token\", \"from token+server\"). The top-level\n  `read_only` and `groups_available` JSON keys are gone.\n- Operator's cli.toml `read_only = true` lines are silently\n  ignored by serde.",
          "is_bot": false,
          "headline": "feat(cli)!: replace cli.toml read_only with JWT-derived SessionContext",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7c75e9054597755c42e0d4d095a7cda8fc7a23ab",
          "body": "Holds the JWT-derived per-invocation facts (username, name,\nis_admin, is_read_only, accessible_groups). Built via\n`SessionContext::build(client, token)` — one HTTP call plus a\nlocal JWT decode.\n\nModule is not yet wired into AppContext; the next commit does that.",
          "is_bot": false,
          "headline": "feat(cli): add SessionContext module",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "750309fea4b186c06ce5165318ac03f5d8887c2e",
          "body": "Move the JWT decode module (and its PA_ADMIN constant) into\nmanta-shared so manta-cli can decode tokens without pulling\nmanta-server as a dependency. The original server-side module\nbecomes a thin re-export; service::authorization::PA_ADMIN\nbecomes a re-export of the same.\n\nFoundation for the JWT-derived SessionContext work.",
          "is_bot": false,
          "headline": "refactor(shared): relocate jwt_ops from manta-server to manta-shared",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-07-07T18:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e3402859c0f6b05e44744d7720ec7c1f8db5299",
          "body": "…skip ci]",
          "is_bot": true,
          "headline": "chore(cli): regenerate OpenAPI spec + man pages + shell completions […",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-01T20:37:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b34dc7410736e4944a5611ba63c4b600e5214d2",
          "body": "* ci: gate checked-in openapi.json against the live server spec\n\nThe CLI's openapi.json is generated from the server's #[utoipa::path]\nannotations but checked into git and only consumed (never re-derived)\nat build time, so handler / wire-type changes that skip the regen drift\nsilently — the spec rec\n[…]\nen.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01VoTrdfXtKUbgEqr9rqNNCP\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: gate checked-in openapi.json against the live server spec (#105)",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-07-01T20:20:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "551456b4757cd21993e4f5bfe71cc4c23ddb67a8",
          "body": "* fix(server): return 404 for unknown site on /auth/*\n\nThe public /auth/{token,validate} handlers collapsed every failure —\nincluding \"site not configured\" — into a generic 401, so targeting a\nnon-existent site prompted for credentials (up to 3x) before failing.\nEvery authenticated endpoint already \n[…]\nen. Document this so the short-circuit isn't misread as always zero-prompt.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(server): return 404 for unknown site on /auth/*  (#102) (#104)",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-30T10:27:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8167b200d1626b539d907dac4ee32c799748b87b",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-29T00:13:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24f3b220b879dff4d942c30f5db10caea634f901",
          "body": "…hardware\n\nRound 2 introduced group::resolve_target_and_available_groups to fold\n\"fetch available groups → validate label set\" into one backend round-\ntrip with in-memory validation. service/configuration.rs already used\nit, but service/session.rs and service/hardware.rs were still doing\nthe manual \n[…]\n's downstream backend.get_group()\ncall is untouched — only the label-fetch+validate prelude is folded.\n\nFlagged by /simplify R3 finding #10 (S1×2 — same-crate parallel\npattern detected on both files).",
          "is_bot": false,
          "headline": "refactor(server): use resolve_target_and_available_groups in session+…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "91783f0ec7dcb40c2a8ff4a3bf771de0edd773cd",
          "body": "Two complexity fixes in node-detail aggregation and boot-parameter\nfiltering. No behaviour change.\n\n#8 (service/node_details.rs::build_node_details): the per-node\nxnames.iter().map() closure resolved boot params with a linear\nfind() over boot_params_vec for each xname — O(N²) for N nodes.\nThe same f\n[…]\nthe scan so each boot\nparam's hosts are membership-checked. O(B×G×H) → O(B×H). With\nG in the thousands at cluster scale this is the steepest win.\n\nFlagged by /simplify R3 findings #8 (S3) and #9 (S3).",
          "is_bot": false,
          "headline": "perf(server): hash-index two hot-path loops in service/",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba5da703ea0f0d10d825b87f7c537ec01e59b59c",
          "body": "Two findings in the migrate path that Round 3 surfaced.\n\n#5 (handler): server/handlers/migrate.rs iterated over\ntarget_hsm_names + parent_hsm_names and called\nservice::authorization::validate_user_group_access per name. Each\nhit the backend with a get_group_name_available round-trip. With N\ntarget +\n[…]\ne-fetch via futures::future::join_all\nbefore entering the mutation loop; the mutation loop uses the cached\nbool slice for its decision branching.\n\nFlagged by /simplify R3 findings #5 (S2) and #6 (S3).",
          "is_bot": false,
          "headline": "perf(server): fan out sequential backend calls in migrate path",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ce6566ae0df7fa4ad9029ca902b497b23b3f230f",
          "body": "…CH loops\n\nRound 2 parallelised the BSS `update_bootparameters` PUT loops in\nservice/boot_parameters.rs and service/kernel_parameters.rs via\ntry_join_all, but missed the structurally identical image-patch loops\nthat follow them. Each calls infra.backend.update_image one image at\na time; clusters wit\n[…]\nall propagates the first error to the\ncaller, matching the pre-Round-2 behaviour of both loops.\n\nFlagged by /simplify R3 findings S1.F4 + S3.F2 + S3.F3 (three-way\ncross-flag — reuse + efficiency × 2).",
          "is_bot": false,
          "headline": "perf(server): extract apply_image_patches helper, parallelise IMS PAT…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "898777c67398f93025db5b490f80e0a927fc9c70",
          "body": "Two related findings folded into one commit.\n\n#2 (behaviour bug): GetGroupParams carries settings_group_name but\nhad no effective_group() method, so dispatch/get/groups.rs silently\ndropped the configured default. Add the method (matching the pattern\non the five other params structs) and use it in th\n[…]\nt/group_nodes.rs to do the fallback inline.\nBehaviour was already correct — this is a consistency cleanup so all\nsix params structs share the same one-liner.\n\nFlagged by /simplify R3 C1 (reuse, both).",
          "is_bot": false,
          "headline": "fix(cli): use effective_group() in `get groups` + `get group-nodes`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a0ffc92fe44d7d0f186a4bcf7e478595f1a1ca25",
          "body": "Two Round-3 findings folded into one commit (they coordinate).\n\n#1 (altitude regression): four service-layer call sites were calling\njwt_ops::is_user_admin directly instead of the canonical short-circuit\nin service/authorization.rs. Two of those (sat_file.rs::138,171) were\nintroduced by Round 2's sa\n[…]\nls flagged by\nRound 3 S4 are gone; sat_file.rs becomes ~6 lines shorter; the\nauthorization module is the sole owner of admin-detection policy.\n\nFlagged by /simplify R3 findings #1 (S4) and #3 (S1+S2).",
          "is_bot": false,
          "headline": "refactor(server): promote admin_bypass to authorization::is_admin",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-29T00:05:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "29c016f8a696f85c7116a4fd94b6e94f4d00f7c6",
          "body": null,
          "is_bot": true,
          "headline": "chore(cli): regenerate man pages + shell completions [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T23:49:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "39b3f59b48a3d44cc9e8b34e4b78ebc99b66fa21",
          "body": "CI's `cargo doc --workspace --no-deps` step runs with\n`RUSTDOCFLAGS=\"-D rustdoc::broken_intra_doc_links\"`. The Round 2 batches\nadded doc comments that referenced items without bringing them into\nscope, causing the build to fail at the rustdoc step (CI run\n28339441018). Three errors + one warning fix\n[…]\n\n\nLesson: every /simplify apply batch should run the strict rustdoc\nbuild, not just cargo check + test + clippy. The batch verifications\nmissed this gate because clippy doesn't catch broken doc links.",
          "is_bot": false,
          "headline": "fix(server): unbreak rustdoc intra-doc links from /simplify Round 2",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:33:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b43431af9717d903db2b04765b69d026ef0ae45c",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T23:27:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "147874c88915fa8cece777788134d1ccc651b6b4",
          "body": "Three CLI dispatch findings folded into one commit. One behaviour\nchange (cancel-on-confirm goes from non-zero exit to zero, fixing\nthe scripting friction).\n\n- common/clap_ext.rs: add resolve_node_target helper to capture\n  \"if hsm_group is set, drop the xnames expression\" rule. Used by\n  add/kernel\n[…]\nreturn Ok(())) instead of bail!. The\n  exit code on cancel changes from non-zero to zero. Cancel is\n  no longer treated as a process error.\n\nFlagged by /simplify findings #46, #47, #48 (all C1 reuse).",
          "is_bot": false,
          "headline": "refactor(cli/dispatch): node-target helper + confirm consistency fixes",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f7061e12ea5eff104f55d1fb6801f6e8e4c7d123",
          "body": "Eight small findings folded into one commit; mostly mechanical\ncollapses, dedup, and one-shot client reuse. No behaviour change\nbeyond the shared-clock fix in #44.\n\n- sat_file/render::dot_notation_to_yaml: replace 50-line interior-\n  mutation loop (with two structurally-impossible error branches)\n  \n[…]\nore pre-formatted summary\n  lines as Vec<String> instead of re-packaging into Vec<Vec<String>>\n  of components accessed by index.\n\nFlagged by /simplify findings #35, #36, #38, #39, #40, #43, #44, #45.",
          "is_bot": false,
          "headline": "perf(cli): efficiency + simplification polish batch from /simplify",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d1dd8d7101a75026852ca200de398723a074534c",
          "body": "Two intertwined findings folded into one commit.\n\n- Move validate_token, get_token, and map_auth_error from\n  common/authentication.rs to MantaClient as methods\n  [validate_token, exchange_credentials, plus map_auth_error\n  scoped to the impl]. Eliminates progenitor types from the\n  common/ module. \n[…]\ness log message now reports the\ncorrect attempt number (off-by-one fix). No other observable\nbehaviour change.\n\nFlagged by /simplify findings #7 (C4 altitude) and #8 (C2+C4\nsimplification + altitude).",
          "is_bot": false,
          "headline": "refactor(cli/auth): consolidate transport + cascade in MantaClient",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "291a7ec052bacc92cea08f1785abdb9e64af63c9",
          "body": "Three efficiency findings folded into one commit. No behaviour change\n(error semantics preserved where applicable).\n\n- hw_cluster/apply.rs::apply_hw_configuration + delete_hw_component:\n  fetch target + parent group inventories concurrently via\n  tokio::try_join! (two sequential awaits → one). Halve\n[…]\nombined target+parent pool dedup) deferred: the\nsignature change ripples to pin_unpin.rs and tests.rs which are\noutside the four-file scope of this batch.\n\nFlagged by /simplify findings #26, #27, #31.",
          "is_bot": false,
          "headline": "perf(server): hw_cluster + BSS update parallelism from /simplify",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "59cba0d8a0a53bca62ddf9fe9c9ab0bf4e549dab",
          "body": "Six small findings folded into one commit; mostly dead-code deletions\nand one-shape extractions. No behaviour change.\n\n- server/handlers/mod.rs: extract require_url(url, field), called by\n  require_vault and require_k8s_url (the two existing one-line shims\n  delegate). Removes the duplicated NOT_IMP\n[…]\nt_file/image_pipeline.rs: drop unnecessary\n  session_value.clone() passed to serde_json::from_value (the value\n  is unused after the call).\n\nFlagged by /simplify findings #13, #19, #29, #33, #37, #42.",
          "is_bot": false,
          "headline": "refactor: small mechanical cleanups from /simplify deferred batch",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45f21e86ca9a43d4cdf73ee8be5e680ce0e52168",
          "body": "CLAUDE.md rule: handlers under server/handlers/ must only call\nfunctions in service/, never backend methods directly. Five handler\nfiles violated this in 13+ sites.\n\nAdded thin service-layer wrappers and routed every handler-side\nbackend call through them. Also promoted the existing private\n`admin_b\n[…]\nb async fn get_available_groups\n- service/migrate.rs: pub async fn backup, pub async fn restore\n\nFlagged by /simplify S4 (altitude × 4 — boundary + duplicate-fetch\n+ admin tier + InfraContext bypass).",
          "is_bot": false,
          "headline": "refactor(server): enforce handler→service→backend boundary",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9ef288a8cab668504a74a1670b3c36022cb3c894",
          "body": "Two efficiency findings folded into one commit; both apply to\ndispatch/apply/sat_file/dispatch.rs.\n\n- Configurations have no inter-dependencies (topo-sort in plan.rs\n  covers only Images). Drain all leading SatElement::Configuration\n  entries and dispatch with futures::future::try_join_all instead\n \n[…]\nved: configurations execute (concurrently)\nbefore images; images stay strictly in topo-order; session_templates\nexecute (concurrently) after all images complete.\n\nFlagged by /simplify C3 (efficiency).",
          "is_bot": false,
          "headline": "perf(cli): parallelize independent SAT-file POSTs",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8262a5d51f67e19cf5fcc13f0705ba0925bb4315",
          "body": "Four reuse findings folded into one commit; all small mechanical\nextractions of repeated patterns. No behaviour change.\n\n- output: extract render_node_details, called by both\n  dispatch/get/nodes::exec and dispatch/get/group_nodes::exec\n  (same ~40-line output block in both, differing only in\n  xnam\n[…]\nng the convention in output/session, /template,\n  /boot_parameters, /redfish_endpoints). Removes the unnecessary\n  serde_json::to_value intermediate at the JSON path.\n\nFlagged by /simplify C1 (reuse).",
          "is_bot": false,
          "headline": "refactor(cli): reuse + DRY batch from /simplify",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b7bc19434307a956e1f42190fd33d5a46c33617",
          "body": "Six findings folded into one commit because they are all small\nmechanical extractions of repeated patterns. No behaviour change.\n\n- service/session.rs: extract fetch_session_by_name from\n  validate_session_access and validate_console_session (same 10-line\n  prelude in both).\n- common/config/mod.rs: \n[…]\nd_cfs_configuration_name:\n  replace serial for-loop with HashSet dedup + join_all fan-out,\n  matching the pattern already in collect_boot_images.\n\nFlagged by /simplify S1 (reuse), S2 (simplification).",
          "is_bot": false,
          "headline": "refactor(server,shared): reuse + simplification batch from /simplify",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7d369f9f60db7df007e21e2ca5319e3497b8a82f",
          "body": "…n.rs\n\nThe five authorization functions each opened with an identical\n`if jwt_ops::is_user_admin(token) { return Ok(()); }` short-circuit.\nExtract a private helper so a future change — e.g. adding audit logging\nto admin bypasses, or requiring JWKS signature verification before the\nshort-circuit fire\n[…]\nplication +\nsecurity advisory). The JWKS verification follow-up tracked in\njwt_ops.rs's module-level TODO is NOT addressed here; that's a\nseparate concern requiring per-site JWKS fetching and a cache.",
          "is_bot": false,
          "headline": "refactor(server): extract admin_bypass helper in service/authorizatio…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1bd8bd1ad73860a984bd6f6a12b16abcbd0f646",
          "body": "`backup vcluster` issues `POST /api/v1/migrate/backup`, which creates\nfiles on the server-side filesystem. It was in READ_ONLY_VERBS, so the\nCLI's read_only gate never blocked it — operators who set\n`read_only = true` to prevent accidental cluster mutations could still\nrun `manta backup vcluster`. Move it to MUTATING_VERBS (where `restore`\nalready correctly lives).\n\nFlagged by /simplify C4 (altitude).",
          "is_bot": false,
          "headline": "fix(cli): reclassify `backup` as a mutating verb in read_only gate",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9aa206f5998eaadee5d6638eda95b5b9949bcc90",
          "body": "Three small correctness fixes surfaced by the whole-codebase /simplify\nreview:\n\n1. service/image.rs::validate_image_deletion + get_restricted_image_ids:\n   replace `.collect::<Option<Vec<String>>>().ok_or_else(MissingField)`\n   with `.filter_map(...).collect()`. The previous shape aborted the\n   ent\n[…]\n HSM group-membership round-trip\n   per GET /boot-parameters request.\n\nFlagged by /simplify agents S1 (reuse), S2 (simplification), S3\n(efficiency) — triple-flagged on #3, single-flagged on #1 and #2.",
          "is_bot": false,
          "headline": "fix(server): Tier-1 correctness from /simplify sweep",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T23:19:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dbd945d262665abef334d8436d42aa68ed99c30f",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T19:43:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6ca0f5aea28544a2611fbcc5ff18eded124e5a6",
          "body": "Three corrections caught by the final whole-branch review against\nthe actual source code:\n\n1. Env var name: was MANTA_TOKEN, actual is MANTA_CSM_TOKEN\n   (crates/manta-cli/src/common/authentication.rs:64). Fixed in\n   the GUIDE.md §12 flowchart node and closing paragraph.\n\n2. Token-cache cascade mis\n[…]\net updates are\n   idempotent and operators retry — there is no executable rollback.\n   Removed the Rollback node from the flowchart and rewrote the\n   intro prose.\n\nNo other diagrams or prose touched.",
          "is_bot": false,
          "headline": "docs(mermaid): fix factual errors in batch-2 diagrams",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "17454ba7c0017a34c742381a57bce554d70e2506",
          "body": "GUIDE.md §12 \"Non-interactive and scripted use\" gains a new\nsub-section \"Authentication for scripts\" with a flowchart TD\nshowing the env → 0600 cache → interactive prompt resolution\norder. Documents what was previously only described in\ncommon/authentication.rs's rustdoc — useful for operators writing\nCI / cron scripts who need to know which branch they will hit.\n\nSub-section sits between the existing dry-run preview content\nand the add-group -D note.\n\nStyle matches batch-1 conventions.",
          "is_bot": false,
          "headline": "docs(guide): add mermaid flowchart for CLI token-cache resolution",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc623a4ac089f06eaa2f6e57e2a65d6031370b6a",
          "body": "GUIDE.md §8 \"Console access\" gains a sequenceDiagram near the top\nshowing the HTTP-to-WebSocket upgrade and the resulting\nbidirectional bridge with three parallel message kinds: binary\nframes for stdin/stdout, plus a text-frame resize event from the\nCLI.\n\nIncludes a short intro paragraph naming the protocol and a footnote\non the inactivity timeout knob ([server].console_inactivity_timeout_secs).\n\nStyle matches batch-1 conventions.",
          "is_bot": false,
          "headline": "docs(guide): add mermaid sequence diagram for WS console upgrade",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f6c49129343466e94925657184ad058c4fc9800",
          "body": "ARCHITECTURE.md §\"Layer responsibilities\" gains a new sub-section\n\"Hardware-cluster pin/unpin algorithm\" with a flowchart TD showing\nthe parse → fetch → validate → score → move → rollback phase shape.\nAnnotates the non-transactional rollback behaviour and links to the\nimplementation file (service/hw_cluster/pin_unpin.rs).\n\nStyle matches batch-1 conventions: bare mermaid fence, italic caption,\n4-space indent, no theme/emoji.",
          "is_bot": false,
          "headline": "docs(architecture): add mermaid flowchart for hw-cluster pin/unpin",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b0aa33ee3ebd436faeb7548de0718f0d15a84a7",
          "body": "Folds in two minor findings from the final whole-branch review:\n\n- Add `Note over MS: chokepoint — every CSM/OCHAMI call proxies\n  through here` to restore the at-a-glance \"chokepoint\" labelling\n  that the deleted ASCII art carried directly under the manta-server\n  box. The bullet list still describ\n[…]\nalso gets a correction header (in-tree, gitignored, not committed)\nacknowledging the May 25 mermaid precedent that the original spec\nmis-stated.\n\nRender-check: `npx mermaid-cli -i SECURITY.md` exit 0.",
          "is_bot": false,
          "headline": "docs(security): polish mermaid auth-flow diagram",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "50111be3e4600f244409ef4b38e22a49dce0ad59",
          "body": "ARCHITECTURE.md §\"Security model\" gains a new sub-section\n\"Middleware layer stack\" between the mitigations table and the\nDeferred paragraph. The flowchart shows the nest split between\n/api/v1/*, /api/v1/auth/*, and the /docs Swagger path, plus the\nlast-added-outermost layer ordering on each branch.\n\nCloses the cross-link forward-references from the GUIDE.md and\nSECURITY.md diagrams added earlier on this branch (anchor:\n#middleware-layer-stack).",
          "is_bot": false,
          "headline": "docs(architecture): add mermaid flowchart for the middleware stack",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "492f63bcdeca9c3497c9f98ad5104adf7479808e",
          "body": "SECURITY.md §\"Security model — at a glance\" loses the ASCII\n3-box-and-arrows diagram and gains a sequenceDiagram showing both\nthe auth bootstrap (POST /auth/token -> Keycloak -> token) and a\nsubsequent authenticated request (proxied to CSM/OCHAMI, signature\nverified upstream). Optional Kafka actor s\n[…]\nverbatim.\n\nCross-links added to GUIDE.md §13 (user-facing read-only) and\nARCHITECTURE.md#middleware-layer-stack (contributor view of the\nmiddleware pipeline; target anchor created in the next commit).",
          "is_bot": false,
          "headline": "docs(security): replace ASCII tier diagram with mermaid sequence",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8ae23b23109aa57bed56e731f015d1f51065afeb",
          "body": "GUIDE.md §13.2 gains a sequenceDiagram showing the request flow\nthrough read_only_guard: method check short-circuit, bearer-prefix\nstrip, role lookup via jwt_ops::has_role, 403 emission, and the\nhappy path. Both branches in one diagram via nested alt blocks.\n\nStyle note: GUIDE.md §3 already carries \n[…]\nick whichever suits the diagram's content.\n\nForward-link to ARCHITECTURE.md#middleware-layer-stack added in\nthis commit; the target anchor is created by the next ARCHITECTURE.md\ncommit on this branch.",
          "is_bot": false,
          "headline": "docs(guide): add mermaid sequence diagram for the read-only gate",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "498be2cda2a9eafc11cca0176c01141b1abc025b",
          "body": "New top-level SECURITY.md (created on explicit user instruction)\ncovering:\n\n- Private-disclosure channels: GitHub Security Advisories at\n  eth-cscs/manta/security/advisories/new (preferred), email fallback\n  to the workspace authors listed in Cargo.toml.\n- Supported-versions matrix: 2.0.0-beta.x act\n[…]\nged.\n- Out-of-scope list pointing upstream-crate / IdP vulnerabilities at\n  their respective repos.\n\nREADME.md gains a docs-index row pointing at SECURITY.md so it's\ndiscoverable from the entry point.",
          "is_bot": false,
          "headline": "docs(security): add SECURITY.md vulnerability-reporting + model summary",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f5412f8b6a9d4819acdaee963905e572e9bad9c3",
          "body": "Adds an explicit Response 403 line to each of the 34 mutating endpoint\nsections in API.md (POST/PUT/PATCH/DELETE under /api/v1/*). Each line\npoints back to the global Error responses table for the explanation,\nkeeping per-endpoint duplication minimal.\n\n/api/v1/auth/* (login flow, separate sub-router\n[…]\ns an earlier judgment call that the global table alone was\nsufficient — per-endpoint coverage means readers scanning a single\nendpoint's section see the 403 without scrolling back to the global\ntable.",
          "is_bot": false,
          "headline": "docs(api): per-endpoint Response 403 for every /api/v1/* mutating route",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dcc881dce16afc7a4add077ee59c38a4b094fb2d",
          "body": "MIGRATING.md §2.7 gains a Troubleshooting block (4 numbered steps):\ndecode the token to check realm_access.roles, curl-against-mutating to\nconfirm 403, curl-against-read to confirm 200, journalctl grep for the\nwarn-level refusal log.\n\nARCHITECTURE.md §\"Security model\" gains a paragraph after the\nmit\n[…]\nrification boundary (jwt_ops decodes without\nverifying), it is defence in depth against permission scope creep on\ntokens that DO verify, and it inherits future local-JWKS verification\nwhen that lands.",
          "is_bot": false,
          "headline": "docs: expand JWT-role read-only coverage in MIGRATING + ARCHITECTURE",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4bb2ffc00bca768bd103a6c12c68494d750d9838",
          "body": "Both subcommands shipped several betas ago alongside the original CLI\nread-only feature but were never added to the CLI.md reference. Adding\nthem now alongside the JWT-role gate work, since the two policies are\ndiscussed together everywhere else in the user docs.\n\nCross-links to GUIDE.md §13's comparison table so readers see the\nCLI-vs-server distinction without context-switching.\n\nNo code change — `config set read-only` / `config unset read-only`\nhave been in the dispatcher since beta.56.",
          "is_bot": false,
          "headline": "docs(cli): document `config set read-only` and `config unset read-only`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfed2cd18dec838120abaa6bddcb09cc0680ab00",
          "body": "examples/cli.toml gains a commented-out `read_only` line covering the\nCLI-side toggle (previously undocumented in the example, even though\n`manta config set read-only` has shipped for several betas).\n\nexamples/server.toml gains a comment block noting that the new\n`manta-read-only` JWT-role gate is N\n[…]\ngo to MIGRATING.md §2.7 (kcadm.sh\nrecipe) and GUIDE.md §13 (operator description).\n\nCloses the example-file gap. Pre-existing operators copy-pasting\neither example file now see both policies surfaced.",
          "is_bot": false,
          "headline": "docs(examples): document read-only access in cli.toml + server.toml",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "230c20f574ab346e82a09cd5f4ba2107eb1678c7",
          "body": "Was buried as a sub-section under §12 (Non-interactive and scripted\nuse). Read-only access is a distinctive operator topic with two\nindependent policies — promoting it to a dedicated section with\nsub-sections and a comparison table makes it discoverable from the\nToC and reads better.\n\nRenumbers old §13 (Installation maintenance) -> §14 and its three\nsub-sections from §13.x to §14.x. ToC updated.\n\nAdds a discoverability bullet to API.md's TL;DR linking to the new\nGUIDE.md §13.",
          "is_bot": false,
          "headline": "docs(guide): promote Read-only access to top-level §13",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09831435cac64c8bacbbb35ca4924d94f70d2cea",
          "body": "Adds a Keycloak provisioning recipe (kcadm.sh examples) to the\n\"Site operators\" section. Renumbers the old §2.7 Verify → §2.8 to\nkeep the section sequence tight.\n\nCloses the operator-side rollout gap for the JWT-role gate added in\nthis branch.",
          "is_bot": false,
          "headline": "docs(migrating): add §2.7 operator-rollout for the manta-read-only role",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "405af9df661833a8342a21a64b0310ca44b0c445",
          "body": "User-facing docs for the server-side read-only enforcement added in\nthis branch:\n\n- README.md: bullet in the server-only-settings list under \"Beyond\n  the flags above\"; describes the role and its scoping vs CLI flag.\n- ARCHITECTURE.md: new row in the §\"Security model\" mitigations\n  table pointing at\n[…]\n the CLI-side\n  read_only = true flag.\n\nCHANGELOG.md is regenerated by git-cliff from commit messages on\nrelease; skipped. No migration steps; MIGRATING.md untouched. No\nCLI changes; CLI.md untouched.",
          "is_bot": false,
          "headline": "docs: document the manta-read-only JWT-role gate",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "67958083e8e675a8e0f9ea549395f8daa24aea87",
          "body": "Adds an Axum middleware (read_only_guard) layered on /api/v1/* that\ninspects the caller's bearer token and refuses POST/PUT/PATCH/DELETE\nwith 403 Forbidden when the realm_access.roles claim contains\n\"manta-read-only\".\n\nThe gate is independent of (and orthogonal to) the existing CLI-side\n`read_only =\n[…]\n* (login) and /docs are unaffected.\n\nIntegration tests pin: POST/PUT/PATCH/DELETE refused with the role,\nGET passes through, plain tokens unaffected, missing-auth still 401,\nauth sub-router not gated.",
          "is_bot": false,
          "headline": "feat(server): reject mutating requests for JWT manta-read-only role",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5a7d85dbe9fca9d4b41956881339f7fb8039efbb",
          "body": "Generalises the role-search logic used by is_user_admin into a reusable\nhas_role(token, role) helper. is_user_admin is now a one-line wrapper.\nIntroduces READ_ONLY_ROLE = \"manta-read-only\" for the upcoming\nread-only middleware gate.\n\nPure addition + refactor; no behaviour change to is_user_admin (covered\nby existing tests + new has_role tests).",
          "is_bot": false,
          "headline": "feat(server): add has_role helper + READ_ONLY_ROLE const",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T17:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d380e1740200511c74d4c892368fcfdea74a794",
          "body": "The public /auth/{token,validate} handlers collapsed every failure —\nincluding \"site not configured\" — into a generic 401, so targeting a\nnon-existent site prompted for credentials (up to 3x) before failing.\nEvery authenticated endpoint already 404s on an unknown X-Manta-Site\nvia RequestCtx; the aut\n[…]\nractive cascade so it stops instead of re-prompting for credentials\nthat can never authenticate against a site that doesn't exist.\n\nCloses #102\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(server): return 404 for unknown site on /auth/*",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-28T15:02:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "87a4230be42ebc3788a69caafa74f9cdad4141a5",
          "body": "…inuation\n\nThe previous wording had `+ [`SiteName`]` at the start of a `///` line,\nwhich clippy 1.92's doc parser reads as a list bullet — then complains\nthat the next 4 continuation lines aren't indented under it.\n\nRephrasing to a single comma-separated clause (`State<...>`, `BearerToken`,\nand `SiteName`) keeps the same meaning without introducing a phantom list.",
          "is_bot": false,
          "headline": "docs(server): rephrase RequestCtx intro to avoid clippy doc_lazy_cont…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T11:41:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61f751c2fc8a9003d8ad20981a669a0165832142",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T11:22:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0638d2736ac9110c5274a2da964fa441d70fc482",
          "body": "Adds substantive rustdoc to manta-shared, manta-server, and manta-cli\npublic surfaces: module headers, `# Errors` sections, `# Examples`,\ncross-links, and wire-shape JSON sketches.\n\nDoc highlights:\n- manta-shared/types: wire-shape JSON examples on every Request/Response,\n  cross-linked Request <-> R\n[…]\ne explicit Skip<Args> type annotation.\n\nVerified: cargo doc --workspace --no-deps --document-private-items\nclean, cargo test --workspace --doc 7/7 passing, cargo check\n--workspace --all-targets clean.",
          "is_bot": false,
          "headline": "docs: comprehensive doc sweep across workspace + small CLI cleanups",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T11:14:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "daec0defc735bd5f72be706781ca81f97e7a076c",
          "body": null,
          "is_bot": true,
          "headline": "chore(cli): regenerate man pages + shell completions [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-28T09:03:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c87200e9f6d19253382987964b3f628e6dba593",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T08:45:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13cce1854b7650f2cff295e4ba852f60bb348c5d",
          "body": null,
          "is_bot": false,
          "headline": "feat(manta-server): publish manta-server to crates.io",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-28T08:44:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00c0089a002795f4349b7e98b8374e4e0244bf81",
          "body": null,
          "is_bot": true,
          "headline": "chore(cli): regenerate man pages + shell completions [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T12:25:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8e8accf7c9fdda5c2dfd20f85f554bd395dbd7d",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-25T12:08:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c64dd4639d44f97f397867b2de5e5c4e1fd8114e",
          "body": null,
          "is_bot": true,
          "headline": "chore(cli): regenerate man pages + shell completions [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T12:03:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29bb759b158db8f470faddaff1be76f29228f4ad",
          "body": "cargo-machete flagged both as unused. Verified neither the crate\nsource nor the progenitor-generated openapi_client.rs references\nthem; regex remains in use only by manta-server.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01W72jzmGAaSKfqGXtddV7LS",
          "is_bot": false,
          "headline": "build: remove unused bytes and regex deps from manta-cli",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-25T11:41:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6ebd673509bfd79e1a01390c32e9ec7a28e30c07",
          "body": null,
          "is_bot": false,
          "headline": "Fix cargo clippy",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-25T10:18:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b751d422b5570fdaf846d7ec04c308c9f23c2c2a",
          "body": "* fix(manta-cli): make cli.toml site field optional (#101)\n\nThe `site` field in `cli.toml` was mandatory, even when `--site` was\nsupplied per-invocation. Make `CliConfiguration::site` an\n`Option<String>` and resolve the active site as `--site` → config\n`site` → clean error. A missing site is now a u\n[…]\n `parent_hsm_group`\ncli.toml key; the CLI default-group key is `hsm_group`.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "cli.toml: make site field optional and remove [sites] table (#103)",
          "author_name": "Radim Janalík",
          "author_login": "rjanalik",
          "committed_at": "2026-06-25T08:28:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dbd87d41e96a28c9722fceb98ae0612e85d39dcb",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:50:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "721ab68007ae2d3b4f4114c8c916f9fb7856d1cb",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:50:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb034d66838bd7ea1231b3217be13c4829a0c6ee",
          "body": "`cargo doc --workspace --no-deps` under\n`-D rustdoc::broken-intra-doc-links` (CI default) was failing on two\nunresolved references:\n\n- `service/configuration.rs` linked to bare\n  `[build_configuration_analysis]`, which isn't in scope. Qualified\n  to `crate::service::analysis::build_configuration_ana\n[…]\ns::sat_file`, but\n  that submodule is private — items are re-exported via\n  `pub use sat_file::*` in `handlers/mod.rs`. Dropped the private\n  module segment so the link resolves through the re-export.",
          "is_bot": false,
          "headline": "docs(server): fix broken intra-doc links failing `cargo doc`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:50:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e14c6ed77c4c494a5f862cea4603fcfe3f47a461",
          "body": null,
          "is_bot": true,
          "headline": "style(ci): apply rustfmt [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-22T09:44:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62b045db1b5ab671ce0c0b588dc54c59fc9a3024",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:36:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63a864b7070549fd5f1cb585f58a0db1cf9d1422",
          "body": "GUIDE.md §12 explained the dry-run output channel by naming\n`action_result::print_with_data` — the helper that did the rendering\nbefore the recent CLI refactor extracted a thin `preview_request`\nwrapper around it. Calling the helper by name is an implementation\ndetail that adds no value for an opera\n[…]\n internals get renamed.\n\nRephrase the parenthetical to describe the user-visible behaviour\n(\"the shared output renderer; honors `-o table | json`\") so the\nreference stops mattering on the next rename.",
          "is_bot": false,
          "headline": "docs: drop Rust helper name from GUIDE §12 dry-run paragraph",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:35:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "93bd9b5298dd40da02a4a60faf72b7a8ac413731",
          "body": "Three `ExecParams::dry_run` field docs still pointed at\n`action_result::print_with_data` — the call sites were rewired to\n`action_result::preview_request` in the previous refactor commit.\nUpdates the prose in `add/node.rs`, `add/redfish_endpoint.rs`, and\n`apply/redfish_endpoint.rs` to match.\n\nAlso a\n[…]\n a dirty repo\n(`tracing::warn!` vs confirm prompt), and every repo is still\nopened/inspected on both paths. Document that explicitly so future\nreaders don't read `dry_run` as a skip-validation switch.",
          "is_bot": false,
          "headline": "docs(cli): refresh doc comments after the dry-run helper extraction",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:27:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d564704e6dda1f42c10e574e1eabb7f2bb92667a",
          "body": "CLI.md `add group` table was missing the `-o/--output` row even\nthough `add_group()` wires `output_flag()` in `build/add.rs`. Add the\nrow, and flesh out the dry-run description so operators know it\npreviews both the `create_group` payload and (when `--nodes` is\ngiven) the follow-up `add_nodes_to_gro\n[…]\nG.md §2.1 quoted a `manta-server --help` snippet that\npredated `--allow-http` and `--emit-openapi`; refresh it from the\ncurrent help text so site operators upgrading from v1 see the real\nflag surface.",
          "is_bot": false,
          "headline": "docs: refresh `add group --dry-run` row + `manta-server --help` snippet",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:19:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "196ed0619e789e45485d8aeb9a33ad01b62dca1b",
          "body": "Two unrelated server-side changes landed without updating the test\nfiles; this commit aligns them:\n\n- `ServerState` gained a `shutdown_grace_period: Duration` field. Add\n  it (= 30s) to the three test fixtures in `integration.rs` and\n  `server_routes.rs` so the tests compile.\n\n- `service::configurat\n[…]\nis` path that consults CFS v3\n  components). Update the `get_configurations_happy_path` test to\n  assert against the new shape, register a v3 components mock, and\n  refresh the call-chain doc comment.",
          "is_bot": false,
          "headline": "test(server): catch up to current ServerState + get_configurations shape",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:13:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fdb92e5d065331f76ae26caa80d34301b74c0f20",
          "body": "manta-server only ever needed clap for six flags (--port, --cert,\n--key, --listen-address, --allow-http, --emit-openapi) plus --help\nand --version. The dependency was disproportionate.\n\nReplace with a single function that walks std::env::args and matches\non flag names. Same surface (incl. `--flag=va\n[…]\nnc.\n\n`CliArgs` is now a small typed struct consumed by `run` / `run_server`\ninstead of `clap::ArgMatches`, which lets the call sites drop the\n`get_one::<T>(...).cloned()` and `get_flag(...)` patterns.",
          "is_bot": false,
          "headline": "refactor(server): drop clap dep, hand-roll minimal arg parser",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T09:13:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bd6b74c23d35805d2e953e1a57e41a5d67084945",
          "body": "Findings from a /simplify sweep over the dry-run + read-only foundation\nwork of the last 2 days. Net -178 lines across 20 files.\n\nHelpers extracted\n- build::dry_run_flag() — one source of truth for the `-d/--dry-run`\n  clap arg, replacing ~30 verbatim copies across add/apply/delete/\n  power/run/rest\n[…]\nvalid JSON; moved the confirm prompt to the\n  live path only.\n- delete boot-parameters: moved `MantaClient::from_app_ctx` below the\n  dry-run early return (matches the convention used by delete/node).",
          "is_bot": false,
          "headline": "refactor(cli): consolidate dry-run helpers + dispatcher cleanups",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T07:18:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "875836a1ceb9d7d0cffcb23d163805fa8b313af5",
          "body": "Move pin/unpin algorithm from manta-server to manta-cli, removing\ncomfy-table from the server. Adds PUT /api/v1/groups/{name}/members\nas the only new endpoint, drops the three /hardware-clusters routes.",
          "is_bot": false,
          "headline": "docs: design spec for hw_cluster server-to-CLI migration",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "740cbecf73ebdd4cb619b19efb559022a79ebe17",
          "body": "The read-only chokepoint used to filter the \"Re-run with --dry-run\"\nhint by an allowlist (`add`/`apply`/`delete`/`migrate`) because the\nother mutating verbs (`power`, `run`, `restore`) didn't accept the\nflag — pointing users at it would have surfaced a clap parse error.\n\nWith the 16-leaf sweep compl\n[…]\nto see.\n\nNet: -1 constant, +1 better test, error messages now consistent\nacross every mutating verb. No behavioural change on the gate's\nallow/deny decision — that was always driven by MUTATING_VERBS.",
          "is_bot": false,
          "headline": "chore(cli): remove VERBS_WITH_DRY_RUN partial-coverage allowlist",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e9536787e99665eda1fb17886a0b9fbe2f7b0da",
          "body": "Follow-up to the prior CLI.md/MIGRATING.md/GUIDE.md §12 doc pass.\nThree sections that describe mutating workflows in narrative form\nwere still showing real-run examples only; this commit adds short\n`--dry-run` snippets to the two GUIDE sections that benefit most\nfrom a preview pattern (run session a\n[…]\nsection):\n- New \"Previewing before mutating\" one-paragraph pointer with a\n  deep-link to GUIDE.md §12 for the full per-verb behaviour.\n\nNo code change. No CHANGELOG.md edit (git-cliff regenerates it).",
          "is_bot": false,
          "headline": "docs: add inline `--dry-run` examples to GUIDE §4/§7 + README pointer",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b07f5c49a6b3fca982ea1ffbf357df1530d959a2",
          "body": "… swap\n\nThe 16-leaf CLI dry-run sweep landed last night plus the follow-up\nshort-alias swap on `add group` (`-d` reassigned from `--description`\nto `--dry-run`, `--description` now takes `-D`). The user docs needed\nto catch up:\n\nCLI.md (per-command reference):\n- `add group`: `-D/--description` (was \n[…]\neractive and scripted use), with pipe-to-jq examples and a\n  pointer to MIGRATING.md §5.11 for the `add group` exception.\n\nNo CHANGELOG.md edit — git-cliff regenerates it from commits at\nrelease time.",
          "is_bot": false,
          "headline": "docs: document `--dry-run` across all mutating verbs + add-group `-D`…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11a4fcfaafd806365b02d9a5a0227cdb9bda38da",
          "body": "`add group` was the lone outlier in the 16-leaf dry-run sweep: it had\n`--dry-run` (long form only) and no `-d` short alias, because `-d`\nwas already taken by `--description`. The asymmetry made `add group`\nthe only mutating verb across the CLI where `-d` doesn't mean\n`--dry-run`.\n\nSwap the short ali\n[…]\ndid the same swap\nto free `-d` from `--disabled` for `--dry-run`.\n\nBREAKING CHANGE: `manta add group -d <text>` no longer sets the\ngroup description. Use `-D <text>` or `--description <text>` instead.",
          "is_bot": false,
          "headline": "feat(cli)!: add `-d` short alias to `manta add group --dry-run`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3934b90ccfc41609212af767461399b0ecd1fc61",
          "body": "Completes the 16-leaf CLI dry-run sweep. The server endpoint has no\n`dry_run` field on MigrateRestoreRequest, so the preview is purely\nclient-side. The CLI runs the existing required-arg checks, the\ndiagnostic print, and the check_hook_perms validations, then builds\nthe MigrateRestoreRequest, prints\n[…]\nange. No breaking change.\n\nSixteenth and final mutating leaf to gain `--dry-run`. The\nVERBS_WITH_DRY_RUN partial-coverage allowlist in common::read_only\ncan now be removed (separate follow-up commit).",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta restore vcluster`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "794fae8b15b34d876b4c8ca650c1c866137ed7d4",
          "body": "The server endpoint has no `dry_run` field on CreateSessionRequest,\nso the preview is purely client-side. The CLI still runs git2 against\nthe user's local repos (so the preview shows resolved commit IDs),\nskips both confirmation prompts (uncommitted-changes + layer-review),\nprints the CreateSessionR\n[…]\nparse-acceptance tests cover the long flag and the `-d` short\nalias. No server-side change. No breaking change.\n\nFifteenth of 16 mutating leaves that lack `--dry-run`. Only\n`restore vcluster` remains.",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta run session`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a968fb3603c433f59c8d9365aaae536d9baace2",
          "body": "Six leaves (`power {on,off,reset} {nodes,group}`) all converge on a\nsingle dispatch_and_wait() handler. The dry-run branch is added once\nthere: build the PowerRequest, print it via\naction_result::print_with_data, and return Ok(()) before constructing\nthe MantaClient and before the post_power call. N\n[…]\nng flag, short\nalias}. Shared `parse(argv)` helper deduplicates the `try_get_matches_from`\nboilerplate.\n\nBundles leaves 9-14 of the 16-leaf dry-run sweep. Remaining: `run\nsession`, `restore vcluster`.",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to all `manta power` mutating leaves",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f50929c23a1c4c781732e43e17b55948cfdb9e85",
          "body": "The dry-run preview reads `output_opt` to route through\n`action_result::print_with_data`, but the subcommand never declared\n`-o/--output` — so `manta apply ephemeral-environment --image-id X\n--dry-run -o json` would have been rejected by clap at parse time\n(spec verification step #3 explicitly requi\n[…]\ndry-run path still prints raw hostname for\nshell-pipe consumption — output_flag only affects the dry-run preview,\nmatching the design intent.\n\nFold-in for the dry-run leaf one commit prior (37f8fad3).",
          "is_bot": false,
          "headline": "feat(cli): honor `-o` on `apply ephemeral-environment` dry-run",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1e8e3426d10e874191979361106a958ee74eb531",
          "body": "The server endpoint has no `dry_run` support, and a successful POST\nmints a real IMS customize container — non-idempotent state until\ncleanup. The CLI now builds the CreateEphemeralEnvRequest as if real,\nprints it via action_result::print_with_data, and returns Ok(()) before\nthe OpenAPI call. Honors\n[…]\nhat touches every\ninline arm uniformly.\n\nTwo parse-acceptance tests in dispatch/apply/mod.rs's unit-test target\ncover the long flag and the `-d` short alias. No server-side change.\nNo breaking change.",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta apply ephemeral-environment`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d945753cfc285bf8f169e7bafb2efab4a4d9744f",
          "body": "The server endpoint has no `dry_run` support (path-only DELETE\n/redfish-endpoints/{id}; no JSON body), so the preview is purely\nclient-side: the CLI prints the targeted xname via\naction_result::print_with_data and returns Ok(()) before constructing\nthe MantaClient. Honors `-o table | json` uniformly\n[…]\nrse-acceptance tests in dispatch/delete/redfish_endpoint.rs's\nunit-test target cover the long flag and the `-d` short alias. No\nserver-side change. No breaking change (no short-alias swap was\nneeded).",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta delete redfish-endpoints`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9094328b1cd55a3cfa1bc6c1c13f462633abb5a8",
          "body": "The server endpoint has no `dry_run` support, so the preview is\npurely client-side: the CLI builds the DeleteBootParametersRequest\nas if real, prints it via action_result::print_with_data, and\nreturns Ok(()) before the OpenAPI call. Honors `-o table | json`\nuniformly.\n\nThree CLI touchpoints (same sh\n[…]\narse-acceptance tests in\ndispatch/delete/boot_parameters.rs's unit-test target cover the\nlong flag and the `-d` short alias. No server-side change. No\nbreaking change (no short-alias swap was needed).",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta delete boot-parameters`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cc30d0a447544ef336c230aa3463b231477452d1",
          "body": "The server endpoint has no `dry_run` support (path-only DELETE\n/nodes/{id}; no JSON body), so the preview is purely client-side:\nthe CLI prints the targeted xname via action_result::print_with_data\nand returns Ok(()) before the OpenAPI call. Honors `-o table | json`\nuniformly.\n\nThree CLI touchpoints\n[…]\nsed.\n\nTwo parse-acceptance tests in dispatch/delete/node.rs's unit-test\ntarget cover the long flag and the `-d` short alias. No server-side\nchange. No breaking change (no short-alias swap was needed).",
          "is_bot": false,
          "headline": "feat(cli): add `--dry-run` to `manta delete node`",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "692015ddd3a8ec453e7cccf5144c9733a4a2a9c4",
          "body": "…main` short alias swaps `-d` -> `-D`\n\nThe server endpoint has no `dry_run` support, so the preview is\npurely client-side: the CLI builds the UpdateRedfishEndpointParams\nas if real, prints it via action_result::print_with_data with a\n\"Would PUT /redfish-endpoints:\" label (distinct from the sibling\n`\n[…]\nin dispatch/apply/redfish_endpoint.rs's\nunit-test target cover the long flag, the `-d` short alias, and\nthe new `-D` alias for `--domain` (which is the breaking-change\nsurface). No server-side change.",
          "is_bot": false,
          "headline": "feat(cli)!: add `--dry-run` to `manta apply redfish-endpoints`; `--do…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2f7832ff82b5170c969e1d8d6c6894b77e36e1c1",
          "body": "…oints handler\n\nThe handler refactor in 8672b417 moved arg extraction up to the\ndispatcher and switched the handler's signature to take an ExecParams\nstruct. The ArgMatchesExt trait import in the handler file became\ndead at that point but was left behind; this drops it. No behaviour\nchange.",
          "is_bot": false,
          "headline": "refactor(cli): remove dead ArgMatchesExt import from add redfish-endp…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c09bba8937a6be86b05d35710d8afe582e80f546",
          "body": "…in` short alias swaps `-d` -> `-D`\n\nThe server endpoint has no `dry_run` support, so the preview is\npurely client-side: the CLI builds the UpdateRedfishEndpointParams\nas if real, prints it via action_result::print_with_data, and\nreturns Ok(()) before the OpenAPI call. Honors `-o table | json`\nunifo\n[…]\n\n\nRead-only mode interaction: with `read_only = true` in cli.toml,\nthe prior chokepoint's dry_run_set walker now finds this flag and\nbypasses the gate. Same command without --dry-run is still blocked.",
          "is_bot": false,
          "headline": "feat(cli)!: add `--dry-run` to `manta add redfish-endpoints`; `--doma…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cae5efaa7c82cdb47b1dea0627911cd11eda2255",
          "body": "The previous commit swapped `--disabled`'s short alias from `-d` to\n`-D` to free `-d` for the new `--dry-run` flag, but no test\nexercised the new `-D` form. The final whole-branch review flagged\nthis as a Minor coverage gap: the swap IS the breaking-change surface,\nand a regression that re-bound `-d` to `--disabled` (re-introducing\nthe collision with `--dry-run`) would slip through.\n\nOne additional parse test in dispatch/add/node.rs::tests locks it down.",
          "is_bot": false,
          "headline": "test(cli): assert `-D` short alias for `add node --disabled` parses",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8dd29ea03482a4b7ef1f5ef1582a50e5dac0ee04",
          "body": "…lias swaps `-d` -> `-D`\n\nThe server endpoint has no `dry_run` support, so the preview is\npurely client-side: the CLI builds the AddNodeRequest as if real,\nprints it via action_result::print_with_data, and returns Ok(())\nbefore the OpenAPI call. Honors `-o table | json` uniformly.\n\nBREAKING CHANGE: \n[…]\n\n\nRead-only mode interaction: with `read_only = true` in cli.toml, the\nprior chokepoint's dry_run_set walker now finds this flag and bypasses\nthe gate. Same command without --dry-run is still blocked.",
          "is_bot": false,
          "headline": "feat(cli)!: add `--dry-run` to `manta add node`; `--disabled` short a…",
          "author_name": "Manuel Sopena Ballesteros",
          "author_login": "Masber",
          "committed_at": "2026-06-22T00:28:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 964,
      "latest_release_at": "2026-07-12T19:59:26Z",
      "latest_release_tag": "v2.0.0-beta.62",
      "releases_from_tags": false,
      "days_since_last_push": 15,
      "active_weeks_last_year": 43,
      "days_since_latest_release": 22,
      "mean_days_between_releases": 2.3
    },
    "artifacts": {
      "collected": true,
      "structure": [
        "tree.cargo_lib",
        "tree.cargo_main",
        "tree.dockerfile",
        "tree.migrations"
      ],
      "declarations": [
        {
          "name": null,
          "path": "Cargo.toml",
          "tokens": [
            "cargo.workspace"
          ],
          "ecosystem": "crates"
        },
        {
          "name": "manta-cli",
          "path": "crates/manta-cli/Cargo.toml",
          "tokens": [
            "cargo.bin"
          ],
          "ecosystem": "crates"
        },
        {
          "name": "manta-server",
          "path": "crates/manta-server/Cargo.toml",
          "tokens": [
            "cargo.bin",
            "cargo.lib"
          ],
          "ecosystem": "crates"
        },
        {
          "name": "manta-shared",
          "path": "crates/manta-shared/Cargo.toml",
          "tokens": [
            "cargo.lib"
          ],
          "ecosystem": "crates"
        }
      ]
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "readme_badges": {
        "hosts": [],
        "total": 0,
        "header": 0,
        "collected": true,
        "has_inspect_badge": false
      },
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "manta-cli",
          "exists": true,
          "license": "non-standard",
          "keywords": [
            "cli",
            "productivity"
          ],
          "ecosystem": "crates",
          "categories": [],
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/manta-cli",
          "declared_type": null,
          "is_deprecated": false,
          "latest_version": "1.71.1",
          "repository_url": "https://github.com/eth-cscs/manta",
          "versions_count": 127,
          "total_downloads": 4132,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 417,
          "first_published_at": "2025-09-23T19:54:27.961273Z",
          "latest_published_at": "2026-07-12T19:37:32.828828Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 22
        },
        {
          "name": "manta-server",
          "exists": true,
          "license": "non-standard",
          "keywords": [],
          "ecosystem": "crates",
          "categories": [],
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/manta-server",
          "declared_type": null,
          "is_deprecated": false,
          "latest_version": "2.0.0-beta.62",
          "repository_url": "https://github.com/eth-cscs/manta",
          "versions_count": 2,
          "total_downloads": 33,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 11,
          "first_published_at": "2026-06-28T08:46:41.202808Z",
          "latest_published_at": "2026-07-12T19:37:34.479485Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 22
        },
        {
          "name": "manta-shared",
          "exists": true,
          "license": "non-standard",
          "keywords": [],
          "ecosystem": "crates",
          "categories": [],
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/manta-shared",
          "declared_type": null,
          "is_deprecated": false,
          "latest_version": "2.0.0-beta.62",
          "repository_url": "https://github.com/eth-cscs/manta",
          "versions_count": 57,
          "total_downloads": 1259,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 420,
          "first_published_at": "2026-05-18T18:55:33.709559Z",
          "latest_published_at": "2026-07-12T19:37:29.324293Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 22
        }
      ]
    },
    "popularity": {
      "forks": 4,
      "stars": 23,
      "watchers": 8,
      "fork_history": {
        "days": [
          {
            "date": "2023-07-06",
            "count": 1
          },
          {
            "date": "2023-07-19",
            "count": 1
          },
          {
            "date": "2023-09-27",
            "count": 1
          },
          {
            "date": "2024-10-18",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 4,
        "total_forks": 4
      },
      "star_history": null,
      "open_issues_and_prs": 9
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [
        "crates/manta-cli/openapi.json"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "Cargo.toml",
        "crates/manta-cli/Cargo.toml",
        "crates/manta-server/Cargo.toml",
        "crates/manta-shared/Cargo.toml"
      ],
      "largest_source_bytes": 40182,
      "source_files_sampled": 228,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 2147
    },
    "dependencies": {
      "manifests": [
        "Cargo.toml"
      ],
      "advisories": {
        "error": "No resolved dependencies carried a version and a supported ecosystem",
        "scope": "repository_graph",
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 47,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "crates"
      ],
      "dependencies": [
        {
          "name": "manta-shared",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "nodeset",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.5.0"
        },
        {
          "name": "chrono",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.4.41"
        },
        {
          "name": "anyhow",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.44"
        },
        {
          "name": "reqwest",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.13.4"
        },
        {
          "name": "serde",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.219"
        },
        {
          "name": "serde_json",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.140"
        },
        {
          "name": "serde_yaml",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.9.34"
        },
        {
          "name": "tracing",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1"
        },
        {
          "name": "tokio",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.45"
        },
        {
          "name": "tokio-util",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.7.4"
        },
        {
          "name": "minijinja",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "uuid",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.16.0"
        },
        {
          "name": "git2",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.21"
        },
        {
          "name": "dialoguer",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.12.0"
        },
        {
          "name": "futures",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.3.31"
        },
        {
          "name": "toml_edit",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.22.27"
        },
        {
          "name": "clap",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "4.5.60"
        },
        {
          "name": "clap_complete",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "4.5.66"
        },
        {
          "name": "clap_mangen",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.3.0"
        },
        {
          "name": "comfy-table",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "7.2.2"
        },
        {
          "name": "crossterm",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.29.0"
        },
        {
          "name": "execute",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.2.13"
        },
        {
          "name": "is_executable",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.1"
        },
        {
          "name": "config",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.15.19"
        },
        {
          "name": "tokio-tungstenite",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.29"
        },
        {
          "name": "self_update",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.44"
        },
        {
          "name": "xz2",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1"
        },
        {
          "name": "tar",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.4"
        },
        {
          "name": "semver",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0"
        },
        {
          "name": "progenitor-client",
          "manifest": "crates/manta-cli/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.14"
        },
        {
          "name": "manta-shared",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "manta-backend-dispatcher",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "csm-rs",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "ochami-rs",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "axum",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.8"
        },
        {
          "name": "axum-server",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.8"
        },
        {
          "name": "tower-http",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.6"
        },
        {
          "name": "tokio",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tokio-util",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "futures",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "utoipa",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "utoipa-swagger-ui",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "9"
        },
        {
          "name": "rustls",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.23"
        },
        {
          "name": "base64",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "chrono",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "rdkafka",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "comfy-table",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "7.2.2"
        },
        {
          "name": "globset",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.4"
        },
        {
          "name": "hostlist-parser",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.1.6"
        },
        {
          "name": "regex",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "reqwest",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_yaml",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tracing",
          "manifest": "crates/manta-server/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "manta-backend-dispatcher",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "base64",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_yaml",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "chrono",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "utoipa",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tracing",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tracing-subscriber",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "config",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "directories",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "toml_edit",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "reqwest",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "thiserror",
          "manifest": "crates/manta-shared/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "anyhow",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "axum",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "axum-server",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "base64",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "chrono",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "clap",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "clap_complete",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "clap_mangen",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "comfy-table",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "config",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "crossterm",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "dialoguer",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "execute",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "futures",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "git2",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "hostlist-parser",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "is_executable",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "nodeset",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "progenitor-client",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "reqwest",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "rustls",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "self_update",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "semver",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "serde",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "serde_json",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "serde_yaml",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tar",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tokio",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tokio-tungstenite",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tokio-util",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "toml_edit",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tower-http",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tracing",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "utoipa-swagger-ui",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "uuid",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "xz2",
            "direct": true,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "assert_cmd",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "http-body-util",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "openapiv3",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "predicates",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "prettyplease",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "progenitor",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "syn",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tempfile",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "toml",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "tower",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          },
          {
            "name": "wiremock",
            "direct": false,
            "version": null,
            "ecosystem": "crates"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 47,
        "direct_count": 36,
        "indirect_count": 11
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 20,
        "open_issues": 7,
        "closed_ratio": 0.92,
        "closed_issues": 81,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "Masber",
          "commits": 1391,
          "avatar_url": "https://avatars.githubusercontent.com/u/722064?v=4"
        },
        {
          "type": "User",
          "login": "ManuelSopenaBallesteros",
          "commits": 690,
          "avatar_url": "https://avatars.githubusercontent.com/u/196793114?v=4"
        },
        {
          "type": "User",
          "login": "miguelgila",
          "commits": 20,
          "avatar_url": "https://avatars.githubusercontent.com/u/7137318?v=4"
        },
        {
          "type": "User",
          "login": "rjanalik",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/2372198?v=4"
        },
        {
          "type": "User",
          "login": "aescoubas",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/69113198?v=4"
        },
        {
          "type": "User",
          "login": "matteo-chesi",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/17476259?v=4"
        }
      ],
      "contributors_sampled": 6,
      "top_contributor_share": 0.659
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "cleanup-ghcr.yml",
        "docker-publish.yml",
        "docs.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 1/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "41af6045b118591e9f529b44d75efe0d75d04a7f",
        "ran_at": "2026-08-04T00:56:13Z",
        "aggregate_score": 4.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "recent_prs": {
        "merged_7d": 0,
        "decided_7d": 0,
        "merged_30d": 1,
        "authors_30d": 1,
        "decided_30d": 1,
        "sample_size": 21,
        "window_days": 30,
        "sample_exhausted": false,
        "authors_probed_30d": 1,
        "newcomer_merged_30d": 0,
        "bot_prs_excluded_30d": 0,
        "newcomer_authors_30d": 0,
        "newcomer_decided_30d": 0
      },
      "ci_last_run_at": "2026-08-02T05:09:32Z",
      "oldest_open_prs": [
        {
          "number": 110,
          "created_at": "2026-07-17T22:27:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 111,
          "created_at": "2026-07-18T23:50:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-17T12:03:06Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 21,
          "created_at": "2024-02-10T00:40:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 23,
          "created_at": "2024-02-10T16:03:16Z",
          "last_comment_at": "2024-02-12T08:02:03Z",
          "last_comment_author": "miguelgila"
        },
        {
          "number": 64,
          "created_at": "2024-04-10T21:48:19Z",
          "last_comment_at": "2026-07-17T20:17:14Z",
          "last_comment_author": "rjanalik"
        },
        {
          "number": 94,
          "created_at": "2025-04-01T22:36:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 107,
          "created_at": "2026-07-17T22:22:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 108,
          "created_at": "2026-07-17T22:22:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 109,
          "created_at": "2026-07-17T22:22:48Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/eth-cscs/manta",
    "host": "github.com",
    "name": "manta",
    "owner": "eth-cscs"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": "The weighted overall 67 is calibrated to 78 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 67,
            "calibrated": 78,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 78,
      "inputs": {
        "security": 47,
        "vitality": 88,
        "community": 42,
        "governance": 66,
        "calibration": "2026-08-02",
        "engineering": 81,
        "ai_readiness": 79,
        "weighted_overall_raw": 67
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 88,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 87,
            "inputs": {
              "commits_last_year": 964,
              "human_commit_share": 0.89,
              "days_since_last_push": 15,
              "active_weeks_last_year": 43
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 15 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 15
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "43/52 weeks with commits",
                "points": 29.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 43
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "964 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 964
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v2.0.0-beta.62",
              "releases_from_tags": false,
              "days_since_latest_release": 22,
              "mean_days_between_releases": 2.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 22 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 22
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 17,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 17 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 17
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "weak",
        "name": "Community & Adoption",
        "value": 42,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 30,
            "inputs": {
              "forks": 4,
              "stars": 23,
              "watchers": 8,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "23 stars",
                "points": 21.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 23
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "4 forks",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "8 watchers",
                "points": 4.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": 0,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "readme_badge_services": [],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (BSD-3-Clause)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "BSD-3-Clause"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "weak",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 49,
            "inputs": {
              "packages": [
                "manta-cli",
                "manta-server",
                "manta-shared"
              ],
              "dependents": null,
              "ecosystems": "crates",
              "total_downloads": 5424,
              "monthly_downloads": 848
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "848 downloads/month across crates",
                "points": 39.1,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 848,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 66,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 31,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 6,
              "top_contributor_share": 0.659
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 66% of commits",
                "points": 7.7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 66
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "6 contributors",
                "points": 8.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 77,
            "inputs": {
              "merged_prs": 20,
              "open_issues": 7,
              "closed_issues": 81,
              "prs_merged_7d": 0,
              "prs_decided_7d": 0,
              "prs_merged_30d": 1,
              "prs_decided_30d": 1,
              "issue_closed_ratio": 0.92,
              "closed_unmerged_prs": 1,
              "first_time_authors_30d": 0,
              "first_time_prs_merged_30d": 0,
              "first_time_prs_decided_30d": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "92% of issues closed",
                "points": 38.6,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 92
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "20/21 decided PRs merged",
                "points": 28.6,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 20,
                      "decided": 21
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 1/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "followers": 181,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "eth-cscs",
              "public_repos": 142,
              "account_age_days": 4668
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "181 followers of eth-cscs",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 181,
                      "login": "eth-cscs"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "142 public repos, account ~12 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 142
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 12
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "manta-cli",
                "manta-server",
                "manta-shared"
              ],
              "ecosystems": "crates",
              "any_deprecated": false,
              "min_days_since_publish": 22
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "3 package(s) on crates",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 3,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 22 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 22
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "127 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 127
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 81,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "exceptional",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "alps",
                "cli",
                "csm",
                "productivity",
                "cscs"
              ],
              "has_wiki": true,
              "homepage": "https://eth-cscs.github.io/manta/",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://eth-cscs.github.io/manta/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "weak",
        "name": "Security",
        "value": 47,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "weak",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 47,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 4.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 1/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 6
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 79,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.989,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 2147
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "88 of 89 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 88,
                      "sampled": 89
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.06,
              "toolchain_manifests": [
                "Cargo.toml",
                "crates/manta-cli/Cargo.toml",
                "crates/manta-server/Cargo.toml",
                "crates/manta-shared/Cargo.toml"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Cargo.toml, crates/manta-cli/Cargo.toml, crates/manta-server/Cargo.toml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "Cargo.toml, crates/manta-cli/Cargo.toml, crates/manta-server/Cargo.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Rust (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "6 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 6,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "exceptional",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Rust",
              "largest_source_bytes": 40182,
              "source_files_sampled": 228,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Rust (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/228 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 228,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "excellent",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": [
                "crates/manta-cli/openapi.json"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "crates/manta-cli/openapi.json",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "crates/manta-cli/openapi.json"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "labels": [
        "library",
        "cli",
        "network-service",
        "tui"
      ],
      "scores": {
        "cli": 14,
        "tui": 4,
        "library": 15,
        "network-service": 7
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "declared",
          "label": "library",
          "source": "cargo.lib",
          "weight": 6
        },
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:crates",
          "weight": 6
        },
        {
          "tier": "dependencies",
          "label": "cli",
          "source": "dep:clap",
          "weight": 4
        },
        {
          "tier": "dependencies",
          "label": "network-service",
          "source": "dep:axum",
          "weight": 4
        },
        {
          "tier": "dependencies",
          "label": "tui",
          "source": "dep:crossterm",
          "weight": 4
        },
        {
          "tier": "declared",
          "label": "cli",
          "source": "cargo.bin",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "cli",
          "source": "tree.cargo_main",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "library",
          "source": "tree.cargo_lib",
          "weight": 3
        },
        {
          "tier": "structure",
          "label": "network-service",
          "source": "api_schema",
          "weight": 3
        },
        {
          "tier": "description",
          "label": "cli",
          "source": "description:cli",
          "weight": 2
        },
        {
          "tier": "tags",
          "label": "cli",
          "source": "tag:cli",
          "weight": 2
        }
      ],
      "artifacts": [
        {
          "path": "Cargo.toml",
          "labels": [],
          "ecosystem": "crates"
        },
        {
          "path": "crates/manta-cli/Cargo.toml",
          "labels": [
            "cli"
          ],
          "ecosystem": "crates"
        },
        {
          "path": "crates/manta-server/Cargo.toml",
          "labels": [
            "library",
            "cli"
          ],
          "ecosystem": "crates"
        },
        {
          "path": "crates/manta-shared/Cargo.toml",
          "labels": [
            "library"
          ],
          "ecosystem": "crates"
        }
      ],
      "confidence": "high",
      "host_extension": false,
      "runs_as_process": true,
      "consumed_by_code": true
    },
    "metrics_version": "2.3.1"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "No resolved dependencies carried a version and a supported ecosystem"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-04T00:56:22.587349Z",
  "schema_version": "0.30.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/e/eth-cscs/manta.svg",
  "full_name": "eth-cscs/manta",
  "license_state": "standard",
  "license_spdx": "BSD-3-Clause"
}

Related records

Inspected repositories sharing catalogue tags or ecosystems with eth-cscs/manta. Read them side by side →

98microsoft/agent-governance-toolkitAI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.Exceptional98nrwl/nxThe Monorepo Platform that amplifies both developers and AI agents. Nx optimizes your builds, scales your CI, and fixes failed PRs automatically. Ship in half the time.Exceptional98getsentry/sentry-cliA command line utility to work with Sentry.Exceptional96vercel/vercelDevelop. Preview. Ship.Exceptional96wasmerio/wasmer🚀 Fast, secure, lightweight containers based on WebAssemblyExceptional95vectordotdev/vectorA high-performance observability data pipeline.Exceptional

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.3.1, schema v0.30.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statistics — crates.io.