Public record
Software health reportschema 0.26.0 · metrics 1.13.0 · 2026-07-22 19:19 UTC

ironashram / terraform-provider-synology

Terraform provider to manage DSM APIs on Synology NAS

GoMIT★ 0 stars⑂ 0 forkssince Apr 2025View on GitHub ↗

ironashram/terraform-provider-synology holds a health index of 54 out of 100, placing it in the Moderate band. It scores highest on Vitality (86/100) and lowest on Community & Adoption (24/100). It was last updated 6 days ago. A single contributor accounts for most of its recent work.

54
overall / 100
Moderate

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

54
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

Michele PalazziPersonal account
10 followers72 public repossince Sep 2014

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
Gogithub.com/synology-community/terraform-provider-synologypoints to another repo — not scoredv0.6.11-41105 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

86Excellent · 22% of overall
How it's scored
36/36Push recency — last push 6 days ago
18.7/36Commit cadence — 27/52 weeks with commits
18/18Commit volume — 113 commits in the last year
5/10OpenSSF Scorecard: Maintained — 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Inputs used
commits_last_year113
human_commit_share0.31
days_since_last_push6
active_weeks_last_year27
How it's scored
27/27Ships releases — 6 releases published
36/36Release recency — latest release 6 days ago
27/27Release cadence — a release every ~17.7 days
8/10OpenSSF Scorecard: Signed-Releases — 5 out of the last 5 releases have a total of 5 signed artifacts.
Inputs used
releases_count6
latest_release_tagv0.8.0
releases_from_tagsno
days_since_latest_release6
mean_days_between_releases17.7

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

24Critical · 18% of overall
How it's scored
0/60Stars — 0 stars
0/25Forks — 0 forks
0/15Watchers — 0 watchers
Inputs used
forks0
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (MIT)
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

26Critical · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
2.7/22.5Commit distribution — top contributor authored 88% of commits
6.8/13.5Contributor breadth — 5 contributors
6/10OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Inputs used
bus_factor1
contributors_sampled5
top_contributor_share0.882
How it's scored
0/46.8Issue resolution — no issues or no data
0/38.3PR acceptance — no decided pull requests or no data
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Inputs used
merged_prs0
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs0
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
7.5/25Owner reach — 10 followers of ironashram
25/25Track record — 72 public repos, account ~11 yr old
Inputs used
followers10
owner_typeUser
is_verified
owner_loginironashram
public_repos72
account_age_days4,331
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.

Engineering Quality

Are baseline engineering and documentation practices in place?

84Good · 20% of overall
How it's scored
24/24CI workflows — 5 workflow(s)
24/24Tests present
16/16Linter config — .golangci.yml
0/9.6Pre-commit hooks
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — no data
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configyes
has_precommit_configno
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.

Documentation

90Excellent
How it's scored
30/30README
25/25Documentation directory
15/15Documentation / homepage site — https://search.opentofu.org/provider/ironashram/synology/latest
10/10Repository description
0/10Topics
10/10Wiki
Inputs used
topics
has_wikiyes
homepagehttps://search.opentofu.org/provider/ironashram/synology/latest
has_readmeyes
has_docs_diryes
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

46At risk · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — no data
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
3.8/7.5Maintained — 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
5/5Packaging — packaging workflow detected
3.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 7
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
6/7.5Signed-Releases — 5 out of the last 5 releases have a total of 5 signed artifacts.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 17 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate4.6
Excluded from scoring (no data or not applicable): ci_tests. Remaining weights renormalized.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

82Good · 0% of overall
How it's scored
45/45Agent instructions — .github/copilot-instructions.md, .github/instructions/style.instructions.md, .github/instructions/testing.instructions.md
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 27 of 31 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.871
agent_instruction_files.github/copilot-instructions.md, .github/instructions/style.instructions.md, .github/instructions/testing.instructions.md
agent_instruction_max_bytes9,696
How it's scored
18/18One-command bootstrap — Makefile
22/22Automated tests
11/11Lint / format config — .golangci.yml
11/11Static type checking — Go (statically typed)
10/10Reproducible environment — Dockerfile, lockfile
2/10Demonstrated agent practice — 1 of the last 100 commits agent-authored or agent-credited
8/8Automated maintenance — 36 of the last 100 commits are automated dependency updates
7/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 7
Inputs used
has_nixno
has_testsyes
lockfilesgo.sum
has_dockerfileyes
typed_languageyes
bootstrap_filesMakefile
has_devcontainerno
has_linter_configyes
typecheck_configs
agent_commit_share0.01
toolchain_manifestsgo.mod
dependency_bot_commit_share0.36
How it's scored
45/45Type-checkable code — Go (statically typed)
54.6/55Manageable file sizes — 1/125 source files over 60KB
Inputs used
primary_languageGo
largest_source_bytes63,883
source_files_sampled125
oversized_source_files1
How it's scored
0/40API schema (OpenAPI/GraphQL/proto)
0/20MCP server
40/40Runnable examples — examples
Inputs used
example_dirsexamples
has_mcp_signalno
api_schema_files

Key facts

0GitHub stars
5contributors
113commits, last 12 months
6days since last push
6releases
1bus factor
0open issues
Gopackage ecosystems

Data collection warnings

  • go package 'github.com/synology-community/terraform-provider-synology' points at a different repository (https://github.com/synology-community/terraform-provider-synology); excluded from ecosystem scoring
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

More detail

OpenSSF Scorecard 4.6 / 10
4.6aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-22 19:19 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
n/aCI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
5Maintained6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
10Packagingpackaging workflow detected
7Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 7
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
8Signed-Releases5 out of the last 5 releases have a total of 5 signed artifacts.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities17 existing vulnerabilities detected
Direct dependencies 27
RegistryPackageVersion constraintManifest
Gogithub.com/99designs/keyringv1.2.2go.mod
Gogithub.com/compose-spec/compose-go/v2v2.13.0go.mod
Gogithub.com/distribution/referencev0.6.0go.mod
Gogithub.com/docker/compose/v2v2.40.3go.mod
Gogithub.com/docker/go-connectionsv0.7.0go.mod
Gogithub.com/docker/go-unitsv0.5.0go.mod
Gogithub.com/go-viper/mapstructure/v2v2.5.0go.mod
Gogithub.com/hashicorp/go-retryablehttpv0.7.8go.mod
Gogithub.com/hashicorp/terraform-plugin-frameworkv1.19.0go.mod
Gogithub.com/hashicorp/terraform-plugin-framework-timetypesv0.5.0go.mod
Gogithub.com/hashicorp/terraform-plugin-framework-validatorsv0.19.0go.mod
Gogithub.com/hashicorp/terraform-plugin-gov0.31.0go.mod
Gogithub.com/hashicorp/terraform-plugin-testingv1.15.0go.mod
Gogithub.com/kdomanski/iso9660v0.4.0go.mod
Gogithub.com/mattn/go-shellwordsv1.0.14go.mod
Gogithub.com/opencontainers/go-digestv1.0.0go.mod
Gogithub.com/subpop/go-iniv0.1.5go.mod
Gogithub.com/synology-community/go-synologyv0.1.12-0.20260407222905-83ae2f703b1cgo.mod
Gogithub.com/testcontainers/testcontainers-gov0.41.0go.mod
Gogithub.com/testcontainers/testcontainers-go/modules/composev0.41.0go.mod
Gogithub.com/tredoe/osutilv1.5.0go.mod
Gogopkg.in/yaml.v3v3.0.1go.mod
Gogotest.tools/v3v3.5.2go.mod
Gogithub.com/hashicorp/go-multierrorv1.1.1go.mod
Gogithub.com/hashicorp/go-versionv1.9.0go.mod
Gogithub.com/hashicorp/terraform-plugin-logv0.10.0go.mod
Gogolang.org/x/syncv0.22.0go.mod
All dependencies not collected

The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 1086,
      "has_wiki": true,
      "homepage": "https://search.opentofu.org/provider/ironashram/synology/latest",
      "languages": {
        "Go": 717601,
        "HCL": 1329,
        "Makefile": 625,
        "Go Template": 4947
      },
      "pushed_at": "2026-07-15T21:13:08Z",
      "created_at": "2025-04-23T18:46:03Z",
      "owner_type": "User",
      "updated_at": "2026-07-15T21:20:54Z",
      "description": "Terraform provider to manage DSM APIs on Synology NAS",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Michele Palazzi",
      "type": "User",
      "login": "ironashram",
      "company": null,
      "location": null,
      "followers": 10,
      "avatar_url": "https://avatars.githubusercontent.com/u/8753502?v=4",
      "created_at": "2014-09-12T19:18:20Z",
      "is_verified": null,
      "public_repos": 72,
      "account_age_days": 4331
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-07-15T21:19:45Z"
        },
        {
          "tag": "v0.8.0-ironashram",
          "kind": "prerelease",
          "published_at": "2026-07-15T19:07:00Z"
        },
        {
          "tag": "v0.7.3-ironashram",
          "kind": "prerelease",
          "published_at": "2026-07-14T23:43:15Z"
        },
        {
          "tag": "v0.7.2-ironashram",
          "kind": "prerelease",
          "published_at": "2026-07-14T23:13:40Z"
        },
        {
          "tag": "v0.7.1-ironashram",
          "kind": "prerelease",
          "published_at": "2026-07-14T23:09:19Z"
        },
        {
          "tag": "v0.7.0-ironashram",
          "kind": "prerelease",
          "published_at": "2026-04-18T13:51:43Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "dca8f4b5053b4d66da92377d69c312dd2964c3a7",
          "body": "Signed-off-by: Michele Palazzi <sysdadmin@m1k.cloud>",
          "is_bot": false,
          "headline": "docs: plain semver tags from 0.8.0 on",
          "author_name": "Michele Palazzi",
          "author_login": "ironashram",
          "committed_at": "2026-07-15T21:12:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b2dc9c3f5dbce2e845c03aaef96ad574dc59f3f",
          "body": "…config drift detection, bump deps\n\nSigned-off-by: Michele Palazzi <sysdadmin@m1k.cloud>",
          "is_bot": false,
          "headline": "feat: port core resources from florianehmke fork adapted to DSM 7.3, …",
          "author_name": "Michele Palazzi",
          "author_login": "ironashram",
          "committed_at": "2026-07-15T19:00:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ad5603c8246154fbaf4dc3e98bcd3a631aa075a",
          "body": "Signed-off-by: Michele Palazzi <sysdadmin@m1k.cloud>",
          "is_bot": false,
          "headline": "fix(container): persist planned state on no-op updates",
          "author_name": "Michele Palazzi",
          "author_login": "ironashram",
          "committed_at": "2026-07-14T23:36:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ea3009a35bc22d89926dbe600bd056be6ad1124",
          "body": "Signed-off-by: Michele Palazzi <sysdadmin@m1k.cloud>",
          "is_bot": false,
          "headline": "ci: install terraform for docs generation",
          "author_name": "Michele Palazzi",
          "author_login": "ironashram",
          "committed_at": "2026-07-14T23:13:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21f769f59ee63c76cdd891905e3b739c4cb9679e",
          "body": "Signed-off-by: Michele Palazzi <sysdadmin@m1k.cloud>",
          "is_bot": false,
          "headline": "chore: lint fixes, regenerate docs, run unit tests only in CI",
          "author_name": "Michele Palazzi",
          "author_login": "ironashram",
          "committed_at": "2026-07-14T23:08:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "041ef97e5d840a042bdda7d172a21aab6336ca9e",
          "body": "…ceptance tests behind TF_ACC\n\nSigned-off-by: Michele Palazzi <sysdadmin@m1k.cloud>",
          "is_bot": false,
          "headline": "fix(container): content-driven updates and import share_path; gate ac…",
          "author_name": "Michele Palazzi",
          "author_login": "ironashram",
          "committed_at": "2026-07-14T22:53:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b322a2e251f3922daebbb9f97e2a7a30fd1a808",
          "body": null,
          "is_bot": false,
          "headline": "chore(deps): pin ironashram/go-synology fork v0.1.13-ironashram",
          "author_name": "Michele Palazzi",
          "author_login": "ironashram",
          "committed_at": "2026-04-18T13:37:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0d51a1a7daf3df0549264dac60009bbd2f6de20",
          "body": "…4; better 'in use' error on delete",
          "is_bot": false,
          "headline": "fix(image): populate storage_id after create; prune stale state on 40…",
          "author_name": "Michele Palazzi",
          "author_login": "ironashram",
          "committed_at": "2026-04-18T13:15:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb861cab08a5e7929f7742cd0847186eb081f54d",
          "body": "…requires full payload)",
          "is_bot": false,
          "headline": "fix: route all mutable guest fields through GuestApply (Guest.set v1 …",
          "author_name": "Michele Palazzi",
          "author_login": "ironashram",
          "committed_at": "2026-04-18T00:04:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a45cb8a3ba4b5f326ceba42d25b9257636f7a59c",
          "body": "…disk blocks\n\nSigned-off-by: Michele Palazzi <sysdadmin@m1k.cloud>",
          "is_bot": false,
          "headline": "fix: treat unknown values as valid in ValidateConfig for network and …",
          "author_name": "Michele Palazzi",
          "author_login": "ironashram",
          "committed_at": "2026-04-08T22:40:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "478b93433dca7f21c76f897cbca94816d5936a37",
          "body": "…/go_modules-870ce49782\n\nbuild(deps): Bump the go_modules group across 1 directory with 2 updates",
          "is_bot": true,
          "headline": "Merge pull request #171 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-08T19:41:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6cbfaca61278da1b597903cc9cce87c13f5fe559",
          "body": "Bumps the go_modules group with 1 update in the / directory: [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go).\n\n\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.41.0 to 1.43.0\n- [Release notes](http\n[…]\nmodules\n- dependency-name: go.opentelemetry.io/otel/sdk\n  dependency-version: 1.43.0\n  dependency-type: indirect\n  dependency-group: go_modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump the go_modules group across 1 directory with 2 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-08T19:41:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "405286677b92c797e328eca560f677578a79872d",
          "body": null,
          "is_bot": false,
          "headline": "feat: Fix ISO functions",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2026-04-07T22:35:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb420db4c0aa9f0fc0c33c276326ba04c1d5f657",
          "body": "…/github.com/compose-spec/compose-go/v2-2.10.2\n\nbuild(deps): Bump github.com/compose-spec/compose-go/v2 from 2.10.1 to 2.10.2",
          "is_bot": true,
          "headline": "Merge pull request #169 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-06T02:17:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1738c8771a17ee3e0e84ff274953c280eec567e1",
          "body": "Bumps [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go) from 2.10.1 to 2.10.2.\n- [Release notes](https://github.com/compose-spec/compose-go/releases)\n- [Commits](https://github.com/compose-spec/compose-go/compare/v2.10.1...v2.10.2)\n\n---\nupdated-dependencies:\n- depen\n[…]\nhub.com/compose-spec/compose-go/v2\n  dependency-version: 2.10.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/compose-spec/compose-go/v2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-06T02:16:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bdf0678c06ddb1077addabfd2bc3122041bfbc31",
          "body": "Signed-off-by: synology-community <synology-community@appkins.io>",
          "is_bot": false,
          "headline": "fix: Make storage_id computed in guest_resource",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2026-04-04T12:31:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27327275babd9572c3588db1b9d5a0e2c8dd3780",
          "body": "Signed-off-by: synology-community <synology-community@appkins.io>",
          "is_bot": false,
          "headline": "buf: Add validation rule for min disk size in guest_resource",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2026-04-04T12:17:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5b634448e586ca43bbdda07c512428b766002ae6",
          "body": "- Replace static empty string default for storage_id with UseStateForUnknown plan modifier\n- Auto-resolve storage_name to storage_id by listing VMM storages when storage_id is not provided\n- Fall back to first available storage when storage_name is 'default' or unset\n- After upload, look up image by name if task info does not contain the image ID\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix(virtualization): resolve storage name to ID when creating images",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2026-04-04T10:36:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e8cbed32343af182ee59a4acde4fe43668b7fbd8",
          "body": "Signed-off-by: synology-community <synology-community@appkins.io>",
          "is_bot": false,
          "headline": "feat: Add used size to Image type",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2026-04-04T09:44:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5104e61e441378c1f680bca37cdebc4c074b2917",
          "body": "…/compose (#163)\n\nBumps [github.com/testcontainers/testcontainers-go/modules/compose](https://github.com/testcontainers/testcontainers-go) from 0.40.0 to 0.41.0.\n- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)\n- [Commits](https://github.com/testcontainers/testcontaine\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/testcontainers/testcontainers-go/modules…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-03T14:50:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "61c60e6805235eb57702a7ad8a08abc8b749aa19",
          "body": "Bumps [github.com/hashicorp/terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing) from 1.14.0 to 1.15.0.\n- [Release notes](https://github.com/hashicorp/terraform-plugin-testing/releases)\n- [Changelog](https://github.com/hashicorp/terraform-plugin-testing/blob/main/CHANGELO\n[…]\noff-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Nick Atkins <13772502+appkins@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/hashicorp/terraform-plugin-testing (#162)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-03T07:22:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "064d55a84e23ddbb260498192dd7c7a33939d12d",
          "body": "Bumps [github.com/hashicorp/terraform-plugin-framework](https://github.com/hashicorp/terraform-plugin-framework) from 1.18.0 to 1.19.0.\n- [Release notes](https://github.com/hashicorp/terraform-plugin-framework/releases)\n- [Changelog](https://github.com/hashicorp/terraform-plugin-framework/blob/main/\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/hashicorp/terraform-plugin-framework (#164)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-03T07:22:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9267351c9320df3a39786de82b9d9170dd6f7623",
          "body": "…/github.com/hashicorp/go-version-1.9.0\n\nbuild(deps): Bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0",
          "is_bot": true,
          "headline": "Merge pull request #168 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-31T02:10:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5638eb6d59dc16e6413dc5523be9bf55588c6616",
          "body": "Bumps [github.com/hashicorp/go-version](https://github.com/hashicorp/go-version) from 1.8.0 to 1.9.0.\n- [Release notes](https://github.com/hashicorp/go-version/releases)\n- [Changelog](https://github.com/hashicorp/go-version/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/hashicorp/go-version/\n[…]\nme: github.com/hashicorp/go-version\n  dependency-version: 1.9.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-31T02:09:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4ed505b3ca28f62d34f00e5acfeeac9505be8a80",
          "body": "…/go_modules-d5cf7b2f83\n\nbuild(deps): Bump github.com/moby/buildkit from 0.25.1 to 0.28.1 in the go_modules group across 1 directory",
          "is_bot": true,
          "headline": "Merge pull request #167 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-28T23:46:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f653726befc204270d7014b35157130008e20da9",
          "body": "Bumps the go_modules group with 1 update in the / directory: [github.com/moby/buildkit](https://github.com/moby/buildkit).\n\n\nUpdates `github.com/moby/buildkit` from 0.25.1 to 0.28.1\n- [Release notes](https://github.com/moby/buildkit/releases)\n- [Commits](https://github.com/moby/buildkit/compare/v0.2\n[…]\npendencies:\n- dependency-name: github.com/moby/buildkit\n  dependency-version: 0.28.1\n  dependency-type: indirect\n  dependency-group: go_modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/moby/buildkit",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-28T23:45:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0986550421fe8fdc5938c91f448a34b63013a499",
          "body": "…/go_modules-9c5197dcb8\n\nbuild(deps): Bump google.golang.org/grpc from 1.79.1 to 1.79.3 in the go_modules group across 1 directory",
          "is_bot": true,
          "headline": "Merge pull request #166 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-19T02:28:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "91ef96e0b9a38486271c4a0319231cb3064a751f",
          "body": "Bumps the go_modules group with 1 update in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).\n\n\nUpdates `google.golang.org/grpc` from 1.79.1 to 1.79.3\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.1...v\n[…]\ndependencies:\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.79.3\n  dependency-type: indirect\n  dependency-group: go_modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump google.golang.org/grpc",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-19T02:28:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d73e5c7fb47754a3329308a38c269e9c246b9c7",
          "body": "…/github.com/testcontainers/testcontainers-go-0.41.0\n\nbuild(deps): Bump github.com/testcontainers/testcontainers-go from 0.40.0 to 0.41.0",
          "is_bot": true,
          "headline": "Merge pull request #161 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-11T02:09:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48e18f6645e7ff3bc7fa0fee450d08ff6f6279b9",
          "body": "Bumps [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) from 0.40.0 to 0.41.0.\n- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)\n- [Commits](https://github.com/testcontainers/testcontainers-go/compare/v0.40.0...v0.41.0)\n\n\n[…]\nm/testcontainers/testcontainers-go\n  dependency-version: 0.41.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/testcontainers/testcontainers-go",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-11T02:09:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a4ec5d60b6948497c168a044a4f0e31a0dfe9cc1",
          "body": "…/golang.org/x/sync-0.20.0\n\nbuild(deps): Bump golang.org/x/sync from 0.19.0 to 0.20.0",
          "is_bot": true,
          "headline": "Merge pull request #160 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-09T02:16:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46773f5e460e05e1318ad46ec92940309d9f7a82",
          "body": "Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.19.0 to 0.20.0.\n- [Commits](https://github.com/golang/sync/compare/v0.19.0...v0.20.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/sync\n  dependency-version: 0.20.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump golang.org/x/sync from 0.19.0 to 0.20.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-09T02:15:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a58bbd2c3f488441c39e754068d10ce54fd0d23",
          "body": "…/go_modules-812415d43e\n\nbuild(deps): Bump github.com/docker/cli from 28.5.1+incompatible to 29.2.0+incompatible in the go_modules group across 1 directory",
          "is_bot": true,
          "headline": "Merge pull request #159 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-05T03:21:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e920c5ee8060f88a159c92dfa781be0255463da",
          "body": "Bumps the go_modules group with 1 update in the / directory: [github.com/docker/cli](https://github.com/docker/cli).\n\n\nUpdates `github.com/docker/cli` from 28.5.1+incompatible to 29.2.0+incompatible\n- [Commits](https://github.com/docker/cli/compare/v28.5.1...v29.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/docker/cli\n  dependency-version: 29.2.0+incompatible\n  dependency-type: indirect\n  dependency-group: go_modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/docker/cli",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-05T03:21:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cce3a9ea30b68a7beef83c8cc6edaf88f2c96cfd",
          "body": "…/github.com/hashicorp/terraform-plugin-framework-1.18.0\n\nbuild(deps): Bump github.com/hashicorp/terraform-plugin-framework from 1.17.0 to 1.18.0",
          "is_bot": true,
          "headline": "Merge pull request #158 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-02T02:17:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3be08067a3f066421b29ce83651069629025253e",
          "body": "Bumps [github.com/hashicorp/terraform-plugin-framework](https://github.com/hashicorp/terraform-plugin-framework) from 1.17.0 to 1.18.0.\n- [Release notes](https://github.com/hashicorp/terraform-plugin-framework/releases)\n- [Changelog](https://github.com/hashicorp/terraform-plugin-framework/blob/main/\n[…]\nshicorp/terraform-plugin-framework\n  dependency-version: 1.18.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/hashicorp/terraform-plugin-framework",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-02T02:17:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3ad754f98cee908ecf135cf759e99120d50b509a",
          "body": "…/go_modules-6b971a9d7e\n\nbuild(deps): Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 in the go_modules group across 1 directory",
          "is_bot": true,
          "headline": "Merge pull request #157 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-03-01T22:40:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "068ccf1b61c0c6aa1390c7900d683ae5d080dfd4",
          "body": "Bumps the go_modules group with 1 update in the / directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go).\n\n\nUpdates `go.opentelemetry.io/otel/sdk` from 1.39.0 to 1.40.0\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\n- [Changelog]\n[…]\nencies:\n- dependency-name: go.opentelemetry.io/otel/sdk\n  dependency-version: 1.40.0\n  dependency-type: indirect\n  dependency-group: go_modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump go.opentelemetry.io/otel/sdk",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-01T22:40:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f226355c12b1e2627c1efd124003c167ef632a02",
          "body": "…/go_modules-6912c9fae4\n\nbuild(deps): Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in the go_modules group across 1 directory",
          "is_bot": true,
          "headline": "Merge pull request #156 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-25T19:39:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be8da0f0421e87636c4a0cc03d2f1631492bb245",
          "body": "Bumps the go_modules group with 1 update in the / directory: [github.com/cloudflare/circl](https://github.com/cloudflare/circl).\n\n\nUpdates `github.com/cloudflare/circl` from 1.6.1 to 1.6.3\n- [Release notes](https://github.com/cloudflare/circl/releases)\n- [Commits](https://github.com/cloudflare/circl\n[…]\nndencies:\n- dependency-name: github.com/cloudflare/circl\n  dependency-version: 1.6.3\n  dependency-type: indirect\n  dependency-group: go_modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/cloudflare/circl",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-25T19:39:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6f8fc84428902497216a80f918160c82df52debe",
          "body": "…/github.com/hashicorp/terraform-plugin-go-0.30.0\n\nbuild(deps): Bump github.com/hashicorp/terraform-plugin-go from 0.29.0 to 0.30.0",
          "is_bot": true,
          "headline": "Merge pull request #155 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-02-25T02:09:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e52272e1815b10282cdd96c06413f8ee1ee2f6ab",
          "body": "Bumps [github.com/hashicorp/terraform-plugin-go](https://github.com/hashicorp/terraform-plugin-go) from 0.29.0 to 0.30.0.\n- [Release notes](https://github.com/hashicorp/terraform-plugin-go/releases)\n- [Changelog](https://github.com/hashicorp/terraform-plugin-go/blob/main/CHANGELOG.md)\n- [Commits](ht\n[…]\n.com/hashicorp/terraform-plugin-go\n  dependency-version: 0.30.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/hashicorp/terraform-plugin-go",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-25T02:09:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2da550fdcf930d7cf2c527355b2a1cf2dbfd8be1",
          "body": "…/github.com/compose-spec/compose-go/v2-2.10.1\n\nbuild(deps): Bump github.com/compose-spec/compose-go/v2 from 2.10.0 to 2.10.1",
          "is_bot": true,
          "headline": "Merge pull request #152 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-01-20T02:10:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d296ae2fc0ea06b057f1d5cf00c6a62598611cdf",
          "body": "Bumps [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go) from 2.10.0 to 2.10.1.\n- [Release notes](https://github.com/compose-spec/compose-go/releases)\n- [Commits](https://github.com/compose-spec/compose-go/compare/v2.10.0...v2.10.1)\n\n---\nupdated-dependencies:\n- depen\n[…]\nhub.com/compose-spec/compose-go/v2\n  dependency-version: 2.10.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/compose-spec/compose-go/v2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-20T02:10:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c3b598d8d2483f48ad8ed5bae83f1e91dc9d46d1",
          "body": "…/github.com/compose-spec/compose-go/v2-2.10.0\n\nbuild(deps): Bump github.com/compose-spec/compose-go/v2 from 2.9.0 to 2.10.0",
          "is_bot": true,
          "headline": "Merge pull request #151 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-01-19T02:26:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7196317bb5611c16137de681756d45360cfec496",
          "body": "Bumps [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go) from 2.9.0 to 2.10.0.\n- [Release notes](https://github.com/compose-spec/compose-go/releases)\n- [Commits](https://github.com/compose-spec/compose-go/compare/v2.9.0...v2.10.0)\n\n---\nupdated-dependencies:\n- depende\n[…]\nhub.com/compose-spec/compose-go/v2\n  dependency-version: 2.10.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/compose-spec/compose-go/v2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-19T02:25:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "148c5875a55d11ac3f9a1cda9a8ec5e0de0a79c0",
          "body": "Signed-off-by: synology-community <synology-community@appkins.io>",
          "is_bot": false,
          "headline": "chore: Fix formatting",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2026-01-16T10:50:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5d1782104c8ea2881c3b062f0567ca6398ab3eb",
          "body": "Signed-off-by: synology-community <synology-community@appkins.io>",
          "is_bot": false,
          "headline": "chore: Cleanup session logic in provider",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2026-01-16T10:35:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9eb8512189586225073931aea63ba5c76accd4a",
          "body": "…/github.com/go-viper/mapstructure/v2-2.5.0\n\nbuild(deps): Bump github.com/go-viper/mapstructure/v2 from 2.4.0 to 2.5.0",
          "is_bot": true,
          "headline": "Merge pull request #150 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-01-13T05:15:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c3bac31669bfa703317ecc312f2567a96e3804d6",
          "body": "Bumps [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) from 2.4.0 to 2.5.0.\n- [Release notes](https://github.com/go-viper/mapstructure/releases)\n- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/go-viper/mapst\n[…]\ngithub.com/go-viper/mapstructure/v2\n  dependency-version: 2.5.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/go-viper/mapstructure/v2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-13T05:15:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "01aee6e98ea2aadf2e8e07618ef4212809978b1f",
          "body": "…/github.com/compose-spec/compose-go/v2-2.10.0\n\nbuild(deps): Bump github.com/compose-spec/compose-go/v2 from 2.9.0 to 2.10.0",
          "is_bot": true,
          "headline": "Merge pull request #148 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-01-08T02:46:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3549b4abe671a1ae2543d6bbdd5467f540122df4",
          "body": "Bumps [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go) from 2.9.0 to 2.10.0.\n- [Release notes](https://github.com/compose-spec/compose-go/releases)\n- [Commits](https://github.com/compose-spec/compose-go/compare/v2.9.0...v2.10.0)\n\n---\nupdated-dependencies:\n- depende\n[…]\nhub.com/compose-spec/compose-go/v2\n  dependency-version: 2.10.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/compose-spec/compose-go/v2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-08T02:45:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "88aaa85e121203ab933e59a7cc9e46d83eccca55",
          "body": "Signed-off-by: synology-community <synology-community@appkins.io>",
          "is_bot": false,
          "headline": "Fix lint and tests",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2026-01-07T02:21:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e42c737fac9342422c715da6c8a572e44e45dba1",
          "body": "Signed-off-by: synology-community <synology-community@appkins.io>",
          "is_bot": false,
          "headline": "feat: Fix container operation action",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2026-01-07T02:09:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e35a0a41a8b79d91837dd75dd4e5ae0594f5a8f7",
          "body": "Signed-off-by: synology-community <synology-community@appkins.io>",
          "is_bot": false,
          "headline": "feat: Add container operation action",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2026-01-07T00:37:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3e4bddb9d0d969afb7b030d7fb9f419553fa9e2",
          "body": "…/golang.org/x/sync-0.19.0\n\nbuild(deps): Bump golang.org/x/sync from 0.18.0 to 0.19.0",
          "is_bot": true,
          "headline": "Merge pull request #146 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-12-09T02:09:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f56992d076da75eb0c5ba3cc8edc10bf4076f46",
          "body": "Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.18.0 to 0.19.0.\n- [Commits](https://github.com/golang/sync/compare/v0.18.0...v0.19.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/sync\n  dependency-version: 0.19.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump golang.org/x/sync from 0.18.0 to 0.19.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-09T02:09:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd66df4fcee5502314b0d2c4526eecc3a2fc888e",
          "body": "…/github.com/hashicorp/terraform-plugin-testing-1.14.0\n\nbuild(deps): Bump github.com/hashicorp/terraform-plugin-testing from 1.13.3 to 1.14.0",
          "is_bot": true,
          "headline": "Merge pull request #145 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-12-04T02:10:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1038e6843ea087d4f0e95f534a35a22e63dff3ca",
          "body": "Bumps [github.com/hashicorp/terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing) from 1.13.3 to 1.14.0.\n- [Release notes](https://github.com/hashicorp/terraform-plugin-testing/releases)\n- [Changelog](https://github.com/hashicorp/terraform-plugin-testing/blob/main/CHANGELO\n[…]\nhashicorp/terraform-plugin-testing\n  dependency-version: 1.14.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/hashicorp/terraform-plugin-testing",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-04T02:09:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c006bb857b509af160ac4cf549fb7aebff21a9d3",
          "body": "…/github.com/hashicorp/terraform-plugin-framework-1.17.0\n\nbuild(deps): Bump github.com/hashicorp/terraform-plugin-framework from 1.16.1 to 1.17.0",
          "is_bot": true,
          "headline": "Merge pull request #144 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-12-03T02:08:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e39894488ed8fe5a9a2b5a4d7009aa874e91b1b",
          "body": "Bumps [github.com/hashicorp/terraform-plugin-framework](https://github.com/hashicorp/terraform-plugin-framework) from 1.16.1 to 1.17.0.\n- [Release notes](https://github.com/hashicorp/terraform-plugin-framework/releases)\n- [Changelog](https://github.com/hashicorp/terraform-plugin-framework/blob/main/\n[…]\nshicorp/terraform-plugin-framework\n  dependency-version: 1.17.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/hashicorp/terraform-plugin-framework",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-03T02:08:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5a9f178bb643c2cd6bb00d4bdf2624bd796923d9",
          "body": "…/github.com/compose-spec/compose-go/v2-2.10.0\n\nbuild(deps): Bump github.com/compose-spec/compose-go/v2 from 2.9.1 to 2.10.0",
          "is_bot": true,
          "headline": "Merge pull request #143 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-12-02T03:44:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e441881ab11335cade1013f10076c8df4e2f155",
          "body": "Bumps [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go) from 2.9.1 to 2.10.0.\n- [Release notes](https://github.com/compose-spec/compose-go/releases)\n- [Commits](https://github.com/compose-spec/compose-go/compare/v2.9.1...v2.10.0)\n\n---\nupdated-dependencies:\n- depende\n[…]\nhub.com/compose-spec/compose-go/v2\n  dependency-version: 2.10.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/compose-spec/compose-go/v2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-02T03:44:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e4e382f2f131bd61d9f1b8838bd003d8f93bb448",
          "body": "…/github.com/hashicorp/go-version-1.8.0\n\nbuild(deps): Bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0",
          "is_bot": true,
          "headline": "Merge pull request #142 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-12-01T02:29:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "009e7e92aa798db63178f780941c72e1fecb804b",
          "body": "Bumps [github.com/hashicorp/go-version](https://github.com/hashicorp/go-version) from 1.7.0 to 1.8.0.\n- [Release notes](https://github.com/hashicorp/go-version/releases)\n- [Changelog](https://github.com/hashicorp/go-version/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/hashicorp/go-version/\n[…]\nme: github.com/hashicorp/go-version\n  dependency-version: 1.8.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-01T02:29:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0c6973379684b23b42c69498530215653f02b17b",
          "body": "…/go_modules-dd7da38a6b\n\nbuild(deps): Bump golang.org/x/crypto from 0.43.0 to 0.45.0 in the go_modules group across 1 directory",
          "is_bot": true,
          "headline": "Merge pull request #141 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-11-20T03:21:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da64e78270a7faae36cd223ee552c660e12ab74e",
          "body": "Bumps the go_modules group with 1 update in the / directory: [golang.org/x/crypto](https://github.com/golang/crypto).\n\n\nUpdates `golang.org/x/crypto` from 0.43.0 to 0.45.0\n- [Commits](https://github.com/golang/crypto/compare/v0.43.0...v0.45.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n  dependency-version: 0.45.0\n  dependency-type: indirect\n  dependency-group: go_modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump golang.org/x/crypto",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-20T03:21:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6b31d3d9f93eba1dcb643aa553ff7624a7311645",
          "body": "…/go_modules-748ca20e4d\n\nbuild(deps): Bump github.com/containerd/containerd/v2 from 2.1.4 to 2.1.5 in the go_modules group across 1 directory",
          "is_bot": true,
          "headline": "Merge pull request #140 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-11-19T21:29:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f0a971bc3b64f49677a714440c35e4395e7578b",
          "body": "Bumps the go_modules group with 1 update in the / directory: [github.com/containerd/containerd/v2](https://github.com/containerd/containerd).\n\n\nUpdates `github.com/containerd/containerd/v2` from 2.1.4 to 2.1.5\n- [Release notes](https://github.com/containerd/containerd/releases)\n- [Changelog](https:/\n[…]\n:\n- dependency-name: github.com/containerd/containerd/v2\n  dependency-version: 2.1.5\n  dependency-type: indirect\n  dependency-group: go_modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/containerd/containerd/v2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-19T21:29:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d3b77a065da5396c9068f450d71faf80d7a2df2e",
          "body": null,
          "is_bot": false,
          "headline": "Update Docs",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2025-11-19T21:28:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad121b41b49413f79a33a7f3926e8c55321ea08f",
          "body": "Signed-off-by: synology-community <synology-community@appkins.io>",
          "is_bot": false,
          "headline": "feat: Default session none",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2025-11-19T18:35:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "682e60a66df906f68b5c4c62d4e99cea2979c62c",
          "body": "Signed-off-by: synology-community <synology-community@appkins.io>",
          "is_bot": false,
          "headline": "feat: Optional Provider Config",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2025-11-19T18:35:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e6a2f2e158fc599c6b07d3e1385e00b035a7f17",
          "body": "Signed-off-by: synology-community <synology-community@appkins.io>",
          "is_bot": false,
          "headline": "Instructions",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2025-11-19T18:35:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2f41ca2a90f5d2107057b7827e43950a56ac805",
          "body": "…/go_modules-670b252f5e\n\nbuild(deps): Bump github.com/dvsekhvalnov/jose2go from 1.6.0 to 1.7.0 in the go_modules group across 1 directory",
          "is_bot": true,
          "headline": "Merge pull request #139 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-11-14T21:48:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b4062ec2e4a09f454891a00e14a3c0f21eab1611",
          "body": "Bumps the go_modules group with 1 update in the / directory: [github.com/dvsekhvalnov/jose2go](https://github.com/dvsekhvalnov/jose2go).\n\n\nUpdates `github.com/dvsekhvalnov/jose2go` from 1.6.0 to 1.7.0\n- [Commits](https://github.com/dvsekhvalnov/jose2go/compare/v1.6.0...v1.7.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/dvsekhvalnov/jose2go\n  dependency-version: 1.7.0\n  dependency-type: indirect\n  dependency-group: go_modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/dvsekhvalnov/jose2go",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-14T21:47:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8430137b81814ddd680a8c301c9cd1b5e7e0050",
          "body": "…/github.com/hashicorp/terraform-plugin-log-0.10.0\n\nbuild(deps): Bump github.com/hashicorp/terraform-plugin-log from 0.9.0 to 0.10.0",
          "is_bot": true,
          "headline": "Merge pull request #138 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-11-14T02:09:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e37b043aa30e92782ae8daf08871241c03ec592b",
          "body": "Bumps [github.com/hashicorp/terraform-plugin-log](https://github.com/hashicorp/terraform-plugin-log) from 0.9.0 to 0.10.0.\n- [Release notes](https://github.com/hashicorp/terraform-plugin-log/releases)\n- [Changelog](https://github.com/hashicorp/terraform-plugin-log/blob/main/CHANGELOG.md)\n- [Commits]\n[…]\ncom/hashicorp/terraform-plugin-log\n  dependency-version: 0.10.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/hashicorp/terraform-plugin-log",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-14T02:09:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e4ad564da86a559996d25270f2e499fe759007d1",
          "body": "…/golang.org/x/sync-0.18.0\n\nbuild(deps): Bump golang.org/x/sync from 0.17.0 to 0.18.0",
          "is_bot": true,
          "headline": "Merge pull request #137 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-11-10T02:12:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21f767b4642edacd97664500a6e6301b58ed8355",
          "body": "Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.17.0 to 0.18.0.\n- [Commits](https://github.com/golang/sync/compare/v0.17.0...v0.18.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/sync\n  dependency-version: 0.18.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump golang.org/x/sync from 0.17.0 to 0.18.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-10T02:12:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "416e9abba3c6ff1c4a1ca2348ce3127e895139fd",
          "body": "…/github.com/compose-spec/compose-go/v2-2.9.1\n\nbuild(deps): Bump github.com/compose-spec/compose-go/v2 from 2.9.0 to 2.9.1",
          "is_bot": true,
          "headline": "Merge pull request #135 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-10-31T02:10:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc00028a03ae9be9db6da04821d1d8519c247fdd",
          "body": "Bumps [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go) from 2.9.0 to 2.9.1.\n- [Release notes](https://github.com/compose-spec/compose-go/releases)\n- [Commits](https://github.com/compose-spec/compose-go/compare/v2.9.0...v2.9.1)\n\n---\nupdated-dependencies:\n- dependenc\n[…]\nthub.com/compose-spec/compose-go/v2\n  dependency-version: 2.9.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/compose-spec/compose-go/v2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-10-31T02:10:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "695ce228e1537b776e7ef0eb541778076131bac9",
          "body": null,
          "is_bot": false,
          "headline": "Use the correct model for disks (#134)",
          "author_name": "Jason Quigley",
          "author_login": "fcwoknhenuxdfiyv",
          "committed_at": "2025-10-17T11:05:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a26de0deab76d2e084f9a73457769a08b7aa2bcd",
          "body": "…/github.com/hashicorp/terraform-plugin-framework-validators-0.19.0\n\nbuild(deps): Bump github.com/hashicorp/terraform-plugin-framework-validators from 0.18.0 to 0.19.0",
          "is_bot": true,
          "headline": "Merge pull request #133 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-10-08T02:10:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e02ae40588458d04e9b6a4c745b462551f9404bd",
          "body": "…idators\n\nBumps [github.com/hashicorp/terraform-plugin-framework-validators](https://github.com/hashicorp/terraform-plugin-framework-validators) from 0.18.0 to 0.19.0.\n- [Release notes](https://github.com/hashicorp/terraform-plugin-framework-validators/releases)\n- [Changelog](https://github.com/hash\n[…]\nraform-plugin-framework-validators\n  dependency-version: 0.19.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/hashicorp/terraform-plugin-framework-val…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-10-08T02:10:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f62125bd12cdeae34f100e2feba3810d68d3cf6d",
          "body": "…/github.com/hashicorp/terraform-plugin-framework-1.16.1\n\nbuild(deps): Bump github.com/hashicorp/terraform-plugin-framework from 1.16.0 to 1.16.1",
          "is_bot": true,
          "headline": "Merge pull request #131 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-09-30T03:05:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "239fd38366034d2a9313fb4104d628882b504fef",
          "body": "Bumps [github.com/hashicorp/terraform-plugin-framework](https://github.com/hashicorp/terraform-plugin-framework) from 1.16.0 to 1.16.1.\n- [Release notes](https://github.com/hashicorp/terraform-plugin-framework/releases)\n- [Changelog](https://github.com/hashicorp/terraform-plugin-framework/blob/main/\n[…]\nshicorp/terraform-plugin-framework\n  dependency-version: 1.16.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/hashicorp/terraform-plugin-framework",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-30T03:05:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1e336961d32fab016567a2eeb34feb8865006df",
          "body": "…/github.com/compose-spec/compose-go/v2-2.9.0\n\nbuild(deps): Bump github.com/compose-spec/compose-go/v2 from 2.8.2 to 2.9.0",
          "is_bot": true,
          "headline": "Merge pull request #128 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-09-22T02:08:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "087debd2217cbaedd8e93e70769250c14d4e09ed",
          "body": "Bumps [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go) from 2.8.2 to 2.9.0.\n- [Release notes](https://github.com/compose-spec/compose-go/releases)\n- [Commits](https://github.com/compose-spec/compose-go/compare/v2.8.2...v2.9.0)\n\n---\nupdated-dependencies:\n- dependenc\n[…]\nthub.com/compose-spec/compose-go/v2\n  dependency-version: 2.9.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/compose-spec/compose-go/v2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-22T02:08:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7e4ac5596fcdc43f1106f8200af30d004349e5db",
          "body": "…/gotest.tools/v3-3.5.2\n\nbuild(deps): Bump gotest.tools/v3 from 3.5.1 to 3.5.2",
          "is_bot": true,
          "headline": "Merge pull request #126 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-09-18T02:09:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "312f7828d7ba29322c5e0db425e9960cd617bdef",
          "body": "Bumps [gotest.tools/v3](https://github.com/gotestyourself/gotest.tools) from 3.5.1 to 3.5.2.\n- [Release notes](https://github.com/gotestyourself/gotest.tools/releases)\n- [Commits](https://github.com/gotestyourself/gotest.tools/compare/v3.5.1...v3.5.2)\n\n---\nupdated-dependencies:\n- dependency-name: gotest.tools/v3\n  dependency-version: 3.5.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump gotest.tools/v3 from 3.5.1 to 3.5.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-18T02:09:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef003d6a715ed2c44f836c39f6a497860da4bd2c",
          "body": null,
          "is_bot": false,
          "headline": "bug: Fix dep",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2025-09-17T22:32:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13a66801e0acb813dc3e3d89eac4e5ac33214299",
          "body": null,
          "is_bot": false,
          "headline": "bug: Fix Test Errors",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2025-09-17T22:20:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6915bc0b9ecf737973d92cd4b37cefbc04db024",
          "body": null,
          "is_bot": false,
          "headline": "bug: Fix broken deps",
          "author_name": "synology-community",
          "author_login": "appkins",
          "committed_at": "2025-09-17T22:09:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e0238e3b65e60fde96139dd5fa4fd8a1acf89a50",
          "body": "…bles (#114)\n\n* test: add unit test to reproduce storage_name validation bug with module variables\n\n- Tests ValidateConfig method with unknown values (simulating module variables)\n- Current implementation incorrectly fails validation when storage_name is unknown\n- This test will pass after fixing th\n[…]\nariables) to pass validation as they are resolved during planning phase\n- Unit test now passes with this fix\n\nFixes #68\n\n---------\n\nCo-authored-by: Federico Carrer <developer-odsh76@federicocarrer.it>",
          "is_bot": false,
          "headline": "fix: allow unknown values in storage_name validation for module varia…",
          "author_name": "Federico Carrer",
          "author_login": "carrerfe",
          "committed_at": "2025-09-17T22:00:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e503626f0dee554308eda4c2210a475efa938e8e",
          "body": null,
          "is_bot": false,
          "headline": "Update issue templates",
          "author_name": "Nick Atkins",
          "author_login": "appkins",
          "committed_at": "2025-09-17T21:57:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c72c86a623df04c9cee976d037fc6d5cf67f0375",
          "body": "….0 (#104)\n\nBumps [github.com/distribution/reference](https://github.com/distribution/reference) from 0.5.0 to 0.6.0.\n- [Release notes](https://github.com/distribution/reference/releases)\n- [Commits](https://github.com/distribution/reference/compare/v0.5.0...v0.6.0)\n\n---\nupdated-dependencies:\n- depe\n[…]\nmver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Nick Atkins <nbatkins@gmail.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/distribution/reference from 0.5.0 to 0.6…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-17T21:54:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fe85ed0734004678707ba191833a6b6dd161b8d4",
          "body": "…/go_modules-409dafcd55\n\nbuild(deps): Bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0 in the go_modules group across 1 directory",
          "is_bot": true,
          "headline": "Merge pull request #124 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-09-17T21:30:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9ef5c3d34574b9b35cf0a210eca1233cdcca580",
          "body": "Bumps the go_modules group with 1 update in the / directory: [github.com/dvsekhvalnov/jose2go](https://github.com/dvsekhvalnov/jose2go).\n\n\nUpdates `github.com/dvsekhvalnov/jose2go` from 1.5.0 to 1.6.0\n- [Commits](https://github.com/dvsekhvalnov/jose2go/compare/v1.5...v1.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/dvsekhvalnov/jose2go\n  dependency-version: 1.6.0\n  dependency-type: indirect\n  dependency-group: go_modules\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): Bump github.com/dvsekhvalnov/jose2go",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-17T21:30:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d35bece5e677e310132de38242ba54011124b4fd",
          "body": "## Added\n- **OTP Authentication Support**: Added Two-Factor Authentication (TOTP) support for Synology DSM login with session caching and replay protection\n- **Container Project Management**: Enhanced container project lifecycle management with proper start/stop enforcement and rebuild capabilities\n\n[…]\n Better error handling for external library changes\n\n**Issues Resolved**: #29, #59, #67\n\n**Contributors**: Daniel Skowroński, Appkins\n\n---------\n\nCo-authored-by: Daniel Skowroński <daniel@skowron.ski>",
          "is_bot": false,
          "headline": "feat: Add OTP support for Synology DSM login (#102)",
          "author_name": "Nick Atkins",
          "author_login": "appkins",
          "committed_at": "2025-09-17T21:29:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a626cba284faafc50f0483d67613d9808a98724f",
          "body": "…/github.com/compose-spec/compose-go/v2-2.8.2\n\nbuild(deps): Bump github.com/compose-spec/compose-go/v2 from 2.8.1 to 2.8.2",
          "is_bot": true,
          "headline": "Merge pull request #123 from synology-community/dependabot/go_modules…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2025-09-09T02:09:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 6,
      "commits_last_year": 113,
      "latest_release_at": "2026-07-15T21:19:45Z",
      "latest_release_tag": "v0.8.0",
      "releases_from_tags": false,
      "days_since_last_push": 6,
      "active_weeks_last_year": 27,
      "days_since_latest_release": 6,
      "mean_days_between_releases": 17.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/synology-community/terraform-provider-synology",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": false,
          "registry_url": "https://pkg.go.dev/github.com/synology-community/terraform-provider-synology",
          "is_deprecated": false,
          "latest_version": "v0.6.11",
          "repository_url": "https://github.com/synology-community/terraform-provider-synology",
          "versions_count": 41,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-04-07T22:35:01Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 105
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 63883,
      "source_files_sampled": 125,
      "oversized_source_files": 1,
      "agent_instruction_files": [
        ".github/copilot-instructions.md",
        ".github/instructions/style.instructions.md",
        ".github/instructions/testing.instructions.md"
      ],
      "agent_instruction_max_bytes": 9696
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/99designs/keyring",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.2"
        },
        {
          "name": "github.com/compose-spec/compose-go/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.13.0"
        },
        {
          "name": "github.com/distribution/reference",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.0"
        },
        {
          "name": "github.com/docker/compose/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.40.3"
        },
        {
          "name": "github.com/docker/go-connections",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.0"
        },
        {
          "name": "github.com/docker/go-units",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.5.0"
        },
        {
          "name": "github.com/go-viper/mapstructure/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.5.0"
        },
        {
          "name": "github.com/hashicorp/go-retryablehttp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.8"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-framework",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.0"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-framework-timetypes",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.5.0"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-framework-validators",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.19.0"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.31.0"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-testing",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.15.0"
        },
        {
          "name": "github.com/kdomanski/iso9660",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.4.0"
        },
        {
          "name": "github.com/mattn/go-shellwords",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.14"
        },
        {
          "name": "github.com/opencontainers/go-digest",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/subpop/go-ini",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.5"
        },
        {
          "name": "github.com/synology-community/go-synology",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.12-0.20260407222905-83ae2f703b1c"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.41.0"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go/modules/compose",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.41.0"
        },
        {
          "name": "github.com/tredoe/osutil",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "gotest.tools/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.5.2"
        },
        {
          "name": "github.com/hashicorp/go-multierror",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/hashicorp/go-version",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.9.0"
        },
        {
          "name": "github.com/hashicorp/terraform-plugin-log",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.10.0"
        },
        {
          "name": "golang.org/x/sync",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.22.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "appkins",
          "commits": 120,
          "avatar_url": "https://avatars.githubusercontent.com/u/13772502?v=4"
        },
        {
          "type": "User",
          "login": "ironashram",
          "commits": 10,
          "avatar_url": "https://avatars.githubusercontent.com/u/8753502?v=4"
        },
        {
          "type": "User",
          "login": "maksym-nazarenko",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/13029760?v=4"
        },
        {
          "type": "User",
          "login": "carrerfe",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/23248323?v=4"
        },
        {
          "type": "User",
          "login": "fcwoknhenuxdfiyv",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/84577563?v=4"
        }
      ],
      "contributors_sampled": 5,
      "top_contributor_share": 0.882
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yaml",
        "dependabot.yml",
        "gosec.yaml",
        "lint.yaml",
        "release.yaml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 5,
            "reason": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 7,
            "reason": "dependency not pinned by hash detected -- score normalized to 7",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "17 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "dca8f4b5053b4d66da92377d69c312dd2964c3a7",
        "ran_at": "2026-07-22T19:19:02Z",
        "aggregate_score": 4.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-15T21:19:05Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/ironashram/terraform-provider-synology",
    "host": "github.com",
    "name": "terraform-provider-synology",
    "owner": "ironashram"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 54,
      "inputs": {
        "security": 46,
        "vitality": 86,
        "community": 24,
        "governance": 26,
        "engineering": 84
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 86,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "commits_last_year": 113,
              "human_commit_share": 0.31,
              "days_since_last_push": 6,
              "active_weeks_last_year": 27
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 6 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "27/52 weeks with commits",
                "points": 18.7,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 27
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "113 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 113
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
                "points": 5,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 6,
              "latest_release_tag": "v0.8.0",
              "releases_from_tags": false,
              "days_since_latest_release": 6,
              "mean_days_between_releases": 17.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "6 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 6 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~17.7 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 17.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 6,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 6 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 24,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "critical",
        "name": "Sustainability & Governance",
        "value": 26,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 24,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 5,
              "top_contributor_share": 0.882
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 88% of commits",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 88
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "5 contributors",
                "points": 6.8,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 53,
            "inputs": {
              "followers": 10,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "ironashram",
              "public_repos": 72,
              "account_age_days": 4331
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "10 followers of ironashram",
                "points": 7.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 10,
                      "login": "ironashram"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "72 public repos, account ~11 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 72
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 11
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 84,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": "https://search.opentofu.org/provider/ironashram/synology/latest",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://search.opentofu.org/provider/ironashram/synology/latest",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 46,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 46,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 7",
                "points": 3.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "17 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 82,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.871,
              "agent_instruction_files": [
                ".github/copilot-instructions.md",
                ".github/instructions/style.instructions.md",
                ".github/instructions/testing.instructions.md"
              ],
              "agent_instruction_max_bytes": 9696
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".github/copilot-instructions.md, .github/instructions/style.instructions.md, .github/instructions/testing.instructions.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".github/copilot-instructions.md, .github/instructions/style.instructions.md, .github/instructions/testing.instructions.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "27 of 31 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 27,
                      "sampled": 31
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 89,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.01,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.36
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "1 of the last 100 commits agent-authored or agent-credited",
                "points": 2,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "36 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 36,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 7",
                "points": 7,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 63883,
              "source_files_sampled": 125,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/125 source files over 60KB",
                "points": 54.6,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 125,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "go package 'github.com/synology-community/terraform-provider-synology' points at a different repository (https://github.com/synology-community/terraform-provider-synology); excluded from ecosystem scoring",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-22T19:19:10.043011Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/ironashram/terraform-provider-synology.svg",
  "full_name": "ironashram/terraform-provider-synology",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsGo.