Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-29 23:51 UTC
grokify / omniproxy
Universal HTTP/HTTPS proxy with MITM support for traffic capture and analysis.
grokify/omniproxy holds a health index of 64 out of 100, placing it in the Moderate band. It scores highest on Vitality (84/100) and lowest on Community & Adoption (40/100). It was last updated today. A single contributor accounts for most of its recent work.
64
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
64
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
John WangPersonal account
157 followers419 public repossince Feb 2010
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/grokify/omniproxy | v0.3.0 | - | 3 | 2 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
84
Development activity
78Good
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 13.8/36 | Commit cadence — 20/52 weeks with commits |
| 18/18 | Commit volume — 122 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 122 |
| human_commit_share | 0.79 |
| days_since_last_push | 0 |
| active_weeks_last_year | 20 |
Release discipline
92Excellent
How it's scored
| 27/27 | Ships releases — 3 releases published |
| 36/36 | Release recency — latest release 2 days ago |
| 19.8/27 | Release cadence — a release every ~101.4 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 3 |
| latest_release_tag | v0.3.0 |
| releases_from_tags | no |
| days_since_latest_release | 2 |
| mean_days_between_releases | 101.4 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
40
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
85Excellent
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 18/18 | CONTRIBUTING guide |
| 13.5/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | yes |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
53
Maintainer resilience (bus factor)
20Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 5 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
49At risk
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 26.3/38.3 | PR acceptance — 33/48 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/10 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 33 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 15 |
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
Ownership & stewardship
64Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 15.8/25 | Owner reach — 157 followers of grokify |
| 25/25 | Track record — 419 public repos, account ~16 yr old |
Inputs used
| followers | 157 |
| owner_type | User |
| is_verified | — |
| owner_login | grokify |
| public_repos | 419 |
| account_age_days | 5,999 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
92Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 2 days ago |
| 12/20 | Version history — 3 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/grokify/omniproxy |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 2 |
Engineering Quality
Are baseline engineering and documentation practices in place?
76
Engineering practices
76Good
How it's scored
| 24/24 | CI workflows — 3 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yaml |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 12/20 | OpenSSF Scorecard: CI-Tests — 3 out of 5 merged PRs checked by a CI test -- score normalized to 6 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
75Good
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
63
Security posture
63Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 1.5/2.5 | CI-Tests — 3 out of 5 merged PRs checked by a CI test -- score normalized to 6 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/10 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 5 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 3.5/5 | SAST — SAST tool is not run on all commits -- score normalized to 7 |
| 2/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 6.8/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 6.3 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
72
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 78 of 79 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.987 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
85Excellent
How it's scored
| 12.6/18 | One-command bootstrap — go.mod (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yaml |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 10/10 | Demonstrated agent practice — 42 of the last 100 commits agent-authored or agent-credited |
| 8/8 | Automated maintenance — 21 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0.42 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.21 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 54.5/55 | Manageable file sizes — 1/107 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 193,726 |
| source_files_sampled | 107 |
| oversized_source_files | 1 |
Key facts
0GitHub stars
1contributors
122commits, last 12 months
0days since last push
3releases
1bus factor
0open issues
Gopackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 6.3 / 10
6.3aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 6 | CI-Tests | 3 out of 5 merged PRs checked by a CI test -- score normalized to 6 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/10 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 5 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 7 | SAST | SAST tool is not run on all commits -- score normalized to 7 |
| 4 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 9 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Direct dependencies 14
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | entgo.io/ent | v0.14.6 | go.mod |
| Go | github.com/elazarl/goproxy | v1.8.5 | go.mod |
| Go | github.com/grokify/mogo | v0.74.6 | go.mod |
| Go | github.com/lib/pq | v1.12.3 | go.mod |
| Go | github.com/mattn/go-sqlite3 | v1.14.48 | go.mod |
| Go | github.com/plexusone/omniobserve | v0.12.0 | go.mod |
| Go | github.com/prometheus/client_golang | v1.24.1 | go.mod |
| Go | github.com/spf13/cobra | v1.10.2 | go.mod |
| Go | go.opentelemetry.io/otel | v1.44.0 | go.mod |
| Go | go.opentelemetry.io/otel/exporters/prometheus | v0.66.0 | go.mod |
| Go | go.opentelemetry.io/otel/metric | v1.44.0 | go.mod |
| Go | go.opentelemetry.io/otel/sdk/metric | v1.44.0 | go.mod |
| Go | golang.org/x/crypto | v0.54.0 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 579,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 416231,
"Dockerfile": 1870
},
"pushed_at": "2026-07-29T23:43:10Z",
"created_at": "2026-01-05T02:56:05Z",
"owner_type": "User",
"updated_at": "2026-07-27T02:46:51Z",
"description": "Universal HTTP/HTTPS proxy with MITM support for traffic capture and analysis.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://plexusone.dev",
"name": "John Wang",
"type": "User",
"login": "grokify",
"company": null,
"location": "California",
"followers": 157,
"avatar_url": "https://avatars.githubusercontent.com/u/209872?v=4",
"created_at": "2010-02-24T11:52:51Z",
"is_verified": null,
"public_repos": 419,
"account_age_days": 5999
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-27T02:48:49Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-20T11:01:13Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-01-05T05:50:07Z"
}
],
"recent_commits": [
{
"oid": "f432db603198b6f19698cf08f60edf30d267dba5",
"body": "Add comprehensive documentation site:\n\n- mkdocs.yml with Material theme and navigation\n- docs/index.md with feature overview\n- Getting Started: installation, quickstart\n- User Guide: forward-proxy, reverse-proxy, local-dev, mtls,\n traffic-capture, configuration\n- Reference: cli, config-file, metrics\n- Deployment: docker, production\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add MkDocs site structure",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-27T01:43:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d41de46b7ef60303297748331c09bbb5aef945ac",
"body": "- Add docs/releases/v0.3.0.md with local dev features overview\n- Update CHANGELOG.json with v0.3.0 entries and commit hashes\n- Regenerate CHANGELOG.md via schangelog\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(changelog): add v0.3.0 release notes and update changelog",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-27T01:42:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2cccd09aefaa4cbdbc1203cba13d6390bfbe4f7e",
"body": "- Add Local Development Flags section (--static, --cors-origin)\n- Add path-based backend example: --backend \"/api=https://...\"\n- Add Local Development Mode section with feature table\n- Update config file example with pathPrefix, corsOrigin, staticDir\n- Note HTTP-only mode when --acme-email is omitted\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(readme): add local development mode documentation",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-27T01:42:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ed67dd720ab4d5cc5a77afb4d1dfefbd1d32de18",
"body": null,
"is_bot": false,
"headline": "Merge branch 'docs/v0.2.0-release-prep'",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-27T00:03:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76145443aa58690f6a3961d3b8e4fd41b5057033",
"body": "Add path-based backend routing:\n- PathPrefix field routes by URL path instead of hostname\n- CLI: --backend \"/api=https://upstream.example.com/path\"\n- Longest prefix match wins; path-based takes priority over host-based\n\nAdd CORS support for path-based backends:\n- --cors-origin flag (e.g., \"*\") adds \n[…]\nent with API proxying\n\nAdd HTTP-only mode:\n- Omitting --acme-email skips TLS setup entirely\n- Simplifies local development without certificates\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(reverseproxy): add local development features",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-27T00:01:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "99f22df44ef1fa168ed8b0af581ad7e139a314f4",
"body": "- prometheus/client_golang v1.23.2 -> v1.24.1\n- prometheus/common v0.70.0 -> v0.70.1\n- go-logr/logr v1.4.3 -> v1.4.4\n- go-openapi/inflect v0.21.6 -> v1.0.0\n- opentelemetry.io/proto/otlp v1.10.0 -> v1.11.0\n- google.golang.org/genproto latest\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(deps): update prometheus, otel, and google dependencies",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-27T00:00:14Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1c557b9a459d6eb05c3ef2149312846c03752081",
"body": "…prometheus/client_golang-1.24.1\n\nbuild(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1",
"is_bot": false,
"headline": "Merge pull request #48 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-25T07:38:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8afa5b32bfa43495aead45c4884c53c1ba09ff92",
"body": "Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.23.2 to 1.24.1.\n- [Release notes](https://github.com/prometheus/client_golang/releases)\n- [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.1/CHANGELOG.md)\n- [Commits](https://github.com/\n[…]\nithub.com/prometheus/client_golang\n dependency-version: 1.24.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/prometheus/client_golang",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T23:43:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32c17c78dede1a2a43ddafc5daca04914fc98e3c",
"body": "docs(changelog): populate v0.1.0 commit hashes and fix inaccuracies",
"is_bot": false,
"headline": "Merge pull request #46 from grokify/docs/v0.2.0-release-prep",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T10:58:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "003db780da3db6b75aecfe1fdd1e0e996a848619",
"body": "Reviewed v0.1.0 against actual git history rather than assuming the release-\nlevel commit was sufficient. Nearly the entire release - all 16 \"added\" items,\nall \"documentation\" items, and 2 of 3 \"build\" items - traces to a single\nsquashed commit (d23a4cd, 109 files/40,769 insertions) that predates th\n[…]\nosec/staticcheck\n cleanup across the codebase) and f4312e9 (Windows CI build fixes - also\n the commit the v0.1.0 tag points to).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(changelog): populate v0.1.0 commit hashes and fix inaccuracies",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T10:51:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a081cd43427f2271616e98fcd090173f488efcc9",
"body": "Docs/v0.2.0 release prep",
"is_bot": false,
"headline": "Merge pull request #45 from grokify/docs/v0.2.0-release-prep",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T10:48:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b6ab84ffee1b3c1aac73b500542721791d5b53d",
"body": "schangelog generate CHANGELOG.json -o CHANGELOG.md\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(changelog): regenerate CHANGELOG.md via schangelog",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T10:43:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bc6476b7a2b9e2a72ce516625e22fa36becbfadc",
"body": "Convert to the camelCase schema used by structured-changelog and omniobserve\n(ir_version -> irVersion), add versioning/commitConvention/maintainers, and add\na commit field to the v0.1.0 release pointing at its tagged commit.\n\nAdd a curated v0.2.0 entry with a commit hash on every entry, built from\n`\n[…]\ncollapsed to one entry per package showing the\nfinal version reached, matching the level of curation in the existing v0.1.0\nentry.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(changelog): migrate CHANGELOG.json to camelCase and add v0.2.0",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T10:43:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c41c207e38a150dbeccbc341c14b9335c3edc604",
"body": "Draft release notes for the upcoming v0.2.0, covering frontend/backend mTLS,\n--config support on reverse/serve, OpenTelemetry observability via observops,\nand the breaking change requiring --redirect-http alongside --client-ca.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add v0.2.0 release notes",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T10:43:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f5bd83b821d2e30a4e85b556291a4f74f84dc67c",
"body": "Move RELEASE_NOTES_v0.1.0.md to docs/releases/v0.1.0.md to consolidate\nper-version release notes under docs/, and fix its now-relative links to\nREADME.md/CHANGELOG.md/LICENSE at the repo root.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: move release notes into docs/releases/",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T10:43:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cd934f9e316c41b34c28f560bb87d41c6b1be04d",
"body": "Chore/lint fixes and readme icons",
"is_bot": false,
"headline": "Merge pull request #44 from grokify/chore/lint-fixes-and-readme-icons",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T10:21:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "223ce43cefb425aad2ceec1632a1e0f851795beb",
"body": "- ui/auth/auth.go: the async last-active-time update in ValidateSession must\n outlive the request context (the function returns immediately after\n spawning it), so it intentionally uses context.Background rather than the\n request ctx (G118).\n- ui/auth/oauth.go: ConfigureGoogle/ConfigureGitHub set\n[…]\ntended with the G706/G710 findings and a new\nG101 common reason (config fields set from parameters) discovered while\nfixing these.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: suppress remaining gosec false positives (G101, G118)",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T10:17:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1314295e8812dfe494148938802526c469ebdb40",
"body": "…dings\n\nMigrate from httputil.ReverseProxy's deprecated Director field to Rewrite\n(SA1019; Director was deprecated in Go 1.20 and its use as an alternative to\nRewrite was removed as an option in 1.26). Rewrite requires constructing the\nReverseProxy directly rather than via NewSingleHostReverseProxy,\n[…]\nracted the previously-inline closure into a redirectToHTTPS\nmethod so the fix is unit-testable (TestRedirectToHTTPSValidatesHost).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(reverseproxy): resolve deprecated-API and taint-analysis lint fin…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T10:16:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b159454f0751675f5ca07a083e6402a1f7b28283",
"body": "Add a UTF-8 icon to each bullet under Features for scannability, matching the\nstyle already used across omniobserve's README. Also update the Observability\nbullet, which still described only \"Prometheus metrics and health endpoints\"\nafter the reverseproxy/serve/daemon migration to observops added distributed\ntracing and structured logs via OpenTelemetry.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add icons to README feature bullets",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T10:16:06Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8969f521910fb876604f4f0969fad9c6bb27126f",
"body": "Feat/reverse proxy mtls",
"is_bot": false,
"headline": "Merge pull request #43 from grokify/feat/reverse-proxy-mtls",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T09:23:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c7038a1ae946543f83edf00feb3905dded3d7f6",
"body": null,
"is_bot": false,
"headline": "chore(deps): `go mod`: update dependencies",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T09:20:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5816f8b81192522042efbcc550b6a893fff74797",
"body": "Replace the temporary local replace directive with the tagged v0.12.0 release\nnow that it has passed CI. No code changes; build, vet, full test suite, and\nlint are unaffected (same 9 pre-existing findings as main, none new).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "build(deps): pin github.com/plexusone/omniobserve to released v0.12.0",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T09:14:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "adbc216637c66259d75c0ae54d1b5ebd7eaa024d",
"body": "Replace the daemon's Prometheus-only observability.Provider with the shared\nsetupTelemetry path, so omniproxyd emits metrics, traces, and logs consistently\nwith serve and reverse. Add --traces/--logs/--otlp-endpoint/--otlp-insecure to\ndaemon start and forward them to the backgrounded process. Verified live:\n/healthz and /metrics served, logs routed through the OpenTelemetry slog default.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cmd): route the daemon through observops",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T08:17:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "035344c73769bba513922ccf300d7b2ef3115d90",
"body": "Route serve and reverse through observops.Setup, which wires the OpenTelemetry\nproviders (Prometheus pull + OTLP push, traces, and OTel logs) and returns\nnative handles. OmniProxy's domain metrics register on the configured meter\nprovider, so they export through the same pipelines.\n\nThe reverse prox\n[…]\nd from a\nrunning reverse proxy). Add --traces/--logs/--otlp-endpoint/--otlp-insecure to\nboth commands with config-file precedence.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cmd): emit metrics, traces, and logs via observops",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T07:45:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b4740c78e6debce64f81cab3bffb718a3618b4fb",
"body": "Extend ObservabilityConfig with traces, logs, trace sampling, service\nname/version, and an OTLP push endpoint, mapping onto observops.Setup. Defaults\nmatch the flag defaults so a config omitting them does not change behavior.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(config): add tracing, logging, and OTLP observability settings",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T07:45:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9c8377486052d3a5c08e214155b7ed136dc24dac",
"body": "Config.Middleware optionally wraps the request-serving handler, applied on the\nHTTPS listener (and the HTTP listener when RedirectHTTP is false). It lets a\ncaller add telemetry — request spans and HTTP server metrics — without the\nreverse proxy depending on any observability package.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(reverseproxy): add a Middleware hook to Config",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T07:45:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c6cdb828472c66741a5f5c7881a4038e39d64738",
"body": "Add the omniobserve module for its observops.Setup telemetry bootstrap.\n\nTEMPORARY: a local replace directive points at the working copy because the\nSetup layer is not yet released. It must be removed and replaced with a tagged\nversion (>= v0.12.0) before this branch is pushed, per the pre-push checklist.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "build(deps): add github.com/plexusone/omniobserve",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T07:45:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3c7f1ca9649915218e6665142e9ef2b4fd7aa863",
"body": "Add the observability and storage sections and skipBinary to the README config\nexample, and note which sections apply to which commands.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: document the comprehensive config schema",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T03:58:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e76aa53ce5f07e4e151d7adc414421a9d59ea1e6",
"body": "Add config round-trip and default-fallback tests, and extend the serve merge\ntest to assert skipBinary, metrics, db, and async settings flow from the config.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: cover comprehensive config schema and precedence",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T03:56:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8acad5a951feb721ed674b1c3eb2c31184b7af30",
"body": "Merge the newly added serve settings (skip-binary, metrics, metrics-port, db,\nasync-*) with flags overriding the file, and apply the capture body/header\nsettings (includeHeaders, includeBody, maxBodySize), which have no flags, from\nthe config file. reverse now also honors these capture settings.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cmd): apply the full config schema in serve and reverse",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T03:56:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1d4f280acb6ee086477e3aff9db7479af6db2154",
"body": "Add the settings that had no config representation: capture skipBinary, an\nobservability section (metrics, metricsPort), and a storage section (databaseURL\nplus async queueSize/batchSize/workers). Their defaults match the corresponding\nflag defaults so that a config omitting them does not shift beha\n[…]\ne every section, including reverse proxy frontend and\nbackend mutual TLS, so `config init`/`config show` emit a complete template.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(config): make the config schema comprehensive",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T03:56:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1c9f25e92898f0da39350996999f4657fa8e0963",
"body": "Document --config and flag/config precedence in the README, add a reverse block\nto the example config, and update the backend-mTLS spec to reflect that\nconfig-file loading is delivered rather than a follow-up.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: document config-file support and per-backend TLS",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T03:18:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b4d8e9bb6b684a4ee67457c823a4cf26d9de343e",
"body": "Verify that unset flags adopt config values, explicitly-set flags override the\nconfig, flag-defined backends win over config backends, per-backend TLS from\nthe config carries distinct certificates, and a backend must come from some\nsource.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(cmd): cover config-file precedence and per-backend TLS",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T03:16:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1ba8df7b51ea027a5f1964415d6252b638a8ac01",
"body": "Add --config to both commands and wire config.Config into their runtime\noptions, so the previously inert config schema — including the reverse proxy's\nper-backend tls block and frontend client-auth fields — now takes effect.\n\nPrecedence: a config file is the base, and an explicitly-set flag override\n[…]\nextracted into registerReverseFlags/registerServeFlags so\nthe merge can be tested against the real flag set bound to test options.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cmd): load config files in the reverse and serve commands",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-20T03:16:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5363f644f37616ccd1b31b47f5d5b5d884b1528d",
"body": "Convert the backend mTLS enhancement note into a structured requirements set\nunder docs/specs/features/backend-mtls/ (PRD, TRD, PLAN, ROADMAP) reflecting the\ndelivered feature and its follow-ups. Remove the original working note.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add backend mTLS feature specification",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-19T22:49:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2a89114aa2aa0fbf36053ab7c33ffe1c463814ff",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: document backend mutual TLS support",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-19T22:39:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "29f67390eb5bcf533749e826c11f84306e0c1843",
"body": "Cover the configured/validate/transport helpers and an end-to-end test that\nstands up a backend requiring client certificates, confirming the proxy reaches\nit only when configured to present one, that a mismatched CA fails verification,\nand that InsecureSkipVerify bypasses an untrusted server certificate.\n\nRaises pkg/reverseproxy coverage to 81.2%.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(reverseproxy): add backend mTLS tests",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-19T22:33:31Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3c3276fa6e2e6ad7433abbefd9d9a2cbf2f6df60",
"body": "Add --backend-cert, --backend-key, --backend-ca, and --backend-insecure,\napplied to every backend, and print a warning at startup when backend\ncertificate verification is disabled.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cmd): add backend mTLS flags to the reverse command",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-19T22:33:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "21c0a3da867cfddc9b0dc3fbf5796e5c3d653eaa",
"body": "Expose a per-backend tls block (certFile, keyFile, caFile, insecureSkipVerify)\nin the YAML config to match the reverseproxy.BackendTLS options.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(config): add backend TLS fields to reverse proxy config",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-19T22:33:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5a3cc765da22449deb9036448b480342570a687a",
"body": "Add per-backend TLS configuration so the reverse proxy can present a client\ncertificate to an HTTPS backend that requires mutual TLS, and trust a private\nCA for the backend server certificate. This is the mirror of the frontend\nClientCAPaths/ClientAuth options: those verify certificates from callers\n[…]\nred. InsecureSkipVerify is supported for\nself-signed development backends and carries a gosec exception at its single\nopt-in site.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(reverseproxy): present client certificates to mTLS backends",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-19T22:33:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "dff7276d8c8fb97a8e23582c6adf4b51a389a300",
"body": "Surface the authorization limit in --client-ca flag help rather than only in\nthe README, and mark verify-if-given as admitting clients that present no\ncertificate at all.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: warn that client CAs grant access to every backend",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-19T21:48:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "235b7e2ae78a2c34c075eb8691d8ed835c1a5583",
"body": "findProxy returned the first wildcard pattern encountered while ranging over a\nmap. Go randomizes map iteration order, so with both \"*.example.com\" and\n\"*.api.example.com\" configured, the same hostname reached different backends on\ndifferent requests — measured at 175/200 against 25/200 across repea\n[…]\nan access-control concern\nonce backends are gated on mTLS: a request could land on a different backend\nthan the operator intended.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(reverseproxy): make backend host matching deterministic",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-19T21:48:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "52fe5e030067dcbd785a75b8d0e51464b0f7bd1c",
"body": "net/http/httputil deletes hop-by-hop headers — every header named in the\nrequest's Connection header — after the request has been rewritten, which is\ndownstream of where the identity headers were being attached. A client sending\n\"Connection: X-Client-Cert-CN\" therefore stripped the identity from its\n[…]\n\"X-Client-Cert-Cn\"), so matching a canonicalized token against a raw constant\nlet the CN header through while catching the others.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(reverseproxy): prevent clients suppressing their verified identity",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-19T14:19:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "827c1c6dac93b53420a945a82c5462f72ae8fe58",
"body": "Record the limits of what certificate verification provides: the HTTP redirect\nrequirement, that any certificate signed by a configured CA reaches every\nbackend, and that no revocation checking is performed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: document mutual TLS security boundaries",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-19T06:21:06Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "31d517e3eaf95a592bed360eec082754f1a19252",
"body": "With RedirectHTTP disabled the plain HTTP listener serves the proxy handler\ndirectly, so a request that completed no TLS handshake reached the backend with\nno certificate checked — a complete bypass of client authentication. This was\nverified against the running proxy: a plain HTTP GET returned 200 \n[…]\nentication now requires RedirectHTTP.\nConfigurations combining the two previously started and served unauthenticated\nHTTP traffic.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(reverseproxy)!: reject client auth when HTTP serving would bypass it",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-19T06:21:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "06f6253d9c9168a7d64bbb3e719a1381a2761bf9",
"body": "Document the client authentication modes, the X-Client-Cert-* identity headers\nand why they are stripped from inbound requests, and the current limitation\nthat server certificates still come only from ACME.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: document reverse proxy mutual TLS support",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-18T20:24:33Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b942acd13ea557f5c4a3bd66196eb9af3dd3f97d",
"body": "Cover the client auth mode mapping, CA pool loading, startup validation, and\nidentity header handling, plus an end-to-end test that drives a real TLS\nhandshake through the proxy to confirm the settings are actually enforced.\n\nThe end-to-end client presents its certificate via GetClientCertificate ra\n[…]\nld let the\nuntrusted-client case pass without the server ever rejecting it.\n\nRaises pkg/reverseproxy coverage from 46.4% to 73.0%.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(reverseproxy): add mutual TLS unit and end-to-end tests",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-18T20:24:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d515f4645dcba36b66b14e7482fd7f5f47eaf507",
"body": "Add --client-ca (repeatable) and --client-auth, and report the resolved client\nauthentication mode and configured CAs at startup.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cmd): add mutual TLS flags to the reverse command",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-18T20:24:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b54872eee61c410224876ad43da4234d3c6995e3",
"body": "Expose clientCAPaths and clientAuth in the YAML reverse proxy section to match\nthe reverseproxy package options.\n\nNote that ReverseConfig is not yet read by any command, so these fields are\ninert until the reverse command gains config file support.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(config): add client certificate fields to reverse proxy config",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-18T20:24:31Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "137edcacbdb3e4642052c2e6db21c3e3faa0679f",
"body": "Add client certificate verification (mTLS) to the reverse proxy, which\npreviously supported only ACME/Let's Encrypt server-side TLS.\n\nConfiguring ClientCAPaths implies require-and-verify; ClientAuth selects a\ndifferent mode explicitly. Contradictory combinations are rejected at startup\nrather than s\n[…]\nated from VerifiedChains rather than\nPeerCertificates so that only an identity TLS verified against the CA pool is\never forwarded.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(reverseproxy): add mutual TLS client certificate authentication",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-18T20:24:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b880c3df21f913f2d5a1b9e411f00ad29c0cd1aa",
"body": null,
"is_bot": false,
"headline": "docs: `README.md`: update shields",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-18T18:42:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bf877c588e0178592fda0d67f5de33690515b43",
"body": null,
"is_bot": false,
"headline": "chore(deps): `go mod`: update dependencies",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-18T18:41:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5af9c0c956555ac3212fcd0aef87585a0fb98258",
"body": "…x/crypto-0.54.0\n\nbuild(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0",
"is_bot": false,
"headline": "Merge pull request #41 from grokify/dependabot/go_modules/golang.org/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-18T18:42:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0e29ef9c2458727d2a9b358510518527b9a5238",
"body": "…mattn/go-sqlite3-1.14.48\n\nbuild(deps): bump github.com/mattn/go-sqlite3 from 1.14.47 to 1.14.48",
"is_bot": false,
"headline": "Merge pull request #42 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-07-18T18:41:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72257b5f5ea923c6eecf5a02d552771c5adede72",
"body": "Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.47 to 1.14.48.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.47...v1.14.48)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/mattn/go-sqlite3\n dependency-version: 1.14.48\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/mattn/go-sqlite3 from 1.14.47 to 1.14.48",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T23:43:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04002974475af871c2db650a3893d02e9dd36d33",
"body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.53.0 to 0.54.0.\n- [Commits](https://github.com/golang/crypto/compare/v0.53.0...v0.54.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n dependency-version: 0.54.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-08T23:43:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5410b0fea45dd53d0a3df5b6c8fa482cccf71176",
"body": null,
"is_bot": false,
"headline": "chore(deps): `go mod`: update dependencies",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-06-28T18:35:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d065fcf237c212d04099fe8957c583b32eb8f20",
"body": null,
"is_bot": false,
"headline": "docs: `README.md`: update shields",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-06-28T18:35:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cf742255b14cdeb222504ac1c23699c5783a111",
"body": "…grokify/mogo-0.74.6\n\nbuild(deps): bump github.com/grokify/mogo from 0.74.4 to 0.74.6",
"is_bot": false,
"headline": "Merge pull request #37 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-06-28T18:32:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f2aa8d9a159d14dbbe4aab70ee42692228d5e0b",
"body": "Bumps [github.com/grokify/mogo](https://github.com/grokify/mogo) from 0.74.4 to 0.74.6.\n- [Release notes](https://github.com/grokify/mogo/releases)\n- [Changelog](https://github.com/grokify/mogo/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/grokify/mogo/compare/v0.74.4...v0.74.6)\n\n---\nupdate\n[…]\nency-name: github.com/grokify/mogo\n dependency-version: 0.74.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/grokify/mogo from 0.74.4 to 0.74.6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-27T15:57:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "053b60b1dfcce6786e6349710fafb07506311681",
"body": "…x/crypto-0.53.0\n\nbuild(deps): bump golang.org/x/crypto from 0.51.0 to 0.53.0",
"is_bot": false,
"headline": "Merge pull request #38 from grokify/dependabot/go_modules/golang.org/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-06-27T15:55:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a74c75323df77873c7cb3ac17079d72552eb053d",
"body": "…mattn/go-sqlite3-1.14.47\n\nbuild(deps): bump github.com/mattn/go-sqlite3 from 1.14.44 to 1.14.47",
"is_bot": false,
"headline": "Merge pull request #40 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-06-27T15:55:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03a312221a8c20a40a29de5be195fbf2dcff4bc0",
"body": "Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.44 to 1.14.47.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.44...v1.14.47)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/mattn/go-sqlite3\n dependency-version: 1.14.47\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/mattn/go-sqlite3 from 1.14.44 to 1.14.47",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-22T23:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83305a7dc6ff44a7811cd760a46a9f2ab6bb2d6a",
"body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.51.0 to 0.53.0.\n- [Commits](https://github.com/golang/crypto/compare/v0.51.0...v0.53.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n dependency-version: 0.53.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump golang.org/x/crypto from 0.51.0 to 0.53.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-08T23:48:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de6e8eb2c2e0de402a9a60c63d70318842aa9980",
"body": "…metry.io/otel/sdk/metric-1.44.0\n\nbuild(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.43.0 to 1.44.0",
"is_bot": false,
"headline": "Merge pull request #34 from grokify/dependabot/go_modules/go.opentele…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-06-06T10:00:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac934e5d11ad2b9e7fb3a9a22508c4b52950919f",
"body": "…metry.io/otel/exporters/prometheus-0.66.0\n\nbuild(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.65.0 to 0.66.0",
"is_bot": false,
"headline": "Merge pull request #35 from grokify/dependabot/go_modules/go.opentele…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-06-06T10:00:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe0eccca79f521c857fb950996f60e2f4fe25236",
"body": "Bumps [go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go) from 0.65.0 to 0.66.0.\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\n- [\n[…]\nmetry.io/otel/exporters/prometheus\n dependency-version: 0.66.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump go.opentelemetry.io/otel/exporters/prometheus",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-03T17:23:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0a70d9cf71b197363683963a6d5169c7bb898134",
"body": "Bumps [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go) from 1.43.0 to 1.44.0.\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\n- [Commits](h\n[…]\no.opentelemetry.io/otel/sdk/metric\n dependency-version: 1.44.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump go.opentelemetry.io/otel/sdk/metric",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-03T17:23:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4366307a3406787500994592552e7fbf1a8d5e3a",
"body": "…elazarl/goproxy-1.8.4\n\nbuild(deps): bump github.com/elazarl/goproxy from 1.8.3 to 1.8.4",
"is_bot": false,
"headline": "Merge pull request #31 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-05-30T16:37:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e05e72fd9f27310ec059fd51da2a6e7c88557c0",
"body": "…metry.io/otel/metric-1.44.0\n\nbuild(deps): bump go.opentelemetry.io/otel/metric from 1.43.0 to 1.44.0",
"is_bot": false,
"headline": "Merge pull request #32 from grokify/dependabot/go_modules/go.opentele…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-05-30T16:36:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbc2405cbb2094255e01b40c77fcd644f77ba9e6",
"body": "Bumps [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) from 1.43.0 to 1.44.0.\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\n- [Commits](https\n[…]\ne: go.opentelemetry.io/otel/metric\n dependency-version: 1.44.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump go.opentelemetry.io/otel/metric from 1.43.0 to 1.44.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-28T00:43:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3734d09c00bc3c00f08313c0193f21f536d01841",
"body": "Bumps [github.com/elazarl/goproxy](https://github.com/elazarl/goproxy) from 1.8.3 to 1.8.4.\n- [Release notes](https://github.com/elazarl/goproxy/releases)\n- [Commits](https://github.com/elazarl/goproxy/compare/v1.8.3...v1.8.4)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/elazarl/goproxy\n dependency-version: 1.8.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/elazarl/goproxy from 1.8.3 to 1.8.4",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-26T05:10:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ffb7db4c8db6f444d7d72b89cf23a29702e04d0",
"body": "…grokify/mogo-0.74.4\n\nbuild(deps): bump github.com/grokify/mogo from 0.74.2 to 0.74.4",
"is_bot": false,
"headline": "Merge pull request #27 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-05-09T10:03:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44ed7bd7bf8461416ea9101505bc173474ff6e90",
"body": "…x/crypto-0.51.0\n\nbuild(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0",
"is_bot": false,
"headline": "Merge pull request #28 from grokify/dependabot/go_modules/golang.org/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-05-09T10:03:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29733eb873e4e9c5949a1fef051733af67ad2fe6",
"body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.50.0 to 0.51.0.\n- [Commits](https://github.com/golang/crypto/compare/v0.50.0...v0.51.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n dependency-version: 0.51.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-08T23:44:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf8cf4fb3b8787d5f0d8dbd9183e8c163ad27cb8",
"body": "Bumps [github.com/grokify/mogo](https://github.com/grokify/mogo) from 0.74.2 to 0.74.4.\n- [Release notes](https://github.com/grokify/mogo/releases)\n- [Changelog](https://github.com/grokify/mogo/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/grokify/mogo/compare/v0.74.2...v0.74.4)\n\n---\nupdate\n[…]\nency-name: github.com/grokify/mogo\n dependency-version: 0.74.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/grokify/mogo from 0.74.2 to 0.74.4",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-05T02:46:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ceb0b5b3c0d39558af8056bac87569c51b4cfbc6",
"body": "…grokify/mogo-0.74.2\n\nbuild(deps): bump github.com/grokify/mogo from 0.74.1 to 0.74.2",
"is_bot": false,
"headline": "Merge pull request #25 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-05-04T14:12:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c435db08edbb9ba2321211da640fef9608006825",
"body": "…mattn/go-sqlite3-1.14.44\n\nbuild(deps): bump github.com/mattn/go-sqlite3 from 1.14.42 to 1.14.44",
"is_bot": false,
"headline": "Merge pull request #26 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-05-04T14:12:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98f6c57ff662ae88ef77398ea9bb2ffee3a162c1",
"body": "Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.42 to 1.14.44.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.42...v1.14.44)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/mattn/go-sqlite3\n dependency-version: 1.14.44\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/mattn/go-sqlite3 from 1.14.42 to 1.14.44",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-29T23:45:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8805af274cfd3239759c661f30d8df18d03e3270",
"body": "Bumps [github.com/grokify/mogo](https://github.com/grokify/mogo) from 0.74.1 to 0.74.2.\n- [Release notes](https://github.com/grokify/mogo/releases)\n- [Changelog](https://github.com/grokify/mogo/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/grokify/mogo/compare/v0.74.1...v0.74.2)\n\n---\nupdate\n[…]\nency-name: github.com/grokify/mogo\n dependency-version: 0.74.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/grokify/mogo from 0.74.1 to 0.74.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-21T00:33:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6fce666e8d81ef6281aedd352307b0577cfa4914",
"body": "…mattn/go-sqlite3-1.14.42\n\nbuild(deps): bump github.com/mattn/go-sqlite3 from 1.14.40 to 1.14.42",
"is_bot": false,
"headline": "Merge pull request #23 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-04-11T21:31:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0ab96bed588d842110f6d1eefa623a267fe509a",
"body": "…x/crypto-0.50.0\n\nbuild(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0",
"is_bot": false,
"headline": "Merge pull request #24 from grokify/dependabot/go_modules/golang.org/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-04-11T21:31:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dfea52312cb7bbfdb366a77c94c297c56657b7b",
"body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.49.0 to 0.50.0.\n- [Commits](https://github.com/golang/crypto/compare/v0.49.0...v0.50.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n dependency-version: 0.50.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-09T23:44:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86549d44f44126ac5d3bc79830c57071a3235b70",
"body": "Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.40 to 1.14.42.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.40...v1.14.42)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/mattn/go-sqlite3\n dependency-version: 1.14.42\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/mattn/go-sqlite3 from 1.14.40 to 1.14.42",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-08T23:44:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1326112e415b2b85ea093e5975e37328ad72e51",
"body": null,
"is_bot": false,
"headline": "docs: `README.md`: update shields",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-04-06T06:20:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "234c2cddfc626524d51c904227eb9f9c6c96d53c",
"body": null,
"is_bot": false,
"headline": "chore(ci): `workflows`: update to shared workflows",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-04-06T06:15:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aeac5a7a00c11cfafae2f3153d26f4473f0540a3",
"body": null,
"is_bot": false,
"headline": "chore(ci): `workflows`: rename to shared filenames",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-04-06T06:15:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a3ae8469ac49cb4ae6fecedb7e33fdd2de5d903",
"body": null,
"is_bot": false,
"headline": "chore(deps): `go mod`: update dependencies",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-04-06T06:14:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4db03ef96cb45b42b0688e418515bb8f791af79",
"body": null,
"is_bot": false,
"headline": "chore(deps): `go mod`: update dependencies",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-04-04T09:05:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "268c19b5358ae0ac93e510f1f3ae21797529f468",
"body": "…grokify/mogo-0.73.3\n\nbuild(deps): bump github.com/grokify/mogo from 0.73.2 to 0.73.3",
"is_bot": false,
"headline": "Merge pull request #21 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-04-04T09:05:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0644510c6ac55b2ce4b013b94db927ecb95ef791",
"body": "…metry.io/otel/sdk/metric-1.41.0\n\nbuild(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.40.0 to 1.41.0",
"is_bot": false,
"headline": "Merge pull request #18 from grokify/dependabot/go_modules/go.opentele…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-04-04T09:04:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ac82b71a81cb397f101a5472cf26843b93ab1a2",
"body": "Bumps [github.com/grokify/mogo](https://github.com/grokify/mogo) from 0.73.2 to 0.73.3.\n- [Release notes](https://github.com/grokify/mogo/releases)\n- [Commits](https://github.com/grokify/mogo/compare/v0.73.2...v0.73.3)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/grokify/mogo\n dependency-version: 0.73.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/grokify/mogo from 0.73.2 to 0.73.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-03T00:53:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8b298b5641f91ed80b83a1956d526f291466dee",
"body": "Bumps [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go) from 1.40.0 to 1.41.0.\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\n- [Commits](h\n[…]\no.opentelemetry.io/otel/sdk/metric\n dependency-version: 1.41.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump go.opentelemetry.io/otel/sdk/metric",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-03T00:53:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "da81bc5e0f38b929f014f7163bf2cb174e5de230",
"body": null,
"is_bot": false,
"headline": "chore(ci): `workflows`: update go versions",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-03-02T07:37:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6a1fa27fd131ff0f4c4a5d38d2cc7004595d823",
"body": "…grokify/mogo-0.73.2\n\nbuild(deps): bump github.com/grokify/mogo from 0.73.0 to 0.73.2",
"is_bot": false,
"headline": "Merge pull request #16 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-03-02T07:37:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48546c1338fc24b944ec83fff7fc5dd7232cd25a",
"body": "Bumps [github.com/grokify/mogo](https://github.com/grokify/mogo) from 0.73.0 to 0.73.2.\n- [Release notes](https://github.com/grokify/mogo/releases)\n- [Commits](https://github.com/grokify/mogo/compare/v0.73.0...v0.73.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/grokify/mogo\n dependency-version: 0.73.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/grokify/mogo from 0.73.0 to 0.73.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-01T08:10:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef0c6d5e42fc4811ec3d140a03a49f01a084595c",
"body": "…elazarl/goproxy-1.8.2\n\nbuild(deps): bump github.com/elazarl/goproxy from 1.8.1 to 1.8.2",
"is_bot": false,
"headline": "Merge pull request #15 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-03-01T08:09:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "007a9dfa87bd1bfa4368861a46a50f9da80faf58",
"body": "Bumps [github.com/elazarl/goproxy](https://github.com/elazarl/goproxy) from 1.8.1 to 1.8.2.\n- [Release notes](https://github.com/elazarl/goproxy/releases)\n- [Commits](https://github.com/elazarl/goproxy/compare/v1.8.1...v1.8.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/elazarl/goproxy\n dependency-version: 1.8.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/elazarl/goproxy from 1.8.1 to 1.8.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-01T08:08:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "295cfeda46a61175966bb87785cf9c66c4d00bf2",
"body": "…lib/pq-1.11.2\n\nbuild(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2",
"is_bot": false,
"headline": "Merge pull request #14 from grokify/dependabot/go_modules/github.com/…",
"author_name": "John Wang",
"author_login": "grokify",
"committed_at": "2026-03-01T08:07:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db1ead55012fe0eb38c89865ce0908b76dddc813",
"body": "Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.11.1 to 1.11.2.\n- [Release notes](https://github.com/lib/pq/releases)\n- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/lib/pq/compare/v1.11.1...v1.11.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/lib/pq\n dependency-version: 1.11.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-15T08:11:58Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 3,
"commits_last_year": 122,
"latest_release_at": "2026-07-27T02:48:49Z",
"latest_release_tag": "v0.3.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 20,
"days_since_latest_release": 2,
"mean_days_between_releases": 101.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/grokify/omniproxy",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/grokify/omniproxy",
"is_deprecated": false,
"latest_version": "v0.3.0",
"repository_url": "https://github.com/grokify/omniproxy",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-27T01:43:26Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 193726,
"source_files_sampled": 107,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "entgo.io/ent",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.14.6"
},
{
"name": "github.com/elazarl/goproxy",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.5"
},
{
"name": "github.com/grokify/mogo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.74.6"
},
{
"name": "github.com/lib/pq",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.12.3"
},
{
"name": "github.com/mattn/go-sqlite3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.14.48"
},
{
"name": "github.com/plexusone/omniobserve",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.12.0"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.24.1"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.2"
},
{
"name": "go.opentelemetry.io/otel",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/prometheus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.66.0"
},
{
"name": "go.opentelemetry.io/otel/metric",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/sdk/metric",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "golang.org/x/crypto",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.54.0"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 33,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 15
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "grokify",
"commits": 93,
"avatar_url": "https://avatars.githubusercontent.com/u/209872?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"go-ci.yaml",
"go-lint.yaml",
"go-sast-codeql.yaml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yaml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 6,
"reason": "3 out of 5 merged PRs checked by a CI test -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/10 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 5 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 7,
"reason": "SAST tool is not run on all commits -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 4,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f432db603198b6f19698cf08f60edf30d267dba5",
"ran_at": "2026-07-29T23:51:04Z",
"aggregate_score": 6.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-29T23:43:18Z",
"oldest_open_prs": [
{
"number": 49,
"created_at": "2026-07-29T23:43:11Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-25T07:38:13Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/grokify/omniproxy",
"host": "github.com",
"name": "omniproxy",
"owner": "grokify"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"security": 63,
"vitality": 84,
"community": 40,
"governance": 53,
"engineering": 76
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 84,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"commits_last_year": 122,
"human_commit_share": 0.79,
"days_since_last_push": 0,
"active_weeks_last_year": 20
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "20/52 weeks with commits",
"points": 13.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 20
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "122 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 122
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 3,
"latest_release_tag": "v0.3.0",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 101.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "3 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 3
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~101.4 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 101.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 2,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 2 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 2
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 40,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 53,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "at_risk",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 49,
"inputs": {
"merged_prs": 33,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 15
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "33/48 decided PRs merged",
"points": 26.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 33,
"decided": 48
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/10 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 64,
"inputs": {
"followers": 157,
"owner_type": "User",
"is_verified": null,
"owner_login": "grokify",
"public_repos": 419,
"account_age_days": 5999
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "157 followers of grokify",
"points": 15.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 157,
"login": "grokify"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "419 public repos, account ~16 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 419
}
},
{
"code": "account_age_years",
"params": {
"years": 16
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"packages": [
"github.com/grokify/omniproxy"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 2
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 2 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 2
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "3 published versions",
"points": 12,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 3
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yaml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "3 out of 5 merged PRs checked by a CI test -- score normalized to 6",
"points": 12,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 63,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 63,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 6.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "3 out of 5 merged PRs checked by a CI test -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/10 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 7",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 72,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.987,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "78 of 79 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 78,
"sampled": 79
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.42,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.21
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yaml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "42 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 42,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "21 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 21,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 193726,
"source_files_sampled": 107,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/107 source files over 60KB",
"points": 54.5,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 107,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-29T23:51:17.215337Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/grokify/omniproxy.svg",
"full_name": "grokify/omniproxy",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.