Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-23 02:04 UTC
hmrc / catalogue-frontend
hmrc/catalogue-frontend holds a health index of 65 out of 100, placing it in the Moderate band. It scores highest on Vitality (93/100) and lowest on Engineering Quality (30/100). It was last updated 2 days ago. 5 contributors account for most of its recent work.
65
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
65
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
HM Revenue & CustomsOrganization
425 followers1,786 public repossince Oct 2013
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
93
Development activity
88Excellent
How it's scored
| 36/36 | Push recency — last push 2 days ago |
| 24.2/36 | Commit cadence — 35/52 weeks with commits |
| 18/18 | Commit volume — 126 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 126 |
| human_commit_share | 1 |
| days_since_last_push | 2 |
| active_weeks_last_year | 35 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 100 releases published |
| 36/36 | Release recency — latest release 2 days ago |
| 27/27 | Release cadence — a release every ~3.1 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 100 |
| latest_release_tag | v5.221.0 |
| releases_from_tags | no |
| days_since_latest_release | 2 |
| mean_days_between_releases | 3.1 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
39
Popularity & adoption
29Critical
How it's scored
| 13.7/60 | Stars — 8 stars |
| 8.7/25 | Forks — 12 forks |
| 6.8/15 | Watchers — 18 watchers |
Inputs used
| forks | 12 |
| stars | 8 |
| watchers | 18 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
87
Maintainer resilience (bus factor)
88Excellent
How it's scored
| 45.9/54 | Bus factor — 5 contributor(s) cover half of all commits |
| 18.1/22.5 | Commit distribution — top contributor authored 20% of commits |
| 13.5/13.5 | Contributor breadth — 55 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 10 contributing companies or organizations |
Inputs used
| bus_factor | 5 |
| contributors_sampled | 55 |
| top_contributor_share | 0.197 |
Issue & PR responsiveness
98Excellent
How it's scored
| 46.8/46.8 | Issue resolution — 100% of issues closed |
| 36.3/38.3 | PR acceptance — 1,079/1,138 decided PRs merged |
| 15/15 | OpenSSF Scorecard: Code-Review — all changesets reviewed |
Inputs used
| merged_prs | 1,079 |
| open_issues | 0 |
| closed_issues | 1 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 59 |
Ownership & stewardship
74Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 18.9/25 | Owner reach — 425 followers of hmrc |
| 25/25 | Track record — 1,786 public repos, account ~12 yr old |
Inputs used
| followers | 425 |
| owner_type | Organization |
| is_verified | — |
| owner_login | hmrc |
| public_repos | 1,786 |
| account_age_days | 4,655 |
Engineering Quality
Are baseline engineering and documentation practices in place?
30
Engineering practices
24Critical
How it's scored
| 0/24 | CI workflows |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 13 merged PRs checked by a CI test -- score normalized to 0 |
Inputs used
| has_ci | no |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
40At risk
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
68
Security posture
68Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 0/2.5 | CI-Tests — 0 out of 13 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 7.5/7.5 | Code-Review — all changesets reviewed |
| 2.5/2.5 | Contributors — project has 10 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — no data |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — no data |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 6.8 |
Excluded from scoring (no data or not applicable): branch_protection, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
43
Agent context & guidance
24Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 23.5/40 | Legible commit history — 44 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.44 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Scala (statically typed) |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
Code legibility for models
99Excellent
How it's scored
| 45/45 | Type-checkable code — Scala (statically typed) |
| 53.8/55 | Manageable file sizes — 5/235 source files over 60KB |
Inputs used
| primary_language | Scala |
| largest_source_bytes | 1,379,750 |
| source_files_sampled | 235 |
| oversized_source_files | 5 |
Key facts
8GitHub stars
55contributors
126commits, last 12 months
2days since last push
100releases
5bus factor
0open issues
—package ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 12 ⇿
0Stars
12Forks
79Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 77Patch 2
Each point covers 9 days.
OpenSSF Scorecard 6.8 / 10
6.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 0 | CI-Tests | 0 out of 13 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 10 | Code-Review | all changesets reviewed |
| 10 | Contributors | project has 10 contributing companies or organizations |
| n/a | Dangerous-Workflow | no workflows found |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | no dependencies found |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| n/a | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
All dependencies 0
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 25390,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 178550,
"HTML": 828294,
"Scala": 1248792,
"JavaScript": 24957
},
"pushed_at": "2026-07-20T08:19:31Z",
"created_at": "2016-02-24T15:08:50Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T08:13:13Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Scala",
"significant_languages": [
"Scala",
"HTML"
]
},
"owner": {
"blog": "http://hmrc.github.io/",
"name": "HM Revenue & Customs",
"type": "Organization",
"login": "hmrc",
"company": null,
"location": "UK",
"followers": 425,
"avatar_url": "https://avatars.githubusercontent.com/u/5755339?v=4",
"created_at": "2013-10-23T10:39:47Z",
"is_verified": null,
"public_repos": 1786,
"account_age_days": 4655
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v5.221.0",
"kind": "minor",
"published_at": "2026-07-20T08:19:32Z"
},
{
"tag": "v5.220.0",
"kind": "minor",
"published_at": "2026-07-16T16:09:52Z"
},
{
"tag": "v5.219.0",
"kind": "minor",
"published_at": "2026-07-10T10:08:13Z"
},
{
"tag": "v5.218.0",
"kind": "minor",
"published_at": "2026-07-06T09:58:04Z"
},
{
"tag": "v5.217.0",
"kind": "minor",
"published_at": "2026-07-06T09:32:51Z"
},
{
"tag": "v5.216.0",
"kind": "minor",
"published_at": "2026-07-02T16:08:45Z"
},
{
"tag": "v5.215.0",
"kind": "minor",
"published_at": "2026-06-29T15:09:00Z"
},
{
"tag": "v5.214.0",
"kind": "minor",
"published_at": "2026-06-29T13:24:36Z"
},
{
"tag": "v5.213.0",
"kind": "minor",
"published_at": "2026-06-25T11:04:36Z"
},
{
"tag": "v5.212.0",
"kind": "minor",
"published_at": "2026-06-22T10:00:47Z"
},
{
"tag": "v5.211.0",
"kind": "minor",
"published_at": "2026-06-22T08:39:38Z"
},
{
"tag": "v5.210.0",
"kind": "minor",
"published_at": "2026-06-19T15:07:41Z"
},
{
"tag": "v5.209.0",
"kind": "minor",
"published_at": "2026-06-05T11:48:52Z"
},
{
"tag": "v5.208.0",
"kind": "minor",
"published_at": "2026-06-01T08:43:25Z"
},
{
"tag": "v5.207.0",
"kind": "minor",
"published_at": "2026-05-29T10:06:04Z"
},
{
"tag": "v5.206.0",
"kind": "minor",
"published_at": "2026-05-29T08:39:27Z"
},
{
"tag": "v5.205.0",
"kind": "minor",
"published_at": "2026-05-22T10:30:49Z"
},
{
"tag": "v5.204.0",
"kind": "minor",
"published_at": "2026-05-21T08:14:58Z"
},
{
"tag": "v5.203.0",
"kind": "minor",
"published_at": "2026-05-19T15:04:54Z"
},
{
"tag": "v5.202.0",
"kind": "minor",
"published_at": "2026-05-19T08:24:08Z"
},
{
"tag": "v5.201.1",
"kind": "patch",
"published_at": "2026-05-18T08:32:30Z"
},
{
"tag": "v5.201.0",
"kind": "minor",
"published_at": "2026-04-29T14:47:57Z"
},
{
"tag": "v5.200.0",
"kind": "minor",
"published_at": "2026-04-29T14:25:50Z"
},
{
"tag": "v5.199.0",
"kind": "minor",
"published_at": "2026-04-29T13:12:43Z"
},
{
"tag": "v5.198.0",
"kind": "minor",
"published_at": "2026-04-26T07:31:47Z"
},
{
"tag": "v5.197.0",
"kind": "minor",
"published_at": "2026-03-27T07:27:54Z"
},
{
"tag": "v5.196.0",
"kind": "minor",
"published_at": "2026-03-26T09:44:01Z"
},
{
"tag": "v5.195.0",
"kind": "minor",
"published_at": "2026-03-25T12:43:46Z"
},
{
"tag": "v5.194.0",
"kind": "minor",
"published_at": "2026-03-19T09:55:52Z"
},
{
"tag": "v5.193.0",
"kind": "minor",
"published_at": "2026-03-16T13:43:27Z"
},
{
"tag": "v5.192.0",
"kind": "minor",
"published_at": "2026-03-10T10:58:19Z"
},
{
"tag": "v5.191.0",
"kind": "minor",
"published_at": "2026-02-26T12:41:54Z"
},
{
"tag": "v5.190.0",
"kind": "minor",
"published_at": "2026-02-23T09:58:36Z"
},
{
"tag": "v5.189.0",
"kind": "minor",
"published_at": "2026-02-18T15:58:27Z"
},
{
"tag": "v5.188.0",
"kind": "minor",
"published_at": "2026-02-18T12:06:26Z"
},
{
"tag": "v5.187.0",
"kind": "minor",
"published_at": "2026-02-10T14:49:38Z"
},
{
"tag": "v5.186.0",
"kind": "minor",
"published_at": "2026-02-10T11:34:23Z"
},
{
"tag": "v5.185.0",
"kind": "minor",
"published_at": "2026-02-04T11:10:00Z"
},
{
"tag": "v5.184.0",
"kind": "minor",
"published_at": "2026-02-02T12:56:37Z"
},
{
"tag": "v5.183.0",
"kind": "minor",
"published_at": "2026-01-29T09:12:03Z"
},
{
"tag": "v5.182.0",
"kind": "minor",
"published_at": "2026-01-19T16:00:20Z"
},
{
"tag": "v5.181.0",
"kind": "minor",
"published_at": "2025-12-23T12:55:44Z"
},
{
"tag": "v5.180.0",
"kind": "minor",
"published_at": "2025-12-08T10:10:47Z"
},
{
"tag": "v5.179.0",
"kind": "minor",
"published_at": "2025-12-03T15:42:28Z"
},
{
"tag": "v5.178.0",
"kind": "minor",
"published_at": "2025-11-25T13:34:25Z"
},
{
"tag": "v5.177.0",
"kind": "minor",
"published_at": "2025-11-24T13:37:58Z"
},
{
"tag": "v5.176.0",
"kind": "minor",
"published_at": "2025-11-19T12:17:20Z"
},
{
"tag": "v5.175.0",
"kind": "minor",
"published_at": "2025-11-18T16:40:20Z"
},
{
"tag": "v5.174.0",
"kind": "minor",
"published_at": "2025-11-06T15:07:54Z"
},
{
"tag": "v5.173.0",
"kind": "minor",
"published_at": "2025-11-06T09:45:49Z"
},
{
"tag": "v5.172.0",
"kind": "minor",
"published_at": "2025-11-05T14:16:57Z"
},
{
"tag": "v5.171.0",
"kind": "minor",
"published_at": "2025-10-17T08:31:05Z"
},
{
"tag": "v5.170.0",
"kind": "minor",
"published_at": "2025-10-07T13:31:07Z"
},
{
"tag": "v5.169.0",
"kind": "minor",
"published_at": "2025-09-29T15:22:46Z"
},
{
"tag": "v5.168.0",
"kind": "minor",
"published_at": "2025-09-24T08:48:02Z"
},
{
"tag": "v5.167.0",
"kind": "minor",
"published_at": "2025-09-24T08:39:12Z"
},
{
"tag": "v5.166.0",
"kind": "minor",
"published_at": "2025-09-17T14:03:48Z"
},
{
"tag": "v5.165.0",
"kind": "minor",
"published_at": "2025-09-02T12:11:52Z"
},
{
"tag": "v5.164.0",
"kind": "minor",
"published_at": "2025-08-22T13:21:20Z"
},
{
"tag": "v5.163.0",
"kind": "minor",
"published_at": "2025-07-25T09:02:20Z"
},
{
"tag": "v5.162.0",
"kind": "minor",
"published_at": "2025-07-14T08:36:46Z"
},
{
"tag": "v5.161.0",
"kind": "minor",
"published_at": "2025-07-01T15:27:27Z"
},
{
"tag": "v5.160.0",
"kind": "minor",
"published_at": "2025-06-25T08:45:43Z"
},
{
"tag": "v5.159.0",
"kind": "minor",
"published_at": "2025-06-24T13:40:43Z"
},
{
"tag": "v5.158.0",
"kind": "minor",
"published_at": "2025-06-23T14:30:59Z"
},
{
"tag": "v5.157.0",
"kind": "minor",
"published_at": "2025-06-20T12:45:14Z"
},
{
"tag": "v5.156.0",
"kind": "minor",
"published_at": "2025-06-19T14:19:35Z"
},
{
"tag": "v5.155.0",
"kind": "minor",
"published_at": "2025-06-18T15:53:38Z"
},
{
"tag": "v5.154.0",
"kind": "minor",
"published_at": "2025-06-17T11:48:57Z"
},
{
"tag": "v5.153.0",
"kind": "minor",
"published_at": "2025-06-11T07:23:42Z"
},
{
"tag": "v5.152.0",
"kind": "minor",
"published_at": "2025-06-06T08:35:25Z"
},
{
"tag": "v5.151.0",
"kind": "minor",
"published_at": "2025-05-30T16:36:28Z"
},
{
"tag": "v5.150.0",
"kind": "minor",
"published_at": "2025-05-23T17:04:51Z"
},
{
"tag": "v5.149.0",
"kind": "minor",
"published_at": "2025-05-23T14:50:50Z"
},
{
"tag": "v5.148.0",
"kind": "minor",
"published_at": "2025-05-23T08:40:45Z"
},
{
"tag": "v5.147.0",
"kind": "minor",
"published_at": "2025-05-19T14:12:08Z"
},
{
"tag": "v5.146.1",
"kind": "patch",
"published_at": "2025-05-16T11:12:16Z"
},
{
"tag": "v5.146.0",
"kind": "minor",
"published_at": "2025-05-13T10:43:30Z"
},
{
"tag": "v5.145.0",
"kind": "minor",
"published_at": "2025-05-12T14:16:29Z"
},
{
"tag": "v5.144.0",
"kind": "minor",
"published_at": "2025-05-09T12:50:53Z"
},
{
"tag": "v5.143.0",
"kind": "minor",
"published_at": "2025-05-08T16:01:24Z"
},
{
"tag": "v5.142.0",
"kind": "minor",
"published_at": "2025-05-08T09:44:07Z"
},
{
"tag": "v5.141.0",
"kind": "minor",
"published_at": "2025-04-25T14:45:18Z"
},
{
"tag": "v5.140.0",
"kind": "minor",
"published_at": "2025-04-24T13:05:07Z"
},
{
"tag": "v5.139.0",
"kind": "minor",
"published_at": "2025-04-17T16:08:31Z"
},
{
"tag": "v5.138.0",
"kind": "minor",
"published_at": "2025-04-14T09:41:48Z"
},
{
"tag": "v5.137.0",
"kind": "minor",
"published_at": "2025-04-07T15:55:32Z"
},
{
"tag": "v5.136.0",
"kind": "minor",
"published_at": "2025-04-07T11:56:26Z"
},
{
"tag": "v5.135.0",
"kind": "minor",
"published_at": "2025-04-07T10:29:20Z"
},
{
"tag": "v5.134.0",
"kind": "minor",
"published_at": "2025-04-02T08:43:48Z"
},
{
"tag": "v5.133.0",
"kind": "minor",
"published_at": "2025-03-26T09:49:21Z"
},
{
"tag": "v5.132.0",
"kind": "minor",
"published_at": "2025-03-21T16:36:06Z"
},
{
"tag": "v5.131.0",
"kind": "minor",
"published_at": "2025-03-21T14:35:26Z"
},
{
"tag": "v5.130.0",
"kind": "minor",
"published_at": "2025-03-21T13:06:19Z"
},
{
"tag": "v5.129.0",
"kind": "minor",
"published_at": "2025-03-21T10:59:28Z"
},
{
"tag": "v5.128.0",
"kind": "minor",
"published_at": "2025-03-21T10:44:00Z"
},
{
"tag": "v5.127.0",
"kind": "minor",
"published_at": "2025-03-19T13:32:40Z"
},
{
"tag": "v5.126.0",
"kind": "minor",
"published_at": "2025-03-18T18:02:08Z"
},
{
"tag": "v5.125.0",
"kind": "minor",
"published_at": "2025-03-18T17:47:43Z"
},
{
"tag": "v5.124.1",
"kind": "patch",
"published_at": "2025-03-18T16:41:29Z"
}
],
"recent_commits": [
{
"oid": "52b439c483eb7c8d964959e0ede358cc0ad6830e",
"body": "BDOG-3982: Search by URL to show redirections",
"is_bot": false,
"headline": "Merge pull request #1140 from hmrc/BDOG-3982-rebased",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2026-07-20T08:12:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80ef19d7821a3cfde7ddc865c3c066e0e03b73f4",
"body": null,
"is_bot": false,
"headline": "remove param",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2026-07-19T18:15:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38132c18a0a49fa9767bf093cb67645c9905f354",
"body": null,
"is_bot": false,
"headline": "BDOG-3982: Search by URL to show redirections",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2026-07-19T18:13:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1032d41aea206007b36e58f22789b5c6c8d0f3dd",
"body": "BDOG-4011: Transform email addresses to lower case before passing down",
"is_bot": false,
"headline": "Merge pull request #1139 from hmrc/BDOG-4011",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2026-07-16T16:03:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f7a435cba17c466f6d880ddeeabd7aa1e983859",
"body": null,
"is_bot": false,
"headline": "BDOG-4011: Transform email addresses to lower case before passing down",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2026-07-16T15:36:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "375705bf67e933b88ddbda08d8b8fa36a77009ac",
"body": "BDOG-3986: Make user page endpoint case-insensitive",
"is_bot": false,
"headline": "Merge pull request #1137 from hmrc/BDOG-3986",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2026-07-10T09:59:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a66d5443556e5cf866aa5f724db6a0c5b00b7653",
"body": null,
"is_bot": false,
"headline": "BDOG-3986: Make user page endpoint case-insensitive",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2026-07-10T09:47:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89855601ff8c9c3f41a68262110df24c42bf5c32",
"body": "BDOG-3736: Add filter for sm2Profile on JDK Explorer",
"is_bot": false,
"headline": "Merge pull request #1136 from hmrc/BDOG-3736",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-07-02T15:59:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b1e8bfcc430cb900ae87459d1d9dfb2e89a8d02",
"body": null,
"is_bot": false,
"headline": "BDOG-3736: Add filter for sm2Profile on JDK Explorer",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-07-02T14:47:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d32a00fe6b27434af48003c561c2ed058b2b4a00",
"body": "Switch to standard catalogue erroring",
"is_bot": false,
"headline": "Merge pull request #1135 from hmrc/BDOG-3943",
"author_name": "James Rees",
"author_login": "Jxr227",
"committed_at": "2026-06-29T15:00:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67606cd6ba172b7971324c25f828f8f67c999d96",
"body": null,
"is_bot": false,
"headline": "Switch to standard catalogue erroring",
"author_name": "James",
"author_login": "Jxr227",
"committed_at": "2026-06-29T14:26:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48e85aa99b309cd3dce5a7c28d1f09c7f0d4dfdb",
"body": "Prevent LDAP password reset using primary email",
"is_bot": false,
"headline": "Merge pull request #1134 from hmrc/BDOG-3943",
"author_name": "James Rees",
"author_login": "Jxr227",
"committed_at": "2026-06-29T13:16:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa001b3ae304c89ee7b3bf03203022e2d6a4dee8",
"body": null,
"is_bot": false,
"headline": "Prevent LDAP password reset using primary email",
"author_name": "James",
"author_login": "Jxr227",
"committed_at": "2026-06-29T10:04:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd7732b82d7b456e5e943180c23abdbf6ff83669",
"body": "BDOG-3885: Leak Detection - add back deleted CSS class",
"is_bot": false,
"headline": "Merge pull request #1133 from hmrc/BDOG-3885",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2026-06-25T10:56:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12a878afe2f28346ee1a7fb24094807714aa9b01",
"body": null,
"is_bot": false,
"headline": "BDOG-3885: Add back deleted CSS class",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2026-06-24T18:30:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "500c34ff5ac076d70cbe47904460a64a01a676ea",
"body": "BDOG-3876: switches to github proxy to check username exists",
"is_bot": false,
"headline": "Merge pull request #1130 from hmrc/BDOG-3876",
"author_name": "Sam Sloman",
"author_login": "Tyrpix",
"committed_at": "2026-06-22T09:50:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91b237f1de37949d7f7180ece9611497ba5fdcc8",
"body": null,
"is_bot": false,
"headline": "BDOG-3876: pr changes",
"author_name": "Sam Sloman",
"author_login": "Tyrpix",
"committed_at": "2026-06-22T08:58:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70134b0bb28205c0b46f10265308acaa7d75732c",
"body": "Bdog 3953",
"is_bot": false,
"headline": "Merge pull request #1131 from hmrc/BDOG-3953",
"author_name": "James Rees",
"author_login": "Jxr227",
"committed_at": "2026-06-22T08:31:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef3db1993e977defdcb16671a1b3ad455a90028c",
"body": null,
"is_bot": false,
"headline": "Show mapped deploy service names without AEM source repos",
"author_name": "James",
"author_login": "Jxr227",
"committed_at": "2026-06-22T07:53:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e55bee994353ae708646e680e4e6f9258050848",
"body": null,
"is_bot": false,
"headline": "Show repo service alongside mapped deploy aliases",
"author_name": "James",
"author_login": "Jxr227",
"committed_at": "2026-06-22T07:18:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13bd576add8e14bdbbc471ba59dfeb03505dc78f",
"body": "Fix deployment permissions for mapped service repo names",
"is_bot": false,
"headline": "Merge pull request #1129 from hmrc/BDOG-3953",
"author_name": "James Rees",
"author_login": "Jxr227",
"committed_at": "2026-06-19T15:00:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc35e676881c213c965fdbee57ca103b50aaad49",
"body": null,
"is_bot": false,
"headline": "BDOG-3876: switches to github proxy to check username exists",
"author_name": "Sam Sloman",
"author_login": "Tyrpix",
"committed_at": "2026-06-19T13:21:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92d0a6d734552f865bad18d27727738441bbbde3",
"body": null,
"is_bot": false,
"headline": "Fix deployment permissions for mapped service repo names",
"author_name": "James",
"author_login": "Jxr227",
"committed_at": "2026-06-19T11:36:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74f80343cc96b60c294b5b27b3dc70172ccc680c",
"body": "BDOG-3876: updates catalogue edit user githtub username validation",
"is_bot": false,
"headline": "Merge pull request #1128 from hmrc/BDOG-3876",
"author_name": "Sam Sloman",
"author_login": "Tyrpix",
"committed_at": "2026-06-05T11:38:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fbfa69d115f02024a2e38e2e9ef4d1d662dcb65",
"body": "…t exist",
"is_bot": false,
"headline": "BDOG-3876: adds validation to add to github team when username doesn'…",
"author_name": "Sam Sloman",
"author_login": "Tyrpix",
"committed_at": "2026-06-05T07:58:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1feb17d3602c6c4b3c4f29c22ffecaa0ce6bd63a",
"body": null,
"is_bot": false,
"headline": "BDOG-3876: adds github username validation to edit user details",
"author_name": "Sam Sloman",
"author_login": "Tyrpix",
"committed_at": "2026-06-05T07:57:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe2ffd246e60817b5ffa71b8410896274d5388ac",
"body": "…pdate\n\nBDOG-3888: add missed logic to hide description when unavailable",
"is_bot": false,
"headline": "Merge pull request #1127 from hmrc/BDOG-3888_vulnerability-template-u…",
"author_name": "James Patey",
"author_login": "jamespatey-cap",
"committed_at": "2026-06-01T08:34:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb8ef7325ceed2e78450388e0bf8d7b797620dee",
"body": null,
"is_bot": false,
"headline": "BDOG-3888: add missed logic to hide description when unavailable",
"author_name": "James Patey",
"author_login": "jamespatey-cap",
"committed_at": "2026-06-01T08:08:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0039638f9797e9559e8b2b3cf561393653e5768c",
"body": "Fix Create issue link for users that are not a member of MDTP organis…",
"is_bot": false,
"headline": "Merge pull request #1126 from hmrc/BDOG-3883",
"author_name": "James Rees",
"author_login": "Jxr227",
"committed_at": "2026-05-29T09:57:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d317bd35ab473db4ce2750ce72ac4e6ecdf6afa",
"body": "…ation",
"is_bot": false,
"headline": "Fix Create issue link for users that are not a member of MDTP organis…",
"author_name": "James",
"author_login": "Jxr227",
"committed_at": "2026-05-29T09:15:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ea83179f8a42fbba674990bfe2deb54e833b4c1",
"body": "Prevent adding non-MDTP org members to GitHub teams",
"is_bot": false,
"headline": "Merge pull request #1125 from hmrc/BDOG-3883",
"author_name": "James Rees",
"author_login": "Jxr227",
"committed_at": "2026-05-29T08:30:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a00b07338415bece73ca856b422713a578de997",
"body": null,
"is_bot": false,
"headline": "Bump internal-auth-client-play-30 to 4.4.0",
"author_name": "James",
"author_login": "Jxr227",
"committed_at": "2026-05-29T08:21:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bed154a4861d8ab389cfad5d3fed98238c2afdf5",
"body": null,
"is_bot": false,
"headline": "Prevent adding non-MDTP org members to GitHub teams",
"author_name": "James",
"author_login": "Jxr227",
"committed_at": "2026-05-29T08:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4fe250d57e7b6dcb7558b7ac1a671cd38fc7e3b",
"body": "BDOG-3891: Block editing user details/tooling when the user has no team",
"is_bot": false,
"headline": "Merge pull request #1124 from hmrc/BDOG-3891",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-05-22T10:21:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d48b129bb25caea63b14781ccefafd9cf42b0eff",
"body": null,
"is_bot": false,
"headline": "BDOG-3891: Block editing user details/tooling when the user has no team",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-05-22T10:13:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc7d24acf207cf4e8ee1000fece3da8ac6935034",
"body": "BDOG-3888: make front-end compatible with updated vulnerabilty API with missing description / references fields",
"is_bot": false,
"headline": "Merge pull request #1121 from hmrc/BDOG-3888-optional-vuln-fields",
"author_name": "James Patey",
"author_login": "jamespatey-cap",
"committed_at": "2026-05-21T08:06:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07ce6136e02e6b29f54139affe691a4337d4eab1",
"body": null,
"is_bot": false,
"headline": "BDOG-3888: fix accidentally removed interpolator",
"author_name": "James Patey",
"author_login": "jamespatey-cap",
"committed_at": "2026-05-20T16:26:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c42e273bef232c6a87f8aca4048043d17fc2de1e",
"body": null,
"is_bot": false,
"headline": "BDOG-3888: update json indents",
"author_name": "James Patey",
"author_login": "jamespatey-cap",
"committed_at": "2026-05-20T16:20:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f04564a369c26c0453a022b1deecdfbf825d994",
"body": null,
"is_bot": false,
"headline": "BDOG-3888: updated indents / readibility",
"author_name": "James Patey",
"author_login": "jamespatey-cap",
"committed_at": "2026-05-20T16:12:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f18650ad4334bac3e03141187e23618d7d7be8be",
"body": "…sConnectorSpec",
"is_bot": false,
"headline": "BDOG-3888: removed ModelSpec - both versions tested by Vulnerabilitie…",
"author_name": "James Patey",
"author_login": "jamespatey-cap",
"committed_at": "2026-05-20T15:47:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64d18c03fc4c2d63c20014c82fce70602468f77d",
"body": null,
"is_bot": false,
"headline": "BDOG-3888: updated to scala 3 indent style",
"author_name": "James Patey",
"author_login": "jamespatey-cap",
"committed_at": "2026-05-20T15:44:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4a3e765cfd7df27410a737be561a6198f18f38f",
"body": "…on if absent",
"is_bot": false,
"headline": "BDOG-3888: update template to not show description / references secti…",
"author_name": "James Patey",
"author_login": "jamespatey-cap",
"committed_at": "2026-05-20T15:28:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e2c1a47987b7abe0286e8f87313bbf81fb5f1b0",
"body": "BDOG-3899: Fix slack links to have valid urls",
"is_bot": false,
"headline": "Merge pull request #1123 from hmrc/BDOG-3899",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-05-19T14:55:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "936598aa3f8c8c8f85e2780a0b6eff64f476374c",
"body": null,
"is_bot": false,
"headline": "BDOG-3899: Fix slack links to have valid urls",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-05-19T14:49:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d97c20392b19f8a49a6bf7058332e6aadda4fab",
"body": "BDOG-3881: Handle errors from expired B&D queues",
"is_bot": false,
"headline": "Merge pull request #1122 from hmrc/BDOG-3881-new",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2026-05-19T08:16:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74eff805b2f5ff6a8366a4af8a1798040257c93e",
"body": null,
"is_bot": false,
"headline": "BDOG-3881: Handle errors from expired queues",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2026-05-18T21:14:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fecc391ddca6141d3714506b878be4d7effc7593",
"body": "…ake missing fields optional / Nilable.",
"is_bot": false,
"headline": "BDOG-3888: make front-end compatible with updated vulnerabilty API. M…",
"author_name": "James Patey",
"author_login": "jamespatey-cap",
"committed_at": "2026-05-15T16:50:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d1721669ef39e793a1c3c28aaecb18f4afb3792",
"body": "BDOG-BAU: Update validation to prevent entering url in github username field",
"is_bot": false,
"headline": "Merge pull request #1120 from hmrc/BDOG-BAU",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-04-29T14:38:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aec3103838ab5c54890e132afeb45d600528cf1d",
"body": "…e field",
"is_bot": false,
"headline": "BDOG-BAU: Update validation to prevent entering url in github usernam…",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-04-29T14:29:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2a2128e2d0fbb41f610ad0399d4435a39b4314d",
"body": "BDOG-BAU: Add validation to prevent entering url in github username field",
"is_bot": false,
"headline": "Merge pull request #1119 from hmrc/BDOG-BAU",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-04-29T14:19:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b74774c20191f71b30198848749967accd3da2d9",
"body": "…ield",
"is_bot": false,
"headline": "BDOG-BAU: Add validation to prevent entering url in github username f…",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-04-29T14:09:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cc00295fae15abcdaa13cae731dfb80286b671b",
"body": "BDOG-BAU: updates vpn cert modal",
"is_bot": false,
"headline": "Merge pull request #1118 from hmrc/BDOG-BAU",
"author_name": "Sam Sloman",
"author_login": "Tyrpix",
"committed_at": "2026-04-29T13:02:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ea791487172b7fcef77e31b6161487ee3f4f967",
"body": null,
"is_bot": false,
"headline": "BDOG-BAU: updates vpn cert modal",
"author_name": "Sam Sloman",
"author_login": "Tyrpix",
"committed_at": "2026-04-24T10:20:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "210319777ac5c7e8953a4e42e9c42b7bec0bffc8",
"body": "BDOG-3703: Show platfrom info on Team List and Team Details pages",
"is_bot": false,
"headline": "Merge pull request #1116 from hmrc/BDOG-3703",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-03-27T07:19:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "186bff736aa4dbad329f4b3bdddab57c31178e99",
"body": null,
"is_bot": false,
"headline": "BDOG-3703: Show platfrom info on Team List and Team Details pages",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-03-26T16:15:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "822aab69cd6dac8dbe4acbb452bb89862d1e21fd",
"body": "BDOG-3688: Fix team filter not reflecting selected team on JDK Versio…",
"is_bot": false,
"headline": "Merge pull request #1115 from hmrc/BDOG-3688",
"author_name": "James Rees",
"author_login": "Jxr227",
"committed_at": "2026-03-26T09:35:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90185572dc139151da600116b03a6a7d0b4ee00f",
"body": "…ns page",
"is_bot": false,
"headline": "BDOG-3688: Fix team filter not reflecting selected team on JDK Versio…",
"author_name": "James Rees",
"author_login": "Jxr227",
"committed_at": "2026-03-26T09:01:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5d829e14e385d77b180b855b92ea29b1d49cc5a",
"body": "BDOG-3643: Add tooltip for dependency Latest Version",
"is_bot": false,
"headline": "Merge pull request #1114 from hmrc/BDOG-3643",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2026-03-25T12:35:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fc188599217ebef00d826aa443f017b4f9c7386",
"body": null,
"is_bot": false,
"headline": "BDOG-3643: Add tooltip for dependency Latest Version",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2026-03-25T10:27:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27c61641cf12b7919ff49f2d8902cfce52c2b7e1",
"body": "BDOG-3745: updates create team name constraints",
"is_bot": false,
"headline": "Merge pull request #1113 from hmrc/BDOG-3745",
"author_name": "Sam Sloman",
"author_login": "Tyrpix",
"committed_at": "2026-03-19T09:47:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47aea30a8cd4ce6b6b818dbc12dee7bd3c7e051f",
"body": null,
"is_bot": false,
"headline": "BDOG-3475: pr bot",
"author_name": "Sam Sloman",
"author_login": "Tyrpix",
"committed_at": "2026-03-18T08:56:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "302b03a5924ae5f40e48b4488c6d251aadb7a823",
"body": null,
"is_bot": false,
"headline": "BDOG-3745: updates create team name constraints",
"author_name": "Sam Sloman",
"author_login": "Tyrpix",
"committed_at": "2026-03-18T08:43:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6772ac1e8762c324b0b5c4506c500d79c7487543",
"body": "PLATUI-4203 Fixing mdtp test approach link on create test repo confir…",
"is_bot": false,
"headline": "Merge pull request #1112 from paulfirmstone/PLATUI-4203",
"author_name": "James Rees",
"author_login": "Jxr227",
"committed_at": "2026-03-16T13:33:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "501e4c46704dd446db7553b2f5606286833b9b94",
"body": "…mation page",
"is_bot": false,
"headline": "PLATUI-4203 Fixing mdtp test approach link on create test repo confir…",
"author_name": "paulfirmstone",
"author_login": "paulfirmstone",
"committed_at": "2026-03-16T12:24:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9eb648ecdf68763d1ce3741e6a734e5ec0ae2cc",
"body": "BDOG-BAU: Deploy Events - form eagerly evaluated",
"is_bot": false,
"headline": "Merge pull request #1111 from hmrc/BDOG-BAU-fix-date-eager-evaluation",
"author_name": "Sam Sloman",
"author_login": "Tyrpix",
"committed_at": "2026-03-10T10:51:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc74088f5616ae2f30c7ea324938588e58d79b36",
"body": null,
"is_bot": false,
"headline": "BDOG-BAU: Deploy Events - Now eagerly evaluated",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2026-03-10T10:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cce9c6c37fa2ec84d4ea23502bea34328cdb222a",
"body": "BDOG-3673: UI improvement (Export as CSV button)",
"is_bot": false,
"headline": "Merge pull request #1104 from hmrc/BDOG-3673",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2026-02-26T12:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b567b1fcdaee278feffa31a947c6bafbab8e6c5d",
"body": "BDOG-3702 changed organisation to platform",
"is_bot": false,
"headline": "Merge pull request #1110 from hmrc/BDOG-3702",
"author_name": "martingwarada1-ops",
"author_login": "martingwarada1-ops",
"committed_at": "2026-02-23T09:52:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c6ab3f4c51970d8d7f5f98d95c1bec01647e644",
"body": null,
"is_bot": false,
"headline": "BDOG-3702 changed organisation to platform",
"author_name": "martingwarada",
"author_login": "martingwarada1-ops",
"committed_at": "2026-02-21T09:34:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "823b5b1f1f51b852a3ec3dd2735e8452cdf930ec",
"body": "BDOG-3633: Increase bootstrap and Play versions",
"is_bot": false,
"headline": "Merge pull request #1109 from hmrc/BDOG-3633",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-02-18T15:50:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3027a65c39adf5a216ab8d5025aae35255b889b",
"body": null,
"is_bot": false,
"headline": "BDOG-3633: Increase bootstrap and Play versions",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-02-18T15:43:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66f25c50ec44762e50ed73b3dc114fd7ff2893d4",
"body": "BDOG-3701 Sending platform instead of organisation when creating teams",
"is_bot": false,
"headline": "Merge pull request #1108 from hmrc/BDOG-3702",
"author_name": "martingwarada1-ops",
"author_login": "martingwarada1-ops",
"committed_at": "2026-02-18T11:57:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc2daddc98bf0e7a931701baa83d51e7703dde43",
"body": null,
"is_bot": false,
"headline": "BDOG-3701 Sending platform instead of organisation when creating teams",
"author_name": "martingwarada",
"author_login": "martingwarada1-ops",
"committed_at": "2026-02-17T16:43:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8450bd1f68fac8f3cd6eb4e111bd8895b52bab7",
"body": "SUP-16038: Handle hyphenated team names in GitHub team URL creation",
"is_bot": false,
"headline": "Merge pull request #1105 from hmrc/SUP-16038",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2026-02-10T14:40:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "481343b5de738ce42afb05b9d99fb4fa882fff69",
"body": null,
"is_bot": false,
"headline": "use regex replaceAll",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2026-02-10T14:24:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c92afb146ba88657b1433d7145add4bc8e8cbc4d",
"body": null,
"is_bot": false,
"headline": "SUP-16038: Handle hyphenated team names in GitHub team URL creation",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2026-02-10T12:55:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb0b21028b346cb31a72ef501de074dcc105e1f5",
"body": null,
"is_bot": false,
"headline": "BDOG-3673: UI improvement (Export as CSV button)",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2026-02-09T21:44:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95ee7c35ccd75a33df56fd97dbfbe63e2f07198c",
"body": "BDOG-BAU: Fix GitHub API links in leaks",
"is_bot": false,
"headline": "Merge pull request #1103 from hmrc/BDOG-BAU",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-02-04T11:00:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69aed67294735aee1ef37430a1aa49805a862dc3",
"body": null,
"is_bot": false,
"headline": "BDOG-BAU: Fix GitHub API links in leaks",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-02-04T10:29:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd814f2ed538ea38956577440bddf2b02a785c6e",
"body": "BDOG-3701: Retrieve and play back available Platforms when creating a team",
"is_bot": false,
"headline": "Merge pull request #1102 from hmrc/BDOG-3701",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-02-02T12:48:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3cf1db802c7ea936bc2c07f49084a81a5da85fa3",
"body": "… team",
"is_bot": false,
"headline": "BDOG-3701: Retrieve and play back available Platforms when creating a…",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-02-02T12:35:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "300823e9b9c91f2d2f7ae367a04b41c448171405",
"body": "BDOG-3558 - added merssaging for private channel warning",
"is_bot": false,
"headline": "Merge pull request #1101 from hmrc/BDOG-3558",
"author_name": "martingwarada1-ops",
"author_login": "martingwarada1-ops",
"committed_at": "2026-01-29T09:01:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c95795583bb71f5f0eae806d3958d18b56190d8",
"body": null,
"is_bot": false,
"headline": "BDOG-3558 - versions upgrade",
"author_name": "martingwarada",
"author_login": "martingwarada1-ops",
"committed_at": "2026-01-28T11:47:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01af2bd19368d38a9df80f47d9d63b901d2dbc27",
"body": null,
"is_bot": false,
"headline": "BDOG-3558 - added merssaging for private channel warning",
"author_name": "martingwarada",
"author_login": "martingwarada1-ops",
"committed_at": "2026-01-28T09:44:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c00c26ee75db83d9f3b4fbefdc267a45fe02e324",
"body": "BDOG-BAU: Fix handling uppercase letters when pasting a list of users to offboard",
"is_bot": false,
"headline": "Merge pull request #1100 from hmrc/BDOG-BAU",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-01-19T15:50:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1652081d435c43a83116b66f35979cc928faab3d",
"body": "… to offboard",
"is_bot": false,
"headline": "BDOG-BAU: Fix handling uppercase letters when pasting a list of users…",
"author_name": "Brian Wakenshaw",
"author_login": "BriWak",
"committed_at": "2026-01-19T15:20:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1782f4f8e6f05c500bcf15b0e5a6ec250ea4a45b",
"body": "BDOG-3632: Include orphaned users and hide deleted users",
"is_bot": false,
"headline": "Merge pull request #1098 from hmrc/BDOG-3632",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2025-12-23T12:47:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cffed5ceb74012b1c5d6b11574070ea25a5f4296",
"body": null,
"is_bot": false,
"headline": "BDOG-3632: Surface users not belonging to teams and hide deleted users",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2025-12-22T10:07:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f488d74d29f9f842c206e8637d4e34578985db9",
"body": "BDOG-3626: Show only metrics with a service name",
"is_bot": false,
"headline": "Merge pull request #1097 from hmrc/BDOG-3626",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2025-12-08T10:02:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e13db148caa88ab7ffcd64126672122c8d701f1",
"body": null,
"is_bot": false,
"headline": "BDOG-3626: Show only metrics with a service name",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2025-12-04T21:49:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42916b47fb89da37b0ce6a12e64ca611c6f8f249",
"body": "…hance event … (#1096)\n\n* Refactor JS initialization: improve element checks and enhance event handling\n* Enhance deployment type handling for \"What's Running Where\"\n- Refine `DeploymentType` logic to detect AppMesh (default) and Consul (based on `consul_migration_stage`).\n- Adjust UI to display Consul icon for stages 2 and 3; no icon shown for AppMesh.\n- Update tooltips and popovers for version and deployment type details.\n- Expand tests to cover additional `consul_migration_stage` scenarios.",
"is_bot": false,
"headline": "BDOG- 3550: Refactor JS initialization: improve element checks and en…",
"author_name": "benanaktashmrc",
"author_login": "benanaktashmrc",
"committed_at": "2025-12-03T15:34:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ad206f907adadc1484b21e8c164493de7b77f82",
"body": "BDOG-3558: Private slack notification channels in ump",
"is_bot": false,
"headline": "Merge pull request #1092 from hmrc/BDOG-3558",
"author_name": "martingwarada1-ops",
"author_login": "martingwarada1-ops",
"committed_at": "2025-11-25T13:23:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2a698ef3f570b8959b3d7c21bf24857b1d4f4d6",
"body": null,
"is_bot": false,
"headline": "BDOG-3558: Private slack notification channels in ump",
"author_name": "martingwarada",
"author_login": "martingwarada1-ops",
"committed_at": "2025-11-24T15:55:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eacd9e11b9a13651620eb3979444c4c6fa49a398",
"body": "* BDOG-350 Add deployment type support for \"What's Running Where\"\n- Introduced `DeploymentType` in the data model to identify deployment styles (e.g., Appmesh, Consul).\n- Updated backend to enrich release data with deployment type based on environment variables.\n- Enhanced front-end to display deplo\n[…]\ncon for stage 2).\n- Replace `deployment.type` with `consul_migration_stage` for deployment type detection.\n- Enhance tests to verify proper handling of AppMesh (no icon) and Consul (icon for stage 2).",
"is_bot": false,
"headline": "BDOG-3550 Add deployment type support for \"What's Running Where\" (#1095)",
"author_name": "benanaktashmrc",
"author_login": "benanaktashmrc",
"committed_at": "2025-11-24T13:29:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4a073debbc1d6300ed9fefe5ee8f031d95874e62",
"body": "BDOG-BAU: Team info page - fetched name in Health Metrics",
"is_bot": false,
"headline": "Merge pull request #1094 from hmrc/BDOG-BAU-healthmetrics-team-name",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2025-11-19T12:07:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b38d62fa318a86322d0e6e9aea74fe4c594664aa",
"body": null,
"is_bot": false,
"headline": "BDOG-BAU: Team info page - fetched name in Health Metrics",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2025-11-19T11:30:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ced3c63e1c5949fae44fae994986d981552f0b95",
"body": "BDOG-BAU: Team info page - use fetched name",
"is_bot": false,
"headline": "Merge pull request #1093 from hmrc/BDOG-BAU-fetched-team-name",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2025-11-18T16:33:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb3a79c5b7ee5fc0cfd9d92b070eed994d524e1f",
"body": null,
"is_bot": false,
"headline": "BDOG-BAU: Team info page - use fetched name",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2025-11-18T16:25:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea14a42d9ac418bdf3bcfc1ce5b2c020aff6858e",
"body": "BDOG-3602: Create service user - add contact email validation",
"is_bot": false,
"headline": "Merge pull request #1091 from hmrc/BDOG-3602-new",
"author_name": "Mohammad Dweik",
"author_login": "MoDweik",
"committed_at": "2025-11-06T14:59:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "540a5895d6702c8b948a3c82a2c4e39e33e23722",
"body": null,
"is_bot": false,
"headline": "format",
"author_name": "MoDweik",
"author_login": "MoDweik",
"committed_at": "2025-11-06T14:47:34Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 126,
"latest_release_at": "2026-07-20T08:19:32Z",
"latest_release_tag": "v5.221.0",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 35,
"days_since_latest_release": 2,
"mean_days_between_releases": 3.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 12,
"stars": 8,
"watchers": 18,
"fork_history": {
"days": [
{
"date": "2016-09-05",
"count": 2
},
{
"date": "2018-03-13",
"count": 1
},
{
"date": "2018-05-01",
"count": 1
},
{
"date": "2019-06-07",
"count": 1
},
{
"date": "2020-12-08",
"count": 1
},
{
"date": "2021-04-10",
"count": 1
},
{
"date": "2022-01-13",
"count": 1
},
{
"date": "2026-03-13",
"count": 1
},
{
"date": "2026-03-16",
"count": 1
},
{
"date": "2026-04-15",
"count": 1
},
{
"date": "2026-05-14",
"count": 1
}
],
"complete": true,
"collected": 12,
"total_forks": 12
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 1379750,
"source_files_sampled": 235,
"oversized_source_files": 5,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 1079,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 1,
"closed_unmerged_prs": 59
},
"bus_factor": 5,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "colin-lamed",
"commits": 705,
"avatar_url": "https://avatars.githubusercontent.com/u/9568290?v=4"
},
{
"type": "User",
"login": "Shnick",
"commits": 418,
"avatar_url": "https://avatars.githubusercontent.com/u/1132919?v=4"
},
{
"type": "User",
"login": "Tyrpix",
"commits": 315,
"avatar_url": "https://avatars.githubusercontent.com/u/45664271?v=4"
},
{
"type": "User",
"login": "jordanrowe",
"commits": 255,
"avatar_url": "https://avatars.githubusercontent.com/u/37838443?v=4"
},
{
"type": "User",
"login": "arminio",
"commits": 169,
"avatar_url": "https://avatars.githubusercontent.com/u/498781?v=4"
},
{
"type": "User",
"login": "christopherjturner",
"commits": 159,
"avatar_url": "https://avatars.githubusercontent.com/u/23338096?v=4"
},
{
"type": "User",
"login": "jonnydh",
"commits": 141,
"avatar_url": "https://avatars.githubusercontent.com/u/60072280?v=4"
},
{
"type": "User",
"login": "BriWak",
"commits": 127,
"avatar_url": "https://avatars.githubusercontent.com/u/36340167?v=4"
},
{
"type": "User",
"login": "Stegi56",
"commits": 107,
"avatar_url": "https://avatars.githubusercontent.com/u/91616550?v=4"
},
{
"type": "User",
"login": "RikSherman",
"commits": 103,
"avatar_url": "https://avatars.githubusercontent.com/u/23365258?v=4"
}
],
"contributors_sampled": 55,
"top_contributor_share": 0.197
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 13 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 10 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "52b439c483eb7c8d964959e0ede358cc0ad6830e",
"ran_at": "2026-07-23T02:03:42Z",
"aggregate_score": 6.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [
{
"number": 1132,
"created_at": "2026-06-22T08:32:12Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-20T08:12:38Z",
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/hmrc/catalogue-frontend",
"host": "github.com",
"name": "catalogue-frontend",
"owner": "hmrc"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"security": 68,
"vitality": 93,
"community": 39,
"governance": 87,
"engineering": 30
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 93,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 88,
"inputs": {
"commits_last_year": 126,
"human_commit_share": 1,
"days_since_last_push": 2,
"active_weeks_last_year": 35
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "35/52 weeks with commits",
"points": 24.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 35
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "126 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 126
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v5.221.0",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 3.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 2,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 2 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 2
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 39,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"forks": 12,
"stars": 8,
"watchers": 18,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "8 stars",
"points": 13.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 8
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "12 forks",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 12
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "18 watchers",
"points": 6.8,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 18
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "excellent",
"name": "Sustainability & Governance",
"value": 87,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "excellent",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 88,
"inputs": {
"bus_factor": 5,
"contributors_sampled": 55,
"top_contributor_share": 0.197
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "5 contributor(s) cover half of all commits",
"points": 45.9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 5
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 20% of commits",
"points": 18.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 20
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "55 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 55
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"merged_prs": 1079,
"open_issues": 0,
"closed_issues": 1,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 59
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1079/1138 decided PRs merged",
"points": 36.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1079,
"decided": 1138
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"followers": 425,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "hmrc",
"public_repos": 1786,
"account_age_days": 4655
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "425 followers of hmrc",
"points": 18.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 425,
"login": "hmrc"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "1786 public repos, account ~12 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 1786
}
},
{
"code": "account_age_years",
"params": {
"years": 12
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 30,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "critical",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 13 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 68,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 6.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 13 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 43,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.44,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "44 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 44,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Scala (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Scala"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Scala",
"largest_source_bytes": 1379750,
"source_files_sampled": 235,
"oversized_source_files": 5
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Scala (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Scala"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "5/235 source files over 60KB",
"points": 53.8,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 235,
"oversized": 5
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-23T02:04:11.215145Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/h/hmrc/catalogue-frontend.svg",
"full_name": "hmrc/catalogue-frontend",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.