Public recordCritical
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-25 22:42 UTC
hperl / oathkeeper
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
hperl/oathkeeper holds a health index of 28 out of 100, placing it in the Critical band. It scores highest on AI Readiness (65/100) and lowest on Community & Adoption (12/100). It was last updated 1422 days ago. A single contributor accounts for most of its recent work.
28
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
28
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Abandonment Policy applies a 85% multiplier to weighted overall health.
Ownership
Henning PerlPersonal account
38 followers53 public repossince Nov 2008@ory-corp
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/ory/oathkeeperpoints to another repo — not scored | v0.40.9 | - | 123 | 541 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
20
Development activity
1Critical
Abandonment alert
Work has arrived and nobody has attended to it
no human commit in 1513 daysautomated commits excludedreleases stalledOpenSSF Scorecard reports it unmaintained
Silence alone is never the finding — a small, finished library may need no commits for years. This alert requires both: no human commit for a long time, and obligations the project is visibly not discharging. Automated commits do not count as maintenance.
How abandonment is assessedHow it's scored
| 0/36 | Push recency — last push 1,422 days ago |
| 0/36 | Commit cadence — 0/52 weeks with commits |
| 0/18 | Commit volume — 0 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 0 |
| human_commit_share | 0.99 |
| days_since_last_push | 1,422 |
| active_weeks_last_year | 0 |
Release discipline
48At risk
How it's scored
| 16.2/27 | Ships releases — 100 version tags (no GitHub releases) |
| 0/36 | Release recency — latest release 1,564 days ago |
| 27/27 | Release cadence — a release every ~30.3 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 100 |
| latest_release_tag | v0.38.25-beta.1 |
| releases_from_tags | yes |
| days_since_latest_release | 1,564 |
| mean_days_between_releases | 30.3 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
12
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
25Critical
How it's scored
| 0/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | no |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
33
Maintainer resilience (bus factor)
38At risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 5.4/22.5 | Commit distribution — top contributor authored 76% of commits |
| 13.5/13.5 | Contributor breadth — 84 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 8 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 84 |
| top_contributor_share | 0.76 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
58Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 11.4/25 | Owner reach — 38 followers of hperl |
| 24.6/25 | Track record — 53 public repos, account ~17 yr old |
Inputs used
| followers | 38 |
| owner_type | User |
| is_verified | — |
| owner_login | hperl |
| public_repos | 53 |
| account_age_days | 6,462 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Engineering Quality
Are baseline engineering and documentation practices in place?
64
Engineering practices
80Good
How it's scored
| 24/24 | CI workflows — 7 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yml |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
40At risk
How it's scored
| 0/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://www.ory.sh/?utm_source=github&utm_medium=banner&utm_campaign=hydra |
| 0/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | https://www.ory.sh/?utm_source=github&utm_medium=banner&utm_campaign=hydra |
| has_readme | no |
| has_docs_dir | yes |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
36
Security posture
36At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 8 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool detected: CodeQL |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 137 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 3.6 |
Excluded from scoring (no data or not applicable): ci_tests, packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
65
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 99 of 99 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yml |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 8/8 | Automated maintenance — 1 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum, package-lock.json |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.01 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/190 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 36,659 |
| source_files_sampled | 190 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — spec/swagger.json |
| 0/20 | MCP server |
| 0/40 | Runnable examples |
Inputs used
| example_dirs | — |
| has_mcp_signal | no |
| api_schema_files | spec/swagger.json |
Key facts
0GitHub stars
84contributors
0commits, last 12 months
1,422days since last push
100releases
1bus factor
0open issues
Go, npmpackage ecosystems
Data collection warnings
- Community profile unavailable
- go package 'github.com/ory/oathkeeper' points at a different repository (https://github.com/ory/oathkeeper); excluded from ecosystem scoring
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 3.6 / 10
3.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 8 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool detected: CodeQL |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 137 existing vulnerabilities detected |
Direct dependencies 68
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/Azure/azure-pipeline-go | v0.2.2 | go.mod |
| Go | github.com/Azure/azure-storage-blob-go | v0.9.0 | go.mod |
| Go | github.com/Masterminds/sprig/v3 | v3.2.2 | go.mod |
| Go | github.com/asaskevich/govalidator | v0.0.0-20200428143746-21a406dcc535 | go.mod |
| Go | github.com/auth0/go-jwt-middleware | v1.0.1 | go.mod |
| Go | github.com/aws/aws-sdk-go | v1.31.13 | go.mod |
| Go | github.com/blang/semver | v3.5.1+incompatible | go.mod |
| Go | github.com/bxcodec/faker | v2.0.1+incompatible | go.mod |
| Go | github.com/dgraph-io/ristretto | v0.0.2 | go.mod |
| Go | github.com/dlclark/regexp2 | v1.2.0 | go.mod |
| Go | github.com/form3tech-oss/jwt-go | v3.2.2+incompatible | go.mod |
| Go | github.com/fsnotify/fsnotify | v1.4.9 | go.mod |
| Go | github.com/ghodss/yaml | v1.0.0 | go.mod |
| Go | github.com/go-openapi/errors | v0.20.1 | go.mod |
| Go | github.com/go-openapi/runtime | v0.19.20 | go.mod |
| Go | github.com/go-openapi/strfmt | v0.19.5 | go.mod |
| Go | github.com/go-openapi/swag | v0.19.9 | go.mod |
| Go | github.com/go-openapi/validate | v0.19.10 | go.mod |
| Go | github.com/go-sql-driver/mysql | v1.5.0 | go.mod |
| Go | github.com/go-swagger/go-swagger | v0.25.0 | go.mod |
| Go | github.com/gobuffalo/httptest | v1.0.2 | go.mod |
| Go | github.com/gobuffalo/packr/v2 | v2.8.0 | go.mod |
| Go | github.com/gobwas/glob | v0.2.3 | go.mod |
| Go | github.com/golang-jwt/jwt/v4 | v4.0.0 | go.mod |
| Go | github.com/golang/gddo | v0.0.0-20190904175337-72a348e765d2 | go.mod |
| Go | github.com/golang/mock | v1.4.4 | go.mod |
| Go | github.com/google/go-replayers/httpreplay | v0.1.0 | go.mod |
| Go | github.com/google/uuid | v1.1.1 | go.mod |
| Go | github.com/gorilla/websocket | v1.4.2 | go.mod |
| Go | github.com/imdario/mergo | v0.3.11 | go.mod |
| Go | github.com/julienschmidt/httprouter | v1.2.0 | go.mod |
| Go | github.com/lib/pq | v1.3.0 | go.mod |
| Go | github.com/mattn/goveralls | v0.0.6 | go.mod |
| Go | github.com/mitchellh/copystructure | v1.0.0 | go.mod |
| Go | github.com/opentracing/opentracing-go | v1.2.0 | go.mod |
| Go | github.com/ory/analytics-go/v4 | v4.0.1 | go.mod |
| Go | github.com/ory/cli | v0.0.10 | go.mod |
| Go | github.com/ory/fosite | v0.36.1 | go.mod |
| Go | github.com/ory/go-acc | v0.2.6 | go.mod |
| Go | github.com/ory/go-convenience | v0.1.0 | go.mod |
| Go | github.com/ory/gojsonschema | v1.2.0 | go.mod |
| Go | github.com/ory/graceful | v0.1.1 | go.mod |
| Go | github.com/ory/herodot | v0.8.4 | go.mod |
| Go | github.com/ory/jsonschema/v3 | v3.0.1 | go.mod |
| Go | github.com/ory/ladon | v1.1.0 | go.mod |
| Go | github.com/ory/viper | v1.7.5 | go.mod |
| Go | github.com/ory/x | v0.0.165 | go.mod |
| Go | github.com/pborman/uuid | v1.2.0 | go.mod |
| Go | github.com/phayes/freeport | v0.0.0-20180830031419-95f893ade6f2 | go.mod |
| Go | github.com/pkg/errors | v0.9.1 | go.mod |
| Go | github.com/prometheus/client_golang | v1.5.0 | go.mod |
| Go | github.com/rs/cors | v1.6.0 | go.mod |
| Go | github.com/sirupsen/logrus | v1.8.0 | go.mod |
| Go | github.com/spf13/cobra | v1.1.1 | go.mod |
| Go | github.com/sqs/goreturns | v0.0.0-20181028201513-538ac6014518 | go.mod |
| Go | github.com/square/go-jose | v2.3.1+incompatible | go.mod |
| Go | github.com/stretchr/testify | v1.7.0 | go.mod |
| Go | github.com/tidwall/gjson | v1.9.3 | go.mod |
| Go | github.com/tidwall/sjson | v1.1.1 | go.mod |
| Go | github.com/tomasen/realip | v0.0.0-20180522021738-f0c99a92ddce | go.mod |
| Go | github.com/urfave/negroni | v1.0.0 | go.mod |
| Go | gocloud.dev | v0.20.0 | go.mod |
| Go | golang.org/x/crypto | v0.0.0-20210921155107-089bfa567519 | go.mod |
| Go | golang.org/x/oauth2 | v0.0.0-20210819190943-2bc19b11175f | go.mod |
| Go | golang.org/x/tools | v0.1.7 | go.mod |
| Go | google.golang.org/api | v0.30.0 | go.mod |
| Go | gopkg.in/square/go-jose.v2 | v2.5.1 | go.mod |
| npm | @openapitools/openapi-generator-cli | ^2.4.26 | package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 1314797,
"has_wiki": false,
"homepage": "https://www.ory.sh/?utm_source=github&utm_medium=banner&utm_campaign=hydra",
"languages": {
"Go": 664137,
"Shell": 19154,
"Makefile": 2778,
"Mustache": 90778,
"Dockerfile": 317
},
"pushed_at": "2022-09-02T08:48:33Z",
"created_at": "2022-06-10T08:36:46Z",
"owner_type": "User",
"updated_at": "2022-06-10T00:41:39Z",
"description": "A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "master",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go",
"Mustache"
]
},
"owner": {
"blog": "https://www.ory.com",
"name": "Henning Perl",
"type": "User",
"login": "hperl",
"company": "@ory-corp ",
"location": "Germany",
"followers": 38,
"avatar_url": "https://avatars.githubusercontent.com/u/34397?v=4",
"created_at": "2008-11-14T08:36:03Z",
"is_verified": null,
"public_repos": 53,
"account_age_days": 6462
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v0.38.25-beta.1",
"kind": "prerelease",
"published_at": "2022-04-13T12:40:17Z"
},
{
"tag": "v0.38.24-beta.1",
"kind": "prerelease",
"published_at": "2022-04-06T09:58:24Z"
},
{
"tag": "v0.38.23-beta.1",
"kind": "prerelease",
"published_at": "2022-02-24T11:32:25Z"
},
{
"tag": "v0.38.22-beta.1",
"kind": "prerelease",
"published_at": "2022-02-23T15:51:00Z"
},
{
"tag": "v0.38.20-beta.1",
"kind": "prerelease",
"published_at": "2022-02-14T12:19:14Z"
},
{
"tag": "v0.38.19-beta.1",
"kind": "prerelease",
"published_at": "2022-02-04T18:33:04Z"
},
{
"tag": "v0.38.18-beta.1",
"kind": "prerelease",
"published_at": "2022-02-03T08:55:56Z"
},
{
"tag": "v0.38.17-beta.1",
"kind": "prerelease",
"published_at": "2022-02-03T08:58:44Z"
},
{
"tag": "v0.38.15-beta.1",
"kind": "prerelease",
"published_at": "2021-08-28T18:27:53Z"
},
{
"tag": "v0.38.14-beta.1",
"kind": "prerelease",
"published_at": "2021-07-14T16:07:44Z"
},
{
"tag": "v0.38.12-beta.1",
"kind": "prerelease",
"published_at": "2021-06-22T20:46:24Z"
},
{
"tag": "v0.38.11-beta.1",
"kind": "prerelease",
"published_at": "2021-05-13T11:47:48Z"
},
{
"tag": "v0.38.10-beta.2",
"kind": "prerelease",
"published_at": "2021-05-05T05:07:36Z"
},
{
"tag": "v0.38.9-beta.1",
"kind": "prerelease",
"published_at": "2021-03-17T11:41:03Z"
},
{
"tag": "v0.38.9-beta.1.pre.3",
"kind": "prerelease",
"published_at": "2021-03-16T12:06:14Z"
},
{
"tag": "v0.38.9-beta.1.pre.2",
"kind": "prerelease",
"published_at": "2021-03-15T13:25:26Z"
},
{
"tag": "v0.38.9-beta.1.pre.1",
"kind": "prerelease",
"published_at": "2021-03-15T12:03:45Z"
},
{
"tag": "v0.38.8-beta.1",
"kind": "prerelease",
"published_at": "2021-02-25T14:54:01Z"
},
{
"tag": "v0.38.7-beta.1",
"kind": "prerelease",
"published_at": "2021-02-22T14:56:07Z"
},
{
"tag": "v0.38.6-beta.1",
"kind": "prerelease",
"published_at": "2021-01-27T09:15:45Z"
},
{
"tag": "v0.38.5-beta.1",
"kind": "prerelease",
"published_at": "2020-12-10T09:43:50Z"
},
{
"tag": "v0.38.4-beta.1",
"kind": "prerelease",
"published_at": "2020-09-28T09:24:09Z"
},
{
"tag": "v0.38.3-beta.1",
"kind": "prerelease",
"published_at": "2020-07-29T09:00:53Z"
},
{
"tag": "v0.38.2-beta.1",
"kind": "prerelease",
"published_at": "2020-05-25T10:24:56Z"
},
{
"tag": "v0.38.1-beta.1",
"kind": "prerelease",
"published_at": "2020-05-08T10:49:41Z"
},
{
"tag": "v0.38.0-beta.2",
"kind": "prerelease",
"published_at": "2020-05-07T10:07:48Z"
},
{
"tag": "v0.37.1-beta.1",
"kind": "prerelease",
"published_at": "2020-04-03T15:15:29Z"
},
{
"tag": "v0.37.0-beta.1",
"kind": "prerelease",
"published_at": "2020-04-02T12:34:47Z"
},
{
"tag": "v0.36.0-beta.4",
"kind": "prerelease",
"published_at": "2020-02-14T10:42:45Z"
},
{
"tag": "v0.36.0-beta.3",
"kind": "prerelease",
"published_at": "2020-02-14T10:42:45Z"
},
{
"tag": "v0.36.0-beta.2",
"kind": "prerelease",
"published_at": "2020-02-14T10:42:45Z"
},
{
"tag": "v0.36.0-beta.1",
"kind": "prerelease",
"published_at": "2020-02-05T10:54:43Z"
},
{
"tag": "v0.35.5-beta.2",
"kind": "prerelease",
"published_at": "2020-01-31T16:45:23Z"
},
{
"tag": "v0.35.5-beta.1",
"kind": "prerelease",
"published_at": "2020-01-27T09:04:01Z"
},
{
"tag": "v0.35.4-beta.1",
"kind": "prerelease",
"published_at": "2020-01-26T15:34:40Z"
},
{
"tag": "v0.35.3-beta.1",
"kind": "prerelease",
"published_at": "2020-01-26T14:00:56Z"
},
{
"tag": "v0.35.1-beta.1",
"kind": "prerelease",
"published_at": "2020-01-14T15:32:43Z"
},
{
"tag": "v0.35.0-beta.1",
"kind": "prerelease",
"published_at": "2020-01-13T16:43:42Z"
},
{
"tag": "v0.35.0-alpha.1",
"kind": "prerelease",
"published_at": "2020-01-13T16:43:42Z"
},
{
"tag": "v0.34.0-beta.1",
"kind": "prerelease",
"published_at": "2019-12-26T15:20:59Z"
},
{
"tag": "v0.33.1-beta.1",
"kind": "prerelease",
"published_at": "2019-12-18T14:11:49Z"
},
{
"tag": "v0.33.0-beta.1",
"kind": "prerelease",
"published_at": "2019-12-16T09:44:13Z"
},
{
"tag": "v0.32.1-beta.1",
"kind": "prerelease",
"published_at": "2019-10-30T16:37:26Z"
},
{
"tag": "v0.32.0-beta.1",
"kind": "prerelease",
"published_at": "2019-10-20T10:56:47Z"
},
{
"tag": "v0.31.0-beta.1",
"kind": "prerelease",
"published_at": "2019-10-20T10:38:50Z"
},
{
"tag": "v0.19.0-beta.1",
"kind": "prerelease",
"published_at": "2019-09-23T15:27:47Z"
},
{
"tag": "v0.18.0-beta.1",
"kind": "prerelease",
"published_at": "2019-08-22T09:09:53Z"
},
{
"tag": "v0.17.4-beta.1",
"kind": "prerelease",
"published_at": "2019-08-09T09:10:13Z"
},
{
"tag": "v0.17.3-beta.1",
"kind": "prerelease",
"published_at": "2019-08-03T13:27:36Z"
},
{
"tag": "v0.17.2-beta.1",
"kind": "prerelease",
"published_at": "2019-08-02T11:14:27Z"
},
{
"tag": "v0.17.1-beta.1",
"kind": "prerelease",
"published_at": "2019-07-23T08:00:23Z"
},
{
"tag": "v0.17.0-beta.1",
"kind": "prerelease",
"published_at": "2019-07-18T14:59:28Z"
},
{
"tag": "v0.16.0-beta.5",
"kind": "prerelease",
"published_at": "2019-06-28T13:18:30Z"
},
{
"tag": "v0.16.0-beta.4",
"kind": "prerelease",
"published_at": "2019-05-28T10:24:51Z"
},
{
"tag": "v0.16.0-beta.3",
"kind": "prerelease",
"published_at": "2019-05-19T10:35:22Z"
},
{
"tag": "v0.15.2",
"kind": "patch",
"published_at": "2019-05-04T13:50:55Z"
},
{
"tag": "v0.15.1",
"kind": "patch",
"published_at": "2019-04-29T12:05:59Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2019-04-29T10:23:44Z"
},
{
"tag": "v0.14.2+oryOS.10",
"kind": "patch",
"published_at": "2018-12-13T15:39:19Z"
},
{
"tag": "v0.14.1+oryOS.10",
"kind": "patch",
"published_at": "2018-12-13T15:22:02Z"
},
{
"tag": "v0.14.0+oryOS.10",
"kind": "minor",
"published_at": "2018-12-13T12:01:59Z"
},
{
"tag": "v0.13.9+oryOS.9",
"kind": "patch",
"published_at": "2018-11-14T16:10:46Z"
},
{
"tag": "v0.13.8+oryOS.8",
"kind": "patch",
"published_at": "2018-11-14T16:09:39Z"
},
{
"tag": "v0.13.7+oryOS.7",
"kind": "patch",
"published_at": "2018-11-14T16:07:31Z"
},
{
"tag": "v0.13.6+oryOS.6",
"kind": "patch",
"published_at": "2018-11-14T16:06:52Z"
},
{
"tag": "v0.13.5+oryOS.5",
"kind": "patch",
"published_at": "2018-11-14T16:06:16Z"
},
{
"tag": "v0.13.4+oryOS.4",
"kind": "patch",
"published_at": "2018-11-14T16:05:32Z"
},
{
"tag": "v0.13.3+oryOS.3",
"kind": "patch",
"published_at": "2018-11-14T16:05:08Z"
},
{
"tag": "v0.13.2+oryOS.2",
"kind": "patch",
"published_at": "2018-11-14T16:03:25Z"
},
{
"tag": "v0.13.1+oryOS.1",
"kind": "patch",
"published_at": "2018-11-14T15:46:28Z"
},
{
"tag": "v0.11.12",
"kind": "patch",
"published_at": "2018-05-07T10:59:50Z"
},
{
"tag": "v0.0.29",
"kind": "patch",
"published_at": "2017-12-19T13:40:54Z"
},
{
"tag": "v0.0.28",
"kind": "patch",
"published_at": "2017-12-19T12:32:25Z"
},
{
"tag": "v0.0.27",
"kind": "patch",
"published_at": "2017-12-12T19:43:17Z"
},
{
"tag": "v0.0.26",
"kind": "patch",
"published_at": "2017-12-11T17:52:37Z"
},
{
"tag": "v0.0.25",
"kind": "patch",
"published_at": "2017-11-28T14:40:12Z"
},
{
"tag": "v0.0.24",
"kind": "patch",
"published_at": "2017-11-26T15:24:04Z"
},
{
"tag": "v0.0.23",
"kind": "patch",
"published_at": "2017-11-24T14:05:40Z"
},
{
"tag": "v0.0.22",
"kind": "patch",
"published_at": "2017-11-20T17:56:53Z"
},
{
"tag": "v0.0.21",
"kind": "patch",
"published_at": "2017-11-19T16:14:13Z"
},
{
"tag": "v0.0.20",
"kind": "patch",
"published_at": "2017-11-18T17:47:20Z"
},
{
"tag": "v0.0.19",
"kind": "patch",
"published_at": "2017-11-13T18:08:42Z"
},
{
"tag": "v0.0.18",
"kind": "patch",
"published_at": "2017-11-13T16:15:34Z"
},
{
"tag": "v0.0.17",
"kind": "patch",
"published_at": "2017-11-12T22:29:43Z"
},
{
"tag": "v0.0.16",
"kind": "patch",
"published_at": "2017-11-12T17:39:53Z"
},
{
"tag": "v0.0.15",
"kind": "patch",
"published_at": "2017-11-09T21:13:23Z"
},
{
"tag": "v0.0.14",
"kind": "patch",
"published_at": "2017-11-07T21:00:24Z"
},
{
"tag": "v0.0.13",
"kind": "patch",
"published_at": "2017-11-07T16:53:34Z"
},
{
"tag": "v0.0.12",
"kind": "patch",
"published_at": "2017-11-07T15:45:28Z"
},
{
"tag": "v0.0.11",
"kind": "patch",
"published_at": "2017-11-06T22:44:22Z"
},
{
"tag": "v0.0.10",
"kind": "patch",
"published_at": "2017-11-06T22:22:51Z"
},
{
"tag": "v0.0.9",
"kind": "patch",
"published_at": "2017-11-06T20:53:24Z"
},
{
"tag": "v0.0.8",
"kind": "patch",
"published_at": "2017-11-06T20:21:01Z"
},
{
"tag": "v0.0.7",
"kind": "patch",
"published_at": "2017-11-06T17:48:52Z"
},
{
"tag": "v0.0.6",
"kind": "patch",
"published_at": "2017-11-03T14:11:40Z"
},
{
"tag": "v0.0.5",
"kind": "patch",
"published_at": "2017-11-01T13:14:26Z"
},
{
"tag": "v0.0.4",
"kind": "patch",
"published_at": "2017-10-21T12:32:43Z"
},
{
"tag": "v0.0.3",
"kind": "patch",
"published_at": "2017-10-18T14:38:23Z"
},
{
"tag": "v0.0.2",
"kind": "patch",
"published_at": "2017-10-12T12:13:40Z"
},
{
"tag": "v0.0.1",
"kind": "patch",
"published_at": "2017-10-10T14:01:40Z"
}
],
"recent_commits": [
{
"oid": "f714cd3a053d0cb9dff737d4c267ac6891963620",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(openapi): regenerate swagger spec and internal client",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-06-03T09:12:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8908ddb63c9607304501828123bfeb01a1b98e6e",
"body": null,
"is_bot": false,
"headline": "chore: apply prettier formatting (#972)",
"author_name": "Patrik",
"author_login": "zepatrik",
"committed_at": "2022-06-03T09:10:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a06464bfde75bf12c3aafd4f862b427188be1c0d",
"body": "[skip ci] - updated repository templates to https://github.com/ory/meta/commit/2f1d3a4891c8f5b09ee8812abe78e05729741430",
"is_bot": false,
"headline": "chore: update repository templates",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-05-26T16:25:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e49c0c57415246930ea36153e9287a049fac52ad",
"body": "[skip ci] - updated repository templates to https://github.com/ory/meta/commit/bff2671cdff9a70600f90f31e5db7b4f9733204c",
"is_bot": false,
"headline": "chore: update repository templates",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-05-26T15:13:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ddf20eaff9db0f83b51e49b73c733816e530fc4c",
"body": "[skip ci] - updated repository templates to https://github.com/ory/meta/commit/16893bf8acc2edabdc122ff25fe5a7a69aba7981",
"is_bot": false,
"headline": "chore: update repository templates",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-05-26T15:04:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "624305962ba0106032fd2b5debd75ca25a45eada",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(docs): regenerate and update changelog",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-05-23T20:35:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb938d4724a560039cda764eee80fbc17cfec2a8",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(openapi): regenerate swagger spec and internal client",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-05-23T20:31:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4836f5341b63978db49f8c6fe8d6ba2ca2bf2bc",
"body": "This test will fail since everytime Authenticate() succeeds the token\r\nis cached, even if it was already cached. This behavior makes it\r\npossible to keep a token in cache if it is authenticated in a period\r\nless than the TTL.\r\n\r\nSigned-off-by: flusflas <aflusflas@gmail.com>",
"is_bot": false,
"headline": "fix: cache behavior with TTL (#968)",
"author_name": "flusflas",
"author_login": "flusflas",
"committed_at": "2022-05-23T20:30:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f370a188c608d1acf227f638fe5a54ae6ab2e4b",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(openapi): regenerate swagger spec and internal client",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-05-23T20:14:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "988c3b7cdcd3a7374c300d2cd47cb50ae0acb241",
"body": null,
"is_bot": false,
"headline": "chore: format (#971)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2022-05-23T20:13:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fa3cbcd0dcca2ce25bdc4ec3e71cd2912a342b9",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(openapi): regenerate swagger spec and internal client",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-05-23T13:48:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17c42144fe03933a3441f88320a6aefd43c22eee",
"body": null,
"is_bot": false,
"headline": "fix: update format (#970)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2022-05-23T13:47:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "353635e096b1d439cd5c7020ee0becccdc311326",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(docs): regenerate and update changelog",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-04-24T20:47:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "022f7c525fed91ade4c637934b9ca808699c4add",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(openapi): regenerate swagger spec and internal client",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-04-24T20:42:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69595243bde399d91b03cf0176debc5053a6d65b",
"body": null,
"is_bot": false,
"headline": "feat: JWT should only respect JWT-formats (#958)",
"author_name": "Julian Nodorp",
"author_login": "jnodorp-jaconi",
"committed_at": "2022-04-24T20:41:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84a0fe0b6cd8e550e47b4eca93a00ccc7e90778b",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(docs): generate and bump docs",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-04-13T14:31:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83097aa9ae6cf19096e3e3ad652849073ce48ec1",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(docs): regenerate and update changelog",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-04-13T12:46:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9731100da365a9e4aeee7832e35324783a212463",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(openapi): regenerate swagger spec and internal client",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-04-13T12:42:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87df0d91cf9ac9cbb471a4634b93f7bc2a723901",
"body": null,
"is_bot": false,
"headline": "autogen: pin v0.38.25-beta.1 release commit",
"author_name": "zepatrik",
"author_login": "zepatrik",
"committed_at": "2022-04-13T12:40:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06f9f68c5c6f279a7400370fede64a61ea712d8c",
"body": null,
"is_bot": false,
"headline": "chore(deps): bump alpine",
"author_name": "zepatrik",
"author_login": "zepatrik",
"committed_at": "2022-04-13T12:34:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5497f3c0076e4a3b7879f90edf1a7e000ca9306",
"body": null,
"is_bot": false,
"headline": "docs: fix version schema",
"author_name": "zepatrik",
"author_login": "zepatrik",
"committed_at": "2022-04-13T12:33:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94db619191c894342a81d7a97e3eab61c8153cef",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(docs): regenerate and update changelog",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-04-11T20:11:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33ae248762fa1c4b602b1c9559851b9fb05743fe",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(openapi): regenerate swagger spec and internal client",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-04-11T20:07:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a525416460069a52687a67f3d6c12a51060f7c6",
"body": "Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6.\r\n- [Release notes](https://github.com/substack/minimist/releases)\r\n- [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: minimist\r\n dependency-type: indirect\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\n\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump minimist from 1.2.5 to 1.2.6 (#948)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2022-04-11T20:05:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0c8d646f6fc94bf92e4f91ce5cc860033110e80",
"body": "Closes #930",
"is_bot": false,
"headline": "fix: overzealous url validation (#953)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2022-04-11T20:05:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66c25602aff1f9266fc10ce73b292f68ddab2b6d",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(openapi): regenerate swagger spec and internal client",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-04-11T15:12:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d04cfc8f0414168eaa13d154d38e3209aa38cb6",
"body": "Close #950",
"is_bot": false,
"headline": "fix: case insensitive headers (#951)",
"author_name": "Andrew Minkin",
"author_login": "gen1us2k",
"committed_at": "2022-04-11T15:11:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "034a2ecffa26784a3da91a1fae232564f36c14d3",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(openapi): regenerate swagger spec and internal client",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-04-09T22:52:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46bfd707749ff1280c04267c3a2d1cd82eab14ff",
"body": null,
"is_bot": false,
"headline": "fix: log proxy errors with logrus (#937)",
"author_name": "Julian Nodorp",
"author_login": "jnodorp-jaconi",
"committed_at": "2022-04-09T22:51:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f55cfef7e9f8708142e31273ea48f895a3187b83",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(docs): generate and bump docs",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-04-06T10:31:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d351dbfa10ca13ae57baa14ad7cf05edd0d8f006",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(docs): regenerate and update changelog",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-04-06T10:05:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aed568ef16090e5f5fd9a0e8b1d247f8da18d424",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(openapi): regenerate swagger spec and internal client",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-04-06T10:00:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb2c24688f76201c46ca187e6ec7501ab1bd3389",
"body": null,
"is_bot": false,
"headline": "autogen: pin v0.38.24-beta.1 release commit",
"author_name": "zepatrik",
"author_login": "zepatrik",
"committed_at": "2022-04-06T09:58:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2610d2cd002c83af141e267ce729589922febec4",
"body": "[skip ci]",
"is_bot": false,
"headline": "autogen(openapi): regenerate swagger spec and internal client",
"author_name": "ory-bot",
"author_login": "ory-bot",
"committed_at": "2022-03-25T10:26:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21ff3405e45655dd37ae3cee9fe7d9e04da5d9d3",
"body": "Closes #928\r\n\r\nSigned-off-by: sawadashota <shota@sslife.tech>",
"is_bot": false,
"headline": "feat: trace for upstream request (#931)",
"author_name": "sawadashota",
"author_login": "sawadashota",
"committed_at": "2022-03-25T10:25:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4357b100c6fdcabc303664fe9bf5313e2c5368fd",
"body": "[skip ci] - updated repository templates to https://github.com/ory/meta/commit/a895944a63140a981b3cb46e9b993e0fa7d14922",
"is_bot": false,
"headline": "chore: update repository templates",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-03-21T09:11:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9440a3d136f36c3e4674f7774ba7e10a4fd065e",
"body": null,
"is_bot": false,
"headline": "chore(deps): bump alpine version (#941)",
"author_name": "Jakub Błaszczyk",
"author_login": "Demonsthere",
"committed_at": "2022-03-17T11:31:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69ad28f87fd4f49e1ca5ed0d4bd1099b61a795a5",
"body": null,
"is_bot": false,
"headline": "autogen: pin v0.38.23-beta.1 release commit",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-24T11:32:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e78855fb0b00e584a5e0c8033bfb13cffec0e87a",
"body": "Signed-off-by: sawadashota <shota@sslife.tech>",
"is_bot": false,
"headline": "feat: ddd datadog and elastic-apm tracing schema (#927)",
"author_name": "sawadashota",
"author_login": "sawadashota",
"committed_at": "2022-02-24T10:40:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0343fde5f4c1bda859ac8333a51076a8db4f03f1",
"body": null,
"is_bot": false,
"headline": "chore: use live mailchimp list ids (#932)",
"author_name": "Anirudh Oppiliappan",
"author_login": "icyphox",
"committed_at": "2022-02-24T10:28:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0dcb7c13e1f47b1b86d23e65bbe1df1b98d97578",
"body": null,
"is_bot": false,
"headline": "autogen: pin v0.38.22-beta.1 release commit",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-23T15:51:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6b4fe7b04f61ebd0c89a7be20b0f2c7b90e7117",
"body": null,
"is_bot": false,
"headline": "chore: add dist to gitignore",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-23T15:49:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1caf42a6d8024f25cc3ae71e883ed6cd64964a89",
"body": null,
"is_bot": false,
"headline": "chore: remove accidentally commited dist directory",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-23T15:49:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26e764c5362f31af76199a4747b09015b4f421a9",
"body": null,
"is_bot": false,
"headline": "autogen: pin v0.38.21-beta.1 release commit",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-23T15:46:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f275d5c948a4139aa6063b014df466b048f7538f",
"body": null,
"is_bot": false,
"headline": "autogen: pin v0.38.21-beta.1.pre.0 release commit",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-23T13:26:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f763cedede602144b3e136ca8d58f9c1f28ccfa1",
"body": "Fixes branch protection error.",
"is_bot": false,
"headline": "fix: pass token to render-version-schema (#929)",
"author_name": "Anirudh Oppiliappan",
"author_login": "icyphox",
"committed_at": "2022-02-21T14:46:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f708437a5fdd05cce1af28d3ca97a7c770a9d5e0",
"body": null,
"is_bot": false,
"headline": "chore: remove CCI",
"author_name": "Anirudh Oppiliappan",
"author_login": "icyphox",
"committed_at": "2022-02-16T08:39:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36c042dc5e7fc7c5c72a0115b41181264224917c",
"body": null,
"is_bot": false,
"headline": "ci: init GitHub Actions CI for Ory Oathkeeper",
"author_name": "Anirudh Oppiliappan",
"author_login": "icyphox",
"committed_at": "2022-02-16T08:39:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0869c1397cceeaa921fe7a61e0c37212dbac6b9e",
"body": null,
"is_bot": false,
"headline": "autogen: add v0.38.20-beta.1 to version.schema.json",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-14T12:58:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20b3393dc51bc6972138ca527b0b66181346afc6",
"body": null,
"is_bot": false,
"headline": "autogen: update release artifacts",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-14T12:53:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "410d69edfca4cc3a83c1d819d648709ba438e74a",
"body": null,
"is_bot": false,
"headline": "autogen: pin v0.38.20-beta.1 release commit",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-14T12:19:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a56154161429f9080ed6204e61aaf3a1ab731a1",
"body": "…#922)\n\nRight now every request via Oathkeeper that uses client credentials\r\nauthentication requests a new access token. This can introduce a lot\r\nof latency in the critical path of an application in case of a slow\r\ntoken endpoint.\r\n\r\nThis change introduces a cache similar to the one that is used in the\r\nintrospection authentication.\r\n\r\nCloses #870\r\n\r\nCo-authored-by: Marlin Cremers <marlinc@marlinc.nl>",
"is_bot": false,
"headline": "feat: introduce token caching for client credentials authentication (…",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2022-02-14T12:17:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3b5b2814284e665caa97d0d986aa54b29af80ff",
"body": null,
"is_bot": false,
"headline": "autogen(docs): regenerate and update changelog",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-14T10:27:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfde9dfc6ef71762ab25289a0afbe6793899f312",
"body": "Closes https://github.com/ory/oathkeeper/discussions/899\r\n\r\nSee #521\r\nSee #441\r\nSee #487\r\nSee #263",
"is_bot": false,
"headline": "feat: Traefik decision api support (#904)",
"author_name": "Dimitrij Drus",
"author_login": "dadrus",
"committed_at": "2022-02-14T10:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09be55feddffc8ed483258ce3e250fc57528054f",
"body": null,
"is_bot": false,
"headline": "fix: use all pre-hooks",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-14T10:17:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d53ef0123830060cec73d425fc9b3f7e93ada66d",
"body": "Closes #920",
"is_bot": false,
"headline": "fix: add pre-steps with packr2 (#921)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2022-02-14T10:15:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd1b03a93707ec1114c13fa966d65727390fbfd2",
"body": null,
"is_bot": false,
"headline": "autogen: update release artifacts",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-11T11:37:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33b0c63e7962a66ff62a4cc58be5f577a81c3851",
"body": null,
"is_bot": false,
"headline": "autogen: pin v0.38.20-beta.1.pre.0 release commit",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-11T09:46:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb0156528b5f203846a7d664fb956fbd967851b2",
"body": null,
"is_bot": false,
"headline": "autogen(docs): regenerate and update changelog",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-11T09:45:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8dcda26cca0489248739cbcb4133b959d4991fe",
"body": null,
"is_bot": false,
"headline": "fix: bump goreleaser orb (#919)",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2022-02-11T09:39:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8f82c47835c23548f4121b11c4bba87a099bc41",
"body": "[skip ci] - updated repository templates to https://github.com/ory/meta/commit/0a4a7b9cf005207206780327a143a141ff55d7bc",
"is_bot": false,
"headline": "chore: update repository templates",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-11T09:13:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71e69efb1238552620ebe0d1786ebf0c9c1e0e0f",
"body": null,
"is_bot": false,
"headline": "autogen(docs): regenerate and update changelog",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-10T19:19:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7fd55030b9408e863f497deeb3e8f1bf66a9855",
"body": null,
"is_bot": false,
"headline": "feat: add post-release step",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-10T19:12:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "729fadc524560b9c3f7463b1ed1c78b550fda23a",
"body": null,
"is_bot": false,
"headline": "ci: remove docs/build from cci",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-09T20:39:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2cd6282682494a153436c8429ccfdd3279f28eef",
"body": null,
"is_bot": false,
"headline": "chore: bump sprig version (#917)",
"author_name": "Michael Francis",
"author_login": "edude03",
"committed_at": "2022-02-09T20:31:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d3e1bf11d3bf607c2a642dace5bf2208d43bcf3",
"body": "[skip ci] - updated repository templates to https://github.com/ory/meta/commit/77160761c23c45766b340b485c9078b628ae70b9",
"is_bot": false,
"headline": "chore: update repository templates",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-09T20:03:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31fe9b73886c8caa0eba2ddc62da62c2694f6764",
"body": null,
"is_bot": false,
"headline": "autogen(docs): regenerate and update changelog",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-09T12:22:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "165224fdf6636d55b9fb71c81da9b13426b201f6",
"body": null,
"is_bot": false,
"headline": "docs: recover sidebar",
"author_name": "hackerman",
"author_login": "aeneasr",
"committed_at": "2022-02-09T12:17:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84c15a6257685fd161c50b79e32323493950b4bf",
"body": null,
"is_bot": false,
"headline": "autogen(openapi): Regenerate openapi spec and internal client",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-08T15:04:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "962f57eeea8310e5b970da420819e0e268d8da4d",
"body": null,
"is_bot": false,
"headline": "ci: update cli location and fix generation script",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-08T15:04:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fea6974d7541eb869d177caa5abe0c8c070cb00",
"body": null,
"is_bot": false,
"headline": "autogen(openapi): Regenerate openapi spec and internal client",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-08T15:04:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c8b49ee0060a2c68678cdb40aeb3471a0d22b4d",
"body": null,
"is_bot": false,
"headline": "ci: add next cli docs generator",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-08T15:04:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0c69275fb6e768cfd07e4d467155f4cf95ebbb8",
"body": null,
"is_bot": false,
"headline": "refactor: move docs to ory/docs",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-08T15:04:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "190d1a7d1319f216ca3c9e9289d5282733ecc88c",
"body": null,
"is_bot": false,
"headline": "feat: migrate to openapi 3.0 generation",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-08T15:04:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83d67286421981f881211728e0df2509e08e7944",
"body": null,
"is_bot": false,
"headline": "autogen: add v0.38.19-beta.1 to version.schema.json",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-04T19:13:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06bc33ffb5314aa7464f934a712a393af99f1116",
"body": null,
"is_bot": false,
"headline": "autogen: update release artifacts",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-04T19:08:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85790000442272961a9ff860e4d3a1aa3c1e3539",
"body": null,
"is_bot": false,
"headline": "autogen(docs): generate and format documentation",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-04T18:44:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dedb92cd98311bcf94b39c846b3d769aa63476f2",
"body": null,
"is_bot": false,
"headline": "autogen: pin v0.38.19-beta.1 release commit",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-04T18:33:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ee5b4415657c0873a3848d6e654607a2835bffe",
"body": null,
"is_bot": false,
"headline": "autogen(docs): generate and format documentation",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-04T18:21:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6c6cf324c30502571d856487496be02d3073243",
"body": null,
"is_bot": false,
"headline": "autogen(docs): generate and format documentation",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-04T18:21:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69c64e79eb7eb5ad415503c8f71a424f8da90f10",
"body": "This patch adds new configuration `force_method` to the bearer token and cookie session authenticators. It allows overriding the HTTP method for upstream calls.",
"is_bot": false,
"headline": "feat: allow overriding HTTP method for upstream calls",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-04T18:17:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc655dd11cc2f69f4e2d466e8b0ca8f85cc5954e",
"body": null,
"is_bot": false,
"headline": "autogen(openapi): Regenerate swagger spec and internal client",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-04T18:15:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db346d5e3cae966f609f6bae38958c5d00970abe",
"body": null,
"is_bot": false,
"headline": "docs: fix \"decisions\" typo in Introduction (#907)",
"author_name": "Augustin Prolongeau",
"author_login": "AugPro",
"committed_at": "2022-02-04T18:10:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57c38c0d4e75658373daaf3f6a80e22efd4dc3d5",
"body": null,
"is_bot": false,
"headline": "fix: update cve scanners (#905)",
"author_name": "Jakub Błaszczyk",
"author_login": "Demonsthere",
"committed_at": "2022-02-04T18:09:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ff93eb1e21b1c20730c59fa283700a961c14872",
"body": null,
"is_bot": false,
"headline": "autogen(docs): generate and format documentation",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T09:15:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a8770768574522cfa47e38f02890c3a3f562076",
"body": null,
"is_bot": false,
"headline": "autogen: add v0.38.17-beta.1 to version.schema.json",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T09:04:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c03d4f0b8e1868fe6b1a30396f8411093d9c797",
"body": null,
"is_bot": false,
"headline": "fix: bump Ory CLI",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T09:03:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "646301947b8f5d9821827d0fd0313f4ef9fe6da4",
"body": null,
"is_bot": false,
"headline": "autogen: update release artifacts",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T09:01:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66673ef760a7e812556721fd7397c69966414938",
"body": null,
"is_bot": false,
"headline": "ci: bump orbs",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T08:58:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bf4a98e2b6e81f12b1cfe011cf9f81e112cfb7e",
"body": null,
"is_bot": false,
"headline": "autogen: pin v0.38.18-beta.1 release commit",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T08:55:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6afe429f6a214c708fb370717bf51ae89922c09",
"body": null,
"is_bot": false,
"headline": "autogen(docs): regenerate and update changelog",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T08:55:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "792477fec81113f0ce4e07a38da80edce8a0cd2f",
"body": null,
"is_bot": false,
"headline": "test: reintroduce -s -o",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T08:48:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b21d8115c15edd5c92e914eb6ab332eb644e66a",
"body": null,
"is_bot": false,
"headline": "test: fix typo",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T08:44:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d86cd35353ffdc6e5a21e94d11f06c63979d5a6",
"body": null,
"is_bot": false,
"headline": "test: verbose curl",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T08:41:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "871b3c65344d5e9bcdb74fde264329a8e0bf9d7e",
"body": null,
"is_bot": false,
"headline": "test: echo output in run.sh",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T08:38:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f16db102eae5fc8ebf94af4fc9bca6387d0d41fa",
"body": null,
"is_bot": false,
"headline": "autogen: pin v0.38.17-beta.1 release commit",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T08:28:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df8a19bd9adad664beddb017073c77a9e82b37af",
"body": null,
"is_bot": false,
"headline": "fix: add ory cli",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-03T08:27:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da516f5ec81ca4acd5499b117e23073aa442dab5",
"body": "[skip ci] - updated repository templates to https://github.com/ory/meta/commit/a4c405f4aa9e99bd8e61437f4330ac1a6c11c092",
"is_bot": false,
"headline": "chore: update repository templates",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-02-02T10:53:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83cb5c041a5bd233bb4db43ace72443bcbe06398",
"body": null,
"is_bot": false,
"headline": "autogen(docs): regenerate and update changelog",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-01-31T17:16:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58b1d43dd99ebceea22980d5debefdbcc0a4f3c7",
"body": "Closes #900",
"is_bot": false,
"headline": "docs: use correct casing",
"author_name": "aeneasr",
"author_login": "aeneasr",
"committed_at": "2022-01-31T17:11:08Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 0,
"latest_release_at": "2022-04-13T12:40:17Z",
"latest_release_tag": "v0.38.25-beta.1",
"releases_from_tags": true,
"days_since_last_push": 1422,
"active_weeks_last_year": 0,
"days_since_latest_release": 1564,
"mean_days_between_releases": 30.3
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/ory/oathkeeper",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": false,
"registry_url": "https://pkg.go.dev/github.com/ory/oathkeeper",
"is_deprecated": false,
"latest_version": "v0.40.9",
"repository_url": "https://github.com/ory/oathkeeper",
"versions_count": 123,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2025-01-30T10:09:47Z",
"latest_version_yanked": null,
"days_since_latest_publish": 541
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [
"spec/swagger.json"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 36659,
"source_files_sampled": 190,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod",
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"npm"
],
"dependencies": [
{
"name": "github.com/Azure/azure-pipeline-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.2"
},
{
"name": "github.com/Azure/azure-storage-blob-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.0"
},
{
"name": "github.com/Masterminds/sprig/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.2.2"
},
{
"name": "github.com/asaskevich/govalidator",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20200428143746-21a406dcc535"
},
{
"name": "github.com/auth0/go-jwt-middleware",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.1"
},
{
"name": "github.com/aws/aws-sdk-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.31.13"
},
{
"name": "github.com/blang/semver",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.5.1+incompatible"
},
{
"name": "github.com/bxcodec/faker",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.1+incompatible"
},
{
"name": "github.com/dgraph-io/ristretto",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.2"
},
{
"name": "github.com/dlclark/regexp2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
},
{
"name": "github.com/form3tech-oss/jwt-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.2.2+incompatible"
},
{
"name": "github.com/fsnotify/fsnotify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.9"
},
{
"name": "github.com/ghodss/yaml",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/go-openapi/errors",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.20.1"
},
{
"name": "github.com/go-openapi/runtime",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.19.20"
},
{
"name": "github.com/go-openapi/strfmt",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.19.5"
},
{
"name": "github.com/go-openapi/swag",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.19.9"
},
{
"name": "github.com/go-openapi/validate",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.19.10"
},
{
"name": "github.com/go-sql-driver/mysql",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/go-swagger/go-swagger",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.25.0"
},
{
"name": "github.com/gobuffalo/httptest",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.2"
},
{
"name": "github.com/gobuffalo/packr/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.8.0"
},
{
"name": "github.com/gobwas/glob",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.3"
},
{
"name": "github.com/golang-jwt/jwt/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.0.0"
},
{
"name": "github.com/golang/gddo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20190904175337-72a348e765d2"
},
{
"name": "github.com/golang/mock",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.4"
},
{
"name": "github.com/google/go-replayers/httpreplay",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.0"
},
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.2"
},
{
"name": "github.com/imdario/mergo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.11"
},
{
"name": "github.com/julienschmidt/httprouter",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
},
{
"name": "github.com/lib/pq",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.0"
},
{
"name": "github.com/mattn/goveralls",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.6"
},
{
"name": "github.com/mitchellh/copystructure",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/opentracing/opentracing-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
},
{
"name": "github.com/ory/analytics-go/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.0.1"
},
{
"name": "github.com/ory/cli",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.10"
},
{
"name": "github.com/ory/fosite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.36.1"
},
{
"name": "github.com/ory/go-acc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.6"
},
{
"name": "github.com/ory/go-convenience",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.0"
},
{
"name": "github.com/ory/gojsonschema",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
},
{
"name": "github.com/ory/graceful",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.1"
},
{
"name": "github.com/ory/herodot",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.4"
},
{
"name": "github.com/ory/jsonschema/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "github.com/ory/ladon",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/ory/viper",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.5"
},
{
"name": "github.com/ory/x",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.165"
},
{
"name": "github.com/pborman/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
},
{
"name": "github.com/phayes/freeport",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20180830031419-95f893ade6f2"
},
{
"name": "github.com/pkg/errors",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.1"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/rs/cors",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/sirupsen/logrus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.0"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/sqs/goreturns",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20181028201513-538ac6014518"
},
{
"name": "github.com/square/go-jose",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.3.1+incompatible"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.0"
},
{
"name": "github.com/tidwall/gjson",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.9.3"
},
{
"name": "github.com/tidwall/sjson",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/tomasen/realip",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20180522021738-f0c99a92ddce"
},
{
"name": "github.com/urfave/negroni",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "gocloud.dev",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.20.0"
},
{
"name": "golang.org/x/crypto",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20210921155107-089bfa567519"
},
{
"name": "golang.org/x/oauth2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20210819190943-2bc19b11175f"
},
{
"name": "golang.org/x/tools",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.7"
},
{
"name": "google.golang.org/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.30.0"
},
{
"name": "gopkg.in/square/go-jose.v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.1"
},
{
"name": "@openapitools/openapi-generator-cli",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.4.26"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "aeneasr",
"commits": 737,
"avatar_url": "https://avatars.githubusercontent.com/u/3372410?v=4"
},
{
"type": "User",
"login": "arekkas",
"commits": 51,
"avatar_url": "https://avatars.githubusercontent.com/u/45354970?v=4"
},
{
"type": "User",
"login": "zepatrik",
"commits": 20,
"avatar_url": "https://avatars.githubusercontent.com/u/5354445?v=4"
},
{
"type": "User",
"login": "ory-bot",
"commits": 18,
"avatar_url": "https://avatars.githubusercontent.com/u/60093411?v=4"
},
{
"type": "User",
"login": "vinckr",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/55394283?v=4"
},
{
"type": "User",
"login": "ecktom",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/2729447?v=4"
},
{
"type": "User",
"login": "pike1212",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/11857406?v=4"
},
{
"type": "User",
"login": "jnodorp-jaconi",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/80104740?v=4"
},
{
"type": "User",
"login": "icyphox",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/17672379?v=4"
},
{
"type": "User",
"login": "Demonsthere",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/13346689?v=4"
}
],
"contributors_sampled": 84,
"top_contributor_share": 0.76
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"closed_references.yml",
"codeql-analysis.yml",
"cve-scan.yaml",
"labels.yml",
"milestone.yml",
"stale.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 8 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool detected: CodeQL",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "137 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f714cd3a053d0cb9dff737d4c267ac6891963620",
"ran_at": "2026-07-25T22:41:47Z",
"aggregate_score": 3.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/hperl/oathkeeper",
"host": "github.com",
"name": "oathkeeper",
"owner": "hperl"
},
"metrics": {
"overall": {
"key": "overall",
"band": "critical",
"name": "Overall health",
"note": "Abandonment Policy applies a 85% multiplier to weighted overall health.",
"notes": [
{
"code": "abandonment_overall_adjustment",
"params": {
"cap": 0,
"pct": 85
}
}
],
"value": 28,
"inputs": {
"security": 36,
"vitality": 20,
"community": 12,
"governance": 33,
"engineering": 64,
"abandonment_cap": null,
"abandonment_state": "at_risk",
"abandonment_multiplier": 85,
"weighted_overall_before_abandonment": 33,
"overall_after_abandonment_multiplier": 28
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "critical",
"name": "Vitality",
"value": 20,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"commits_last_year": 0,
"human_commit_share": 0.99,
"days_since_last_push": 1422,
"active_weeks_last_year": 0
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1422 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "push_recency",
"params": {
"days": 1422
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "0/52 weeks with commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 0
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "0 commits in the last year",
"points": 0,
"status": "missed",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 0
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v0.38.25-beta.1",
"releases_from_tags": true,
"days_since_latest_release": 1564,
"mean_days_between_releases": 30.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1564 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 1564
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~30.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 30.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"cap": null,
"state": "at_risk",
"guards": [
"no_open_demand"
],
"signals": [
"release_stall",
"scorecard_unmaintained"
],
"red_flag": true,
"multiplier_pct": 85,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 0,
"unanswered_open_issues": 0,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 1513,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 1513 days; 2 unmet obligation(s): releases stalled, Scorecard reports it unmaintained",
"points": 85,
"status": "partial",
"details": [
{
"code": "abandonment_flagged",
"params": {
"days": 1513,
"count": 2,
"signals": "releases stalled, Scorecard reports it unmaintained"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 12,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 33,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 84,
"top_contributor_share": 0.76
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 76% of commits",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 76
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "84 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 84
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 8 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"followers": 38,
"owner_type": "User",
"is_verified": null,
"owner_login": "hperl",
"public_repos": 53,
"account_age_days": 6462
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "38 followers of hperl",
"points": 11.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 38,
"login": "hperl"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "53 public repos, account ~17 yr old",
"points": 24.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 53
}
},
{
"code": "account_age_years",
"params": {
"years": 17
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 64,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "7 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 7
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "https://www.ory.sh/?utm_source=github&utm_medium=banner&utm_campaign=hydra",
"has_readme": false,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.ory.sh/?utm_source=github&utm_medium=banner&utm_campaign=hydra",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 36,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 36,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 8 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected: CodeQL",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "137 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 14
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 65,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "99 of 99 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 99,
"sampled": 99
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.01
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "1 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 36659,
"source_files_sampled": 190,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/190 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 190,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [],
"has_mcp_signal": false,
"api_schema_files": [
"spec/swagger.json"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "spec/swagger.json",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "spec/swagger.json"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Community profile unavailable",
"go package 'github.com/ory/oathkeeper' points at a different repository (https://github.com/ory/oathkeeper); excluded from ecosystem scoring",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T22:42:03.270400Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/h/hperl/oathkeeper.svg",
"full_name": "hperl/oathkeeper",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.