Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-27 03:27 UTC
junioryono / godi
Dependency Injection with Service Lifetimes for Go
junioryono/godi holds a health index of 68 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (86/100) and lowest on Sustainability & Governance (52/100). It was last updated 3 days ago. A single contributor accounts for most of its recent work.
68
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
68
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Junior YonoPersonal account
6 followers31 public repossince Jun 2016
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/junioryono/godi/v5 | v5.1.0 | - | 3 | 8 days ago |
| Go | github.com/junioryono/godi/chi/v5 | v5.1.0 | - | 3 | 8 days ago |
| Go | github.com/junioryono/godi/gin/v5 | v5.1.0 | - | 3 | 8 days ago |
| Go | github.com/junioryono/godi/echo/v5 | v5.1.0 | - | 3 | 8 days ago |
| Go | github.com/junioryono/godi/http/v5 | v5.1.0 | - | 3 | 8 days ago |
| Go | github.com/junioryono/godi/huma/v5 | v5.1.0 | - | 3 | 8 days ago |
| Go | github.com/junioryono/godi/fiber/v5 | v5.1.0 | - | 3 | 8 days ago |
| Go | github.com/junioryono/godi | v1.6.2 | - | 17 | 374 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
81
Development activity
68Moderate
How it's scored
| 36/36 | Push recency — last push 3 days ago |
| 7.6/36 | Commit cadence — 11/52 weeks with commits |
| 18/18 | Commit volume — 148 commits in the last year |
| 6/10 | OpenSSF Scorecard: Maintained — 8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6 |
Inputs used
| commits_last_year | 148 |
| human_commit_share | 0.93 |
| days_since_last_push | 3 |
| active_weeks_last_year | 11 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 40 releases published |
| 36/36 | Release recency — latest release 8 days ago |
| 27/27 | Release cadence — a release every ~35.2 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 40 |
| latest_release_tag | v5.1.0 |
| releases_from_tags | no |
| days_since_latest_release | 8 |
| mean_days_between_releases | 35.2 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
59
Popularity & adoption
30At risk
How it's scored
| 30.3/60 | Stars — 75 stars |
| 0/25 | Forks — 2 forks |
| 0/15 | Watchers — 2 watchers |
Inputs used
| forks | 2 |
| stars | 75 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
92Excellent
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 18/18 | CONTRIBUTING guide |
| 13.5/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | yes |
| has_pull_request_template | yes |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
52
Maintainer resilience (bus factor)
10Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
66Moderate
How it's scored
| 46.8/46.8 | Issue resolution — 100% of issues closed |
| 19.7/38.3 | PR acceptance — 17/33 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/28 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 17 |
| open_issues | 0 |
| closed_issues | 2 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 16 |
Ownership & stewardship
49At risk
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 6.1/25 | Owner reach — 6 followers of junioryono |
| 23/25 | Track record — 31 public repos, account ~10 yr old |
Inputs used
| followers | 6 |
| owner_type | User |
| is_verified | — |
| owner_login | junioryono |
| public_repos | 31 |
| account_age_days | 3,699 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 8 package(s) on go |
| 35/35 | Publish recency — latest publish 8 days ago |
| 20/20 | Version history — 17 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/junioryono/godi/v5, github.com/junioryono/godi/chi/v5, github.com/junioryono/godi/gin/v5, github.com/junioryono/godi/echo/v5, github.com/junioryono/godi/http/v5, github.com/junioryono/godi/huma/v5, github.com/junioryono/godi/fiber/v5, github.com/junioryono/godi |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 8 |
Engineering Quality
Are baseline engineering and documentation practices in place?
86
Engineering practices
84Good
How it's scored
| 24/24 | CI workflows — 6 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yml |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
90Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://godi.readthedocs.io/en/latest/ |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | https://godi.readthedocs.io/en/latest/ |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
64
Security posture
65Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 6/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/28 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 4.5/7.5 | Maintained — 8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6 |
| 0/5 | Packaging — no data |
| 4/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8 |
| 4/5 | SAST — SAST tool is not run on all commits -- score normalized to 8 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 6.8/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 54 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 6.5 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
59Moderate
How it's scored
| 11.1/35 | Direct dependencies free of known advisories — 3 affected: github.com/gofiber/fiber/v2 v2.52.6 (high 7.7), github.com/gofiber/fiber/v2 v2.52.12 (moderate 5.3), github.com/go-chi/chi/v5 v5.2.5 (unknown) |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 33.5/40 | No advisories left outstanding — 1 advisory-carrying package(s) unaddressed past 90 days; oldest published 430 days ago |
Inputs used
| source | osv |
| advisories | 145 |
| affected_packages | 17 |
| assessed_packages | 108 |
| unassessed_packages | 0 |
| affected_by_severity | critical 2, high 2, moderate 6, low 1, unknown 6 |
| direct_affected_packages | 3 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 108 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
69
Agent context & guidance
29Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 29.2/40 | Legible commit history — 51 of 93 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.548 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
98Excellent
How it's scored
| 18/18 | One-command bootstrap — Makefile, docs/Makefile |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yml |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 25 of the last 100 commits agent-authored or agent-credited |
| 8/8 | Automated maintenance — 5 of the last 100 commits are automated dependency updates |
| 8/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | Makefile, docs/Makefile |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0.25 |
| toolchain_manifests | benchmarks/go.mod, chi/go.mod, echo/go.mod, fiber/go.mod, gin/go.mod, go.mod, http/go.mod, huma/go.mod, integrationtests/go.mod |
| dependency_bot_commit_share | 0.05 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/41 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 44,999 |
| source_files_sampled | 41 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
75GitHub stars
1contributors
148commits, last 12 months
3days since last push
40releases
1bus factor
0open issues
Go, PyPIpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 2 ⇿
0Stars
2Forks
37Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 4Minor 9Patch 24
OpenSSF Scorecard 6.5 / 10
6.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 8 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/28 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 6 | Maintained | 8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6 |
| n/a | Packaging | packaging workflow not detected |
| 8 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 8 |
| 8 | SAST | SAST tool is not run on all commits -- score normalized to 8 |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 9 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 54 existing vulnerabilities detected |
Direct dependencies 29
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/junioryono/godi/v5 | v5.0.0 | chi/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | chi/go.mod |
| Go | github.com/junioryono/godi/v5 | v5.0.0 | echo/go.mod |
| Go | github.com/labstack/echo/v4 | v4.13.3 | echo/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | echo/go.mod |
| Go | github.com/gofiber/fiber/v2 | v2.52.6 | fiber/go.mod |
| Go | github.com/junioryono/godi/v5 | v5.0.0 | fiber/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | fiber/go.mod |
| Go | github.com/gin-gonic/gin | v1.10.0 | gin/go.mod |
| Go | github.com/junioryono/godi/v5 | v5.0.0 | gin/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | gin/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | go.mod |
| Go | github.com/junioryono/godi/v5 | v5.0.0 | http/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | http/go.mod |
| Go | github.com/danielgtaylor/huma/v2 | v2.37.3 | huma/go.mod |
| Go | github.com/junioryono/godi/v5 | v5.0.0 | huma/go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | huma/go.mod |
| Go | github.com/danielgtaylor/huma/v2 | v2.37.3 | integrationtests/go.mod |
| Go | github.com/gin-gonic/gin | v1.11.0 | integrationtests/go.mod |
| Go | github.com/go-chi/chi/v5 | v5.2.5 | integrationtests/go.mod |
| Go | github.com/gofiber/fiber/v2 | v2.52.12 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/chi/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/echo/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/fiber/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/gin/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/http/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/huma/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/junioryono/godi/v5 | v5.0.1 | integrationtests/go.mod |
| Go | github.com/labstack/echo/v4 | v4.15.0 | integrationtests/go.mod |
All dependencies 108
Full resolved dependency set from the GitHub dependency graph: 9 direct and 99 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/danielgtaylor/huma/v2 | v2.37.3 | direct |
| Go | github.com/gin-gonic/gin | v1.10.0 | direct |
| Go | github.com/gin-gonic/gin | v1.11.0 | direct |
| Go | github.com/go-chi/chi/v5 | v5.2.5 | direct |
| Go | github.com/gofiber/fiber/v2 | v2.52.12 | direct |
| Go | github.com/gofiber/fiber/v2 | v2.52.6 | direct |
| Go | github.com/labstack/echo/v4 | v4.13.3 | direct |
| Go | github.com/labstack/echo/v4 | v4.15.0 | direct |
| Go | github.com/stretchr/testify | v1.11.1 | direct |
| Go | github.com/andybalholm/brotli | v1.1.0 | indirect |
| Go | github.com/andybalholm/brotli | v1.2.0 | indirect |
| Go | github.com/bytedance/gopkg | v0.1.3 | indirect |
| Go | github.com/bytedance/sonic | v1.11.6 | indirect |
| Go | github.com/bytedance/sonic | v1.15.0 | indirect |
| Go | github.com/bytedance/sonic/loader | v0.1.1 | indirect |
| Go | github.com/bytedance/sonic/loader | v0.5.0 | indirect |
| Go | github.com/clipperhouse/uax29/v2 | v2.7.0 | indirect |
| Go | github.com/cloudwego/base64x | v0.1.4 | indirect |
| Go | github.com/cloudwego/base64x | v0.1.6 | indirect |
| Go | github.com/cloudwego/iasm | v0.2.0 | indirect |
| Go | github.com/davecgh/go-spew | v1.1.1 | indirect |
| Go | github.com/gabriel-vasile/mimetype | v1.4.13 | indirect |
| Go | github.com/gabriel-vasile/mimetype | v1.4.3 | indirect |
| Go | github.com/gin-contrib/sse | v0.1.0 | indirect |
| Go | github.com/gin-contrib/sse | v1.1.0 | indirect |
| Go | github.com/go-playground/locales | v0.14.1 | indirect |
| Go | github.com/go-playground/universal-translator | v0.18.1 | indirect |
| Go | github.com/go-playground/validator/v10 | v10.20.0 | indirect |
| Go | github.com/go-playground/validator/v10 | v10.30.1 | indirect |
| Go | github.com/goccy/go-json | v0.10.2 | indirect |
| Go | github.com/goccy/go-json | v0.10.5 | indirect |
| Go | github.com/goccy/go-yaml | v1.19.2 | indirect |
| Go | github.com/google/uuid | v1.6.0 | indirect |
| Go | github.com/json-iterator/go | v1.1.12 | indirect |
| Go | github.com/klauspost/compress | v1.17.9 | indirect |
| Go | github.com/klauspost/compress | v1.18.4 | indirect |
| Go | github.com/klauspost/cpuid/v2 | v2.2.7 | indirect |
| Go | github.com/klauspost/cpuid/v2 | v2.3.0 | indirect |
| Go | github.com/labstack/gommon | v0.4.2 | indirect |
| Go | github.com/leodido/go-urn | v1.4.0 | indirect |
| Go | github.com/mattn/go-colorable | v0.1.13 | indirect |
| Go | github.com/mattn/go-colorable | v0.1.14 | indirect |
| Go | github.com/mattn/go-isatty | v0.0.20 | indirect |
| Go | github.com/mattn/go-runewidth | v0.0.16 | indirect |
| Go | github.com/mattn/go-runewidth | v0.0.20 | indirect |
| Go | github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | indirect |
| Go | github.com/modern-go/reflect2 | v1.0.2 | indirect |
| Go | github.com/pelletier/go-toml/v2 | v2.2.2 | indirect |
| Go | github.com/pelletier/go-toml/v2 | v2.2.4 | indirect |
| Go | github.com/pmezard/go-difflib | v1.0.0 | indirect |
| Go | github.com/quic-go/qpack | v0.6.0 | indirect |
| Go | github.com/quic-go/quic-go | v0.59.0 | indirect |
| Go | github.com/rivo/uniseg | v0.2.0 | indirect |
| Go | github.com/samber/do/v2 | v2.0.0 | indirect |
| Go | github.com/samber/go-type-to-string | v1.8.0 | indirect |
| Go | github.com/twitchyliquid64/golang-asm | v0.15.1 | indirect |
| Go | github.com/ugorji/go/codec | v1.2.12 | indirect |
| Go | github.com/ugorji/go/codec | v1.3.1 | indirect |
| Go | github.com/valyala/bytebufferpool | v1.0.0 | indirect |
| Go | github.com/valyala/fasthttp | v1.51.0 | indirect |
| Go | github.com/valyala/fasthttp | v1.69.0 | indirect |
| Go | github.com/valyala/fasttemplate | v1.2.2 | indirect |
| Go | github.com/valyala/tcplisten | v1.0.0 | indirect |
| Go | go.uber.org/dig | v1.19.0 | indirect |
| Go | golang.org/x/arch | v0.24.0 | indirect |
| Go | golang.org/x/arch | v0.8.0 | indirect |
| Go | golang.org/x/crypto | v0.23.0 | indirect |
| Go | golang.org/x/crypto | v0.31.0 | indirect |
| Go | golang.org/x/crypto | v0.54.0 | indirect |
| Go | golang.org/x/net | v0.25.0 | indirect |
| Go | golang.org/x/net | v0.33.0 | indirect |
| Go | golang.org/x/net | v0.56.0 | indirect |
| Go | golang.org/x/sys | v0.20.0 | indirect |
| Go | golang.org/x/sys | v0.28.0 | indirect |
| Go | golang.org/x/sys | v0.47.0 | indirect |
| Go | golang.org/x/text | v0.15.0 | indirect |
| Go | golang.org/x/text | v0.21.0 | indirect |
| Go | golang.org/x/text | v0.40.0 | indirect |
| Go | google.golang.org/protobuf | v1.34.1 | indirect |
| Go | google.golang.org/protobuf | v1.36.11 | indirect |
| Go | gopkg.in/yaml.v3 | v3.0.1 | indirect |
| PyPI | babel | 2.17.0 | indirect |
| PyPI | certifi | 2025.1.31 | indirect |
| PyPI | chardet | 5.2.0 | indirect |
| PyPI | commonmark | 0.9.1 | indirect |
| PyPI | docutils | 0.20.1 | indirect |
| PyPI | idna | 3.10 | indirect |
| PyPI | imagesize | 1.4.1 | indirect |
| PyPI | jinja2 | 3.1.6 | indirect |
| PyPI | markupsafe | 3.0.2 | indirect |
| PyPI | myst-parser | 3.0.1 | indirect |
| PyPI | packaging | 25.0 | indirect |
| PyPI | pygments | 2.19.1 | indirect |
| PyPI | pyparsing | 3.2.3 | indirect |
| PyPI | pytz | 2025.2 | indirect |
| PyPI | requests | 2.32.3 | indirect |
| PyPI | snowballstemmer | 2.2.0 | indirect |
| PyPI | sphinx | 7.4.7 | indirect |
| PyPI | sphinx-copybutton | 0.5.2 | indirect |
| PyPI | sphinx-rtd-theme | 3.0.2 | indirect |
| PyPI | sphinxcontrib-applehelp | 2.0.0 | indirect |
| PyPI | sphinxcontrib-devhelp | 2.0.0 | indirect |
| PyPI | sphinxcontrib-htmlhelp | 2.1.0 | indirect |
| PyPI | sphinxcontrib-jsmath | 1.0.1 | indirect |
| PyPI | sphinxcontrib-qthelp | 2.0.0 | indirect |
| PyPI | sphinxcontrib-serializinghtml | 2.0.0 | indirect |
| PyPI | sphinxext-rediraffe | 0.2.7 | indirect |
| PyPI | urllib3 | 2.4.0 | indirect |
Dependency advisories 17
This repository publishes no package the index resolves, so its own dependency graph was assessed — 108 packages, which also include development and test pins that never ship: 17 carry known advisories, of which 3 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| golang.org/x/crypto | v0.23.0 | indirect | critical | 36 | 0.52.0 |
| golang.org/x/crypto | v0.31.0 | indirect | critical | 34 | 0.52.0 |
| github.com/gofiber/fiber/v2 | v2.52.6 | direct | high | 11 | 3.3.0 |
| urllib3 | 2.4.0 | indirect | high | 12 | 2.7.0 |
| github.com/gofiber/fiber/v2 | v2.52.12 | direct | moderate | 3 | 3.3.0 |
| github.com/quic-go/quic-go | v0.59.0 | indirect | moderate | 2 | 0.59.1 |
| golang.org/x/net | v0.25.0 | indirect | moderate | 16 | 1.26.3 |
| golang.org/x/net | v0.33.0 | indirect | moderate | 15 | 1.26.3 |
| idna | 3.10 | indirect | moderate | 2 | 3.15 |
| requests | 2.32.3 | indirect | moderate | 4 | 2.33.0 |
| pygments | 2.19.1 | indirect | low | 2 | 2.20.0 |
| github.com/go-chi/chi/v5 | v5.2.5 | direct | unknown | 3 | 5.3.0 |
| golang.org/x/crypto | v0.54.0 | indirect | unknown | 1 | — |
| golang.org/x/sys | v0.20.0 | indirect | unknown | 1 | 0.44.0 |
| golang.org/x/sys | v0.28.0 | indirect | unknown | 1 | 0.44.0 |
| golang.org/x/text | v0.15.0 | indirect | unknown | 1 | 0.39.0 |
| golang.org/x/text | v0.21.0 | indirect | unknown | 1 | 0.39.0 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1236,
"has_wiki": true,
"homepage": "https://godi.readthedocs.io/en/latest/",
"languages": {
"Go": 552448,
"Shell": 17661,
"Makefile": 2639
},
"pushed_at": "2026-07-23T04:34:01Z",
"created_at": "2025-07-10T01:30:28Z",
"owner_type": "User",
"updated_at": "2026-07-18T18:22:08Z",
"description": "Dependency Injection with Service Lifetimes for Go",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Junior Yono",
"type": "User",
"login": "junioryono",
"company": null,
"location": null,
"followers": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/19849174?v=4",
"created_at": "2016-06-10T02:18:46Z",
"is_verified": null,
"public_repos": 31,
"account_age_days": 3699
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v5.1.0",
"kind": "minor",
"published_at": "2026-07-18T16:26:19Z"
},
{
"tag": "v5.0.1",
"kind": "patch",
"published_at": "2026-06-13T06:34:38Z"
},
{
"tag": "v5.0.0",
"kind": "major",
"published_at": "2026-06-13T06:17:35Z"
},
{
"tag": "v4.2.4",
"kind": "patch",
"published_at": "2026-05-22T03:16:04Z"
},
{
"tag": "v4.2.3",
"kind": "patch",
"published_at": "2026-03-01T18:42:58Z"
},
{
"tag": "v4.2.2",
"kind": "patch",
"published_at": "2025-12-14T07:58:49Z"
},
{
"tag": "v4.2.1",
"kind": "patch",
"published_at": "2025-12-14T07:09:18Z"
},
{
"tag": "v4.2.0",
"kind": "minor",
"published_at": "2025-12-13T06:19:49Z"
},
{
"tag": "v4.1.4",
"kind": "patch",
"published_at": "2025-09-05T06:58:49Z"
},
{
"tag": "v4.1.3",
"kind": "patch",
"published_at": "2025-09-05T05:59:34Z"
},
{
"tag": "v4.1.2",
"kind": "patch",
"published_at": "2025-09-05T04:02:34Z"
},
{
"tag": "v4.1.1",
"kind": "patch",
"published_at": "2025-09-04T01:33:25Z"
},
{
"tag": "v4.1.0",
"kind": "minor",
"published_at": "2025-08-22T22:44:08Z"
},
{
"tag": "v4.0.1",
"kind": "patch",
"published_at": "2025-08-19T04:53:09Z"
},
{
"tag": "v4.0.0",
"kind": "major",
"published_at": "2025-08-18T23:40:41Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2025-07-28T01:42:51Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2025-07-22T04:27:15Z"
},
{
"tag": "v2.0.5",
"kind": "patch",
"published_at": "2025-07-22T03:46:10Z"
},
{
"tag": "v2.0.4",
"kind": "patch",
"published_at": "2025-07-22T00:55:25Z"
},
{
"tag": "v2.0.3",
"kind": "patch",
"published_at": "2025-07-22T00:13:39Z"
},
{
"tag": "v2.0.2",
"kind": "patch",
"published_at": "2025-07-21T01:22:50Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2025-07-21T01:17:51Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2025-07-21T01:06:05Z"
},
{
"tag": "v1.6.2",
"kind": "patch",
"published_at": "2025-07-17T03:53:11Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2025-07-17T03:49:13Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2025-07-17T03:44:25Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2025-07-17T03:41:03Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2025-07-17T03:18:19Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2025-07-17T02:44:32Z"
},
{
"tag": "v1.3.3",
"kind": "patch",
"published_at": "2025-07-16T23:14:17Z"
},
{
"tag": "v1.3.2",
"kind": "patch",
"published_at": "2025-07-16T23:11:45Z"
},
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2025-07-16T23:07:25Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2025-07-16T22:58:19Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2025-07-16T01:11:07Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2025-07-15T01:44:50Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2025-07-14T04:13:36Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2025-07-14T01:58:53Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2025-07-13T23:31:37Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2025-07-12T19:45:15Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2025-07-11T06:55:19Z"
}
],
"recent_commits": [
{
"oid": "dfe475678533d3322f8033cb60f9fd3c3b89eae3",
"body": "Dependabot's config parser does not support YAML anchors or aliases, so\nit rejected .github/dependabot.yml with \"YAML aliases are not supported\"\nand stopped opening dependency update PRs.\n\nExpand the &weekly, &go_groups, and &go_commit anchors inline at each of\nthe eleven update entries. The parsed \n[…]\nes; only Dependabot's\nown server-side parser rejects them.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_013ArexH3Dgxun8wYj4MxQ5T",
"is_bot": false,
"headline": "fix(ci): expand dependabot YAML aliases",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-07-18T18:22:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "22b01d1e4dfe98b3091e90937e3b25d449575a0d",
"body": "Co-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: harden lifecycle, integrations, and release checks (#35)",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-07-18T16:20:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bbe7a21cccc16698ab5a6d3ae2785d21232cf27c",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump actions/checkout from 6 to 7 (#34)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-17T04:46:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba5269d7b9750a26cf84286df2e63e00ffde0041",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump codecov/codecov-action from 6 to 7 (#33)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-15T19:43:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf0b77965c9505b9a9ece2d91c2725615536e0d",
"body": "Co-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: correct integration module paths to <framework>/v5 (#32)",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-06-13T06:29:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f497ed2a475e1b09c36738643e93c5f83d1766c9",
"body": "…eness (#31)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: huma integration, router alignment, and v5 migration/CI complet…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-06-13T06:14:43Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1f11ae46d6a711eac4c574c6aa78a4935fd610f7",
"body": "… (#30)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat!: defer registration errors to Build, v5 API, bug fixes, Go 1.26…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-06-13T04:40:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6cda87cc0ac9c3252184fb5f1548c9511cb5e926",
"body": "…solver perf\n\nAudit pass over the v4 module. No public signatures changed.\n\nCorrectness:\n\n- scope.Close vs concurrent resolve no longer panics with \"assignment to\n entry in nil map\" (scope.go:setInstance now bails if the scope was\n closed between the resolver's disposed check and the map write).\n-\n[…]\nr -race. Existing tests\ncontinue to pass; framework integrations (chi, echo, fiber, gin, http)\nalso pass against the local module.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: concurrent scope safety, single-flight scoped resolution, and re…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-05-22T03:09:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8874b346c966e72c02c930882e6b20ee22d8a7cf",
"body": "Put Bug Fixes before Features in release notes, and remove the\nFramework Integrations install section.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: reorder release notes and remove framework integrations",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-03-01T18:46:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "49b65a1acfb0a07ae12086616a6c6080ec617245",
"body": "go.mod requires go >= 1.24.6, so older versions fail with\nGOTOOLCHAIN=local. Keep only 1.24 and 1.25.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: drop Go 1.22 and 1.23 from test matrix",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-03-01T17:34:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "da577d4bfe325dfcc30e57102d894d261ffd74de",
"body": "- actions/setup-go v5 → v6 (test.yml, release.yml)\n- golangci/golangci-lint-action v8 → v9 (test.yml)\n- actions/upload-artifact v4 → v5 (test.yml)\n- github/codeql-action v3 → v4 (test.yml)\n- actions/github-script v7 → v8 (pr-labeler.yml)\n\nAll upgrades are Node.js 20 → 24 runtime updates with no breaking\nAPI changes. Supersedes PRs #18, #19, #21, #22, #23.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: bump GitHub Actions to latest major versions",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-03-01T17:33:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3447b7a4aeeea95a1531a1d0cd44210d2540a4f8",
"body": "Fixes QF1012 staticcheck warnings in errors.go and\ninternal/graph/errors.go.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: use fmt.Fprintf instead of WriteString(fmt.Sprintf(...))",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-03-01T17:30:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7e834aac61416f988900aea60829293307a95864",
"body": "…nitialized\n\nWhen a singleton consumed a group via godi.In (e.g., `group:\"routes\"`),\nthe dependency graph created a phantom node (Key=nil) that didn't match\nreal group members (Key=1,2,...), so the topological sort had no ordering\nconstraint. This caused ErrSingletonNotInitialized during Build() whe\n[…]\ngroup nodes to real\nmembers before cycle detection. Also fix validateLifetimes() to properly\ndetect lifetime violations for group dependencies.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: resolve group dependency graph ordering causing ErrSingletonNotI…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2026-03-01T17:26:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6b57b98749394c50bdb554ed6fd49ffe48761e51",
"body": "🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: fix whitespace alignment in ASCII diagrams",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-14T16:36:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4a5903b3a90cded9d38667e0b7bacfc24d2fce6b",
"body": "Update tag workflow to create tags for all submodules (gin, chi, echo,\nfiber, http) following Go's multi-module tagging convention. Add\ninstallation instructions to release notes.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: add multi-module tagging for Go submodules",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-14T07:56:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a626bd3637e6c82b35ba5ddd8ad19fdcb8a3146a",
"body": "🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: explicitly set draft: false in release workflow",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T06:17:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "15b77b3969e20a30f85579c2f6f2ac31bd4cace8",
"body": "git describe --tags returns the most recent tag reachable from HEAD,\nnot the highest semantic version. This caused collisions when tags\nexisted on different branches.\n\nNow lists all tags and sorts by semantic version to find the highest.\nAlso adds a pre-flight check before tag creation.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: use highest semver tag instead of git describe",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T05:46:31Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f0e7dcfa61780fa716f8674a2b4bc0431f85cde9",
"body": "These web framework integration packages trigger gosec SSA analyzer\npanics due to external dependencies.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: exclude gin and chi from gosec scan",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T05:33:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "79cdd6059dfbbb4a16702c128c4d5f6a1d9795e2",
"body": "- Fix gocritic dupOption error by using typed nil variable in test\n- Exclude fiber and echo packages from gosec to avoid SSA analyzer panic\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: fix linter issues in GitHub Actions",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T05:31:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2a23c2cdebdc42a2fea396e5f35f90eb6dd8950d",
"body": "- Update README.md modules section to use godi.NewModule\n- Update docs/concepts/modules.md with declarative module syntax\n- Update docs/features/resource-cleanup.md to use godi.Disposable\n- Fix formatting in test files\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: update module examples to use NewModule pattern",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T05:23:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "51c24a6b575a8cca1d48316549bdac79c2da92e4",
"body": "🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: fix comment alignment in README",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T05:01:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cc9b5522ff1d2f74ad68341d428400d06157bc93",
"body": "Replace google/uuid with atomic counters for provider and scope IDs,\npre-size maps/slices for typical usage, add deferred graph building for\nbulk operations, and share analyzer across registrations for caching.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "perf: remove uuid dependency and optimize ID generation",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T04:41:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "85063f050f0714d12d419e4de27a0a18d0a34f1a",
"body": "- Reorganize documentation into logical sections:\n - concepts/: lifetimes, scopes, modules, how-it-works\n - features/: interface binding, keyed services, groups, etc.\n - getting-started/: step-by-step tutorial\n - guides/: testing, error handling, web apps, migration\n - integrations/: net/http, \n[…]\nchmarks section\n - Better quick start examples\n - Framework integration links\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: restructure documentation and add benchmarks",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T04:09:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d591c9a8871fd0f6418d342cc886bc0ed106d914",
"body": "…object bug\n\n- Create testutil_test.go with shared test types, constructors, and helpers\n- Refactor collection_test.go: focused tests without redundancy\n- Refactor scope_test.go: focused tests covering all lifetime semantics\n- Simplify descriptor_test.go, errors_test.go, lifetime_test.go, module_tes\n[…]\nelds.\n\nTest coverage maintained at 84%+ for main package, 91-93% for internals.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: streamline tests with shared infrastructure and fix result …",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T01:57:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "22b2f68ebb46b65af16d45f5863f70650538b3b1",
"body": "- Replace singleton map + RWMutex with sync.Map for lock-free reads\n (~25x faster concurrent resolution: 140ns → 5.5ns)\n- Add cached ConstructorInvoker via Analyzer.GetInvoker() to reduce\n allocations per resolution\n- Add comprehensive benchmark suite (benchmark_test.go) for:\n - Resolution benchm\n[…]\ncs\n- Concurrent singleton: 5.5ns, 0 allocs\n- Concurrent scoped: 5.2ns, 0 allocs\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "perf: add lock-free singleton cache and performance optimizations",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-13T01:14:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "39a1092685822468c239f8f8853a941640ec8814",
"body": "- Enhanced error formatting with visual dependency chains using arrows\n- Added Assign/AssignKeyed methods to Descriptor for direct value assignment\n- Improved BuildError, ResolutionError, and CircularDependencyError messages\n- Added context checking in Build and BuildWithContext for cancellation sup\n[…]\netween constructors\n- Updated graph error test to expect new arrow notation (↓)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: improve error messages and add assignment operators",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-12T04:58:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f36dfc9a38990a66f8e0c6cac38ae586406b5e0e",
"body": "Add request-scoped DI middleware and type-safe handler wrappers for\npopular Go web frameworks:\n\n- gin: ScopeMiddleware, Handle[T] with panic recovery\n- chi: ScopeMiddleware, Handle[T] for standard http handlers\n- echo: ScopeMiddleware, Handle[T] with echo.Context\n- fiber: ScopeMiddleware, Handle[T],\n[…]\n\n- WithPanicRecovery and WithPanicHandler options\n- Comprehensive test coverage\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add framework integrations for gin, chi, echo, fiber, and http",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-12-12T02:41:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8284b42b9a435195f29a898300bee8ba2c5c8f83",
"body": "Add Remove[T]() and RemoveKeyed[T](key) as ModuleOptions for removing services. This provides a cleaner, type-safe API for service removal, especially useful in testing scenarios where services need to be swapped with mocks.",
"is_bot": false,
"headline": "feat: add generic Remove and RemoveKeyed ModuleOptions",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-10-02T00:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a6834dd9a1a9d40a61075f13ea7f3a0dad5d58b",
"body": "- Add VoidReturn field to Descriptor to track functions with no valid returns\n- Collect void return scoped descriptors during provider build\n- Initialize scoped void return functions when creating new scopes\n- Support functions with only error returns as void return functions\n- Add comprehensive tes\n[…]\nrious lifetimes\n- Add tests for void return functions with dependencies\n\nThis allows using functions with no returns or only error returns as\ninitialization hooks that execute when scopes are created.",
"is_bot": false,
"headline": "feat: enhance support for void return functions and initialization",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T06:55:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8be76d2f4cb55b5ce1962652f0a4a07827a773a2",
"body": "Allow registration of functions with no return values or error-only returns as initializers.\nThese functions can now be registered and will be called for their side effects during\ncontainer initialization.\n\n- Remove validation that rejected functions with no returns\n- Auto-generate UUID keys for no-return functions to ensure uniqueness\n- Use empty struct type as marker for initializer functions\n- Update tests to verify no-return functions work correctly",
"is_bot": false,
"headline": "feat: support functions with no returns for initialization",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T05:56:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c40eb9c856920245200f2f6639f55c5938b978d5",
"body": "Use RELEASE_TOKEN instead of GITHUB_TOKEN to avoid permission issues\nwhen pushing tags from GitHub Actions workflow",
"is_bot": false,
"headline": "fix: use RELEASE_TOKEN for tag creation",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T03:58:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "951e8b8a992ae3572addb03f402dddce3f9e7160",
"body": "- Change quotes to double quotes for consistency\n- Reorder version bump options (Patch, Minor, Major)\n- Remove trailing spaces and add newline at EOF",
"is_bot": false,
"headline": "style: format tag.yml and reorder version options",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T03:55:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85bc96f6ac0c34b7f33e2fcb2552e3d211209b33",
"body": "- Modified .github/workflows/test.yml to add workflow_call trigger, making it reusable by other workflows\n- Created .github/workflows/tag.yml that uses the reusable test workflow and handles automated version tagging\n- Tag workflow supports Major, Minor, and Patch version bumps via manual dispatch\n- Ensures all tests pass before creating new tags\n- Automatically calculates new version based on existing tags and desired bump type",
"is_bot": false,
"headline": "feat(ci): add reusable test workflow and automated tagging system",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T03:54:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72bd624626b5c6895bc4dd2903ab17ecef2562a2",
"body": "Applied gofmt to ensure consistent code formatting across collection.go,\ncollection_test.go, errors.go, and errors_test.go files.",
"is_bot": false,
"headline": "style: apply gofmt formatting to modified files",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T03:42:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c484e46b369b25e02d9642f388fca2cc1e78a9a",
"body": "…ency info\n\nThe error now clearly explains that a service with one lifetime cannot depend\non a service with an incompatible lifetime. Added DependencyType field to show\nwhich specific dependency is causing the conflict.",
"is_bot": false,
"headline": "fix(errors): improve LifetimeConflictError message and include depend…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-05T03:41:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e62d2781f6c70496b58ca73e41bdc3e059f683b0",
"body": "Remove the \"What Happens After Merge\" section as the automated release process details are no longer applicable",
"is_bot": false,
"headline": "docs: remove automated release section from CONTRIBUTING.md",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-04T02:07:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a0c71b11b059ee7291f0bb89666493d3ec558a1",
"body": "Remove the root Makefile as it's no longer needed for the project workflow",
"is_bot": false,
"headline": "chore: remove root Makefile",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-04T02:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2398fbb39f9c0c9ac0e0df413547ac630013bcf",
"body": "Remove the ignore pattern for internal/testutil since this directory no longer exists in the project",
"is_bot": false,
"headline": "ci: remove testutil ignore from codecov configuration",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-04T02:00:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b7869f1d34cc76a849fe8590cdfa928400bd9f7",
"body": "- Fix variable shadowing issue in doBuild() error handling where closeErr was incorrectly reassigned as err\n- Add proper result object (Out struct) field registration logic to handle each field as a separate service\n- Add comprehensive test coverage for both error handling and result object registration",
"is_bot": false,
"headline": "fix: correct error handling and result object registration in collection",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-09-04T01:25:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3a9775f0d3cddb473dd5d1e061a847a5b11e593",
"body": null,
"is_bot": false,
"headline": "docs: reorganize into feature-specific pages",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-22T22:22:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f877e64962517ae078c0a31ec3d256ef2f896ff",
"body": null,
"is_bot": false,
"headline": "ci: do not update docs changelog file on update anymore",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-22T22:20:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd6553f507184188c839c295943ca937754b55ea",
"body": null,
"is_bot": false,
"headline": "feat!: change As module function to use generics",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-22T20:33:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f9c27db6520313b148d1cbf3e4dbdb652db1bf2",
"body": "…ead through",
"is_bot": false,
"headline": "docs: make readme and getting started page easier to understand and r…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-20T05:52:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb32220709c57584a09175f5c08ca92318f28332",
"body": null,
"is_bot": false,
"headline": "ci: add code coverage token to github actions workflow",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-20T05:28:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3c65b841136ba708080acf0f81246f94b751024",
"body": "…hub actions workflow (#17)",
"is_bot": false,
"headline": "ci: fix code coverage not updating due to incorrect go version in git…",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-20T05:22:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf0fc9b895f58b42f4c626b9f046e971ecdfa43b",
"body": "…after next service resolution",
"is_bot": false,
"headline": "test: add test that checks if modified scope service remains changed …",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-19T05:07:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ddc39602fc9deb2b25a41f69b849224c5b0978e1",
"body": "- Update changelog",
"is_bot": true,
"headline": "chore(release): v4.0.1 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-08-19T04:53:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cd53bf56705e94489329691afc1b7236f17b858",
"body": null,
"is_bot": false,
"headline": "fix: ensure transient disposable services are disposed on scope close",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-19T04:49:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b121561dbca2c357fd3996e978021871e1cb900f",
"body": null,
"is_bot": false,
"headline": "test: replace t.Error/Fatal methods with testify assertions",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-19T01:23:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46d68ce7fcb4684ea98e264ee202b32c1a626bad",
"body": null,
"is_bot": false,
"headline": "ci: update golangci-lint",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-19T00:57:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d2e557b138bef2702ba5fe9cd0f332ce41a5a96",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Junior Yono <jryono123@gmail.com>",
"is_bot": true,
"headline": "chore(deps): bump amannn/action-semantic-pull-request from 5 to 6 (#13)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-08-19T00:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16a4c0354ac4216a19ec65c6ce0c6920823459c3",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Junior Yono <jryono123@gmail.com>",
"is_bot": true,
"headline": "chore(deps): bump actions/checkout from 4 to 5 (#12)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-08-19T00:14:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9aba1bd7b605a03f7e2f073632b0a8b422c21fbe",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump codecov/codecov-action from 4 to 5 (#11)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-08-19T00:13:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "001341d9dcb819b8566230c8c4f0a397fa1dda8f",
"body": null,
"is_bot": false,
"headline": "update workflow tokens",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-19T00:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa566514283bf31d1296bccc6e7dc14f7eb77429",
"body": null,
"is_bot": false,
"headline": "update release workflow to not use version.json",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:50:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5f05b8ef954ef0a5d0ad2c43dc9b60de2e88aab",
"body": null,
"is_bot": false,
"headline": "update changelog",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:47:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2781ed59bdb2ea0a2012fe93f4f1a6572f31454",
"body": "- Update changelog\n- Bump version",
"is_bot": true,
"headline": "chore(release): v4.0.0 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2025-08-18T23:40:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7809be9545e18bbecf9dcd7a89fb7e608f4224c",
"body": null,
"is_bot": false,
"headline": "update release workflow",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:40:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b184ac9a3f04bb876a624e74177f1baf7c6d698",
"body": null,
"is_bot": false,
"headline": "update release workflow",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:37:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8668269fa9123ecc33e09cd0193f3526566692a3",
"body": null,
"is_bot": false,
"headline": "delete version.json from release ci",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:28:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90bd9256a3bf2e85b09c48b24ebe892a2973f0b7",
"body": null,
"is_bot": false,
"headline": "fix ci issues",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:26:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6578f8e9e8ccb405419f37a2eab2289f4310a5c9",
"body": "- Update changelog\n- Bump version",
"is_bot": false,
"headline": "chore(release): v3.0.2 [skip ci]",
"author_name": "Conventional Changelog Action",
"author_login": null,
"committed_at": "2025-08-18T23:17:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0ba5696bc278741d7b4b4340767e8222a65a32d",
"body": "- Update changelog\n- Bump version [skip ci]",
"is_bot": false,
"headline": "chore(release): {tag} [skip ci]",
"author_name": "Conventional Changelog Action",
"author_login": null,
"committed_at": "2025-08-18T23:17:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15760a0e81fee46be3d082751d6fc9e8facd092d",
"body": null,
"is_bot": false,
"headline": "fix release workflow issues",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:16:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7e58df13537598333a2b20d8f5c43a0142105d6",
"body": "- Update changelog\n- Bump version",
"is_bot": false,
"headline": "chore(release): v1.6.1 [skip ci]",
"author_name": "Conventional Changelog Action",
"author_login": null,
"committed_at": "2025-08-18T23:06:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c12d204c8df90dd548b766bd7caefeadf0bebf85",
"body": "- Update changelog\n- Bump version [skip ci]",
"is_bot": false,
"headline": "chore(release): {tag} [skip ci]",
"author_name": "Conventional Changelog Action",
"author_login": null,
"committed_at": "2025-08-18T23:06:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60ce36359930d6eb0481ed65cd24fc03f1733971",
"body": null,
"is_bot": false,
"headline": "fix release workflow crash",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:06:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92cb6a8ed1a0ec7f6e7368beea9127b00bc76b9e",
"body": null,
"is_bot": false,
"headline": "update release workflow again",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:04:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3db72bb89c013367c5c4816e798f9fce2e2e8dbb",
"body": null,
"is_bot": false,
"headline": "update release workflow",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T23:01:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64047978c82d7646450d23275f32feba9898871f",
"body": null,
"is_bot": false,
"headline": "format layout html",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-18T22:55:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d83f2b1e508707f99641414733af0b2f93cd963",
"body": null,
"is_bot": false,
"headline": "fix linting issue",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T23:11:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fa284034685a3ad5b7dfca9a2c516f178d33338",
"body": null,
"is_bot": false,
"headline": "update docs",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T22:40:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf4844398ad59b40e7b8c2f1138118171c98f01e",
"body": null,
"is_bot": false,
"headline": "update docs",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T22:26:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e17a21210d958d34fdee641d23fd7145e5b53a32",
"body": null,
"is_bot": false,
"headline": "fix not being able to get scope from context",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T22:22:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f09100b62be8a538aa35ce7c9004d1b86bd3fb6d",
"body": null,
"is_bot": false,
"headline": "rename HasService to Contains and HasKeyedService to ContainsKeyed",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T22:21:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7fef3183fb21d476909e9a70612c0e7f819c7cf",
"body": null,
"is_bot": false,
"headline": "clean up createInstance method",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T20:17:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5fefbe93271e597be64aadb8e99c6e915e8682c",
"body": null,
"is_bot": false,
"headline": "cache instances that do not have a constructor",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T20:13:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e2b9bcff125eb5eca253ba0d6cb2415209297c4",
"body": null,
"is_bot": false,
"headline": "refactor instance caching",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T20:10:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ad20ba066f1d95bc365bd219083e052efe14953",
"body": null,
"is_bot": false,
"headline": "refactor",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T19:09:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7ff4f6b9fc461d6321075cbe80a79135925529b",
"body": null,
"is_bot": false,
"headline": "removed unused property",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T18:23:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdacdc8f25c188a01800e1b3fd817d26a332d04e",
"body": null,
"is_bot": false,
"headline": "add permissions to workflow",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T18:14:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13b133d14ac01294b87f85c9c6bca17be58adf89",
"body": null,
"is_bot": false,
"headline": "fix linting errors",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T18:12:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c663e715b86b7f93fc231e3aa189328a9b7ed57c",
"body": null,
"is_bot": false,
"headline": "add tests/docs for groups with mixed lifetimes",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T18:10:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09f0174b9f1fb9651af3274491dd6056031a47da",
"body": null,
"is_bot": false,
"headline": "remove decorator",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T17:55:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "998a6cda9efa32e29dbca6899236de5ffda3ded3",
"body": null,
"is_bot": false,
"headline": "fix all tests",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T17:45:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39347ce6bdc18b13f3311f8be82733a1bd00408a",
"body": null,
"is_bot": false,
"headline": "fix scope ctx test",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T16:43:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54ac6765fa3d6d590f6f985af5670bb96bc25bec",
"body": null,
"is_bot": false,
"headline": "add newScope method",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T16:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c46c816bcf3e35163c30c0295cb074d2ee7a05f",
"body": null,
"is_bot": false,
"headline": "register internal services when building collection",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T16:22:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a984edf525786b22ac7c772f2ec6f51f96c776e1",
"body": null,
"is_bot": false,
"headline": "tidy up docs",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T07:14:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "222343910db63b4063037d4de1237b694fa37712",
"body": null,
"is_bot": false,
"headline": "fix lifetime tests",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T06:36:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75b2cfd3408b3528ce8a4f09ccaa8a47a4684172",
"body": null,
"is_bot": false,
"headline": "fix security issues",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T06:16:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f37199a47d9d2cc2c850f7af84f5ae05291b2b03",
"body": null,
"is_bot": false,
"headline": "do not allow transient instances to depend on scoped instances",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T05:58:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2979f10f4dab8edcab77ec1741a00931018aaa9",
"body": null,
"is_bot": false,
"headline": "add comments",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T05:29:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5948270cdcb2e2cc65cafdbf86377f317b259824",
"body": null,
"is_bot": false,
"headline": "add tests",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T05:18:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0283681aa1846d13396f66229e884eed4449ce03",
"body": null,
"is_bot": false,
"headline": "fix linting issues",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T00:16:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1123ec4e8951fa538941e335f8c33150747a717b",
"body": null,
"is_bot": false,
"headline": "update ci rules",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-17T00:03:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28321c8e7ad23df66e06f10e4019b0fa58064bd4",
"body": null,
"is_bot": false,
"headline": "update ci rules",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-16T23:56:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab107cf79412ff3e46a6d2fc9357eb3a2605f4f5",
"body": null,
"is_bot": false,
"headline": "downgrade go version to 1.24.6",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-16T23:42:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c73e124af53c07c6dcdd850ba26c5a25137dad80",
"body": null,
"is_bot": false,
"headline": "downgrade golangci/golangci-lint-action to v6",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-16T23:40:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21265a1524805c66dfe8d7c2f59508ffcfb9aba9",
"body": null,
"is_bot": false,
"headline": "fix parsing issue with go test",
"author_name": "Junior Yono",
"author_login": "junioryono",
"committed_at": "2025-08-16T23:35:59Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 40,
"commits_last_year": 148,
"latest_release_at": "2026-07-18T16:26:19Z",
"latest_release_tag": "v5.1.0",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 11,
"days_since_latest_release": 8,
"mean_days_between_releases": 35.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 100,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/junioryono/godi/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi/chi/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/chi/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi/gin/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/gin/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi/echo/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/echo/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi/http/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/http/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi/huma/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/huma/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi/fiber/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi/fiber/v5",
"is_deprecated": false,
"latest_version": "v5.1.0",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T16:20:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
},
{
"name": "github.com/junioryono/godi",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/junioryono/godi",
"is_deprecated": false,
"latest_version": "v1.6.2",
"repository_url": "https://github.com/junioryono/godi",
"versions_count": 17,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2025-07-17T03:53:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 374
}
]
},
"popularity": {
"forks": 2,
"stars": 75,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2025-07-11",
"count": 1
},
{
"date": "2026-06-07",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": null,
"open_issues_and_prs": 8
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"docs/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"benchmarks/go.mod",
"chi/go.mod",
"echo/go.mod",
"fiber/go.mod",
"gin/go.mod",
"go.mod",
"http/go.mod",
"huma/go.mod",
"integrationtests/go.mod"
],
"largest_source_bytes": 44999,
"source_files_sampled": 41,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"benchmarks/go.mod",
"chi/go.mod",
"docs/requirements.txt",
"echo/go.mod",
"fiber/go.mod",
"gin/go.mod",
"go.mod",
"http/go.mod",
"huma/go.mod",
"integrationtests/go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.23.0",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 10,
"advisory_ids": [
"GHSA-45gg-vh54-h5m9",
"GHSA-5cgq-3rg8-m6cv",
"GHSA-78mq-xcr3-xm33",
"GHSA-89gr-r52h-f8rx",
"GHSA-9m57-25v3-79x9",
"GHSA-f5wc-c3c7-36mc",
"GHSA-f6x5-jh6r-wrfv",
"GHSA-hcg3-q754-cr77",
"GHSA-j5w8-q4qc-rx2x",
"GHSA-jppx-rxg9-jmrx"
],
"fixed_version": "0.52.0",
"advisory_count": 36,
"oldest_advisory_days": 592
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.31.0",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 10,
"advisory_ids": [
"GHSA-45gg-vh54-h5m9",
"GHSA-5cgq-3rg8-m6cv",
"GHSA-78mq-xcr3-xm33",
"GHSA-89gr-r52h-f8rx",
"GHSA-9m57-25v3-79x9",
"GHSA-f5wc-c3c7-36mc",
"GHSA-f6x5-jh6r-wrfv",
"GHSA-hcg3-q754-cr77",
"GHSA-j5w8-q4qc-rx2x",
"GHSA-jppx-rxg9-jmrx"
],
"fixed_version": "0.52.0",
"advisory_count": 34,
"oldest_advisory_days": 516
},
{
"name": "github.com/gofiber/fiber/v2",
"direct": true,
"version": "v2.52.6",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.7,
"advisory_ids": [
"GHSA-68rr-p4fp-j59v",
"GHSA-gcfq-8gqf-4876",
"GHSA-hg3g-gphw-5hhm",
"GHSA-mrq8-rjmw-wpq3",
"GHSA-qjv7-627w-8qjv",
"GHSA-qx2q-88mx-vhg7",
"GO-2025-3706",
"GO-2025-3845",
"GO-2026-4471",
"GO-2026-4543"
],
"fixed_version": "3.3.0",
"advisory_count": 11,
"oldest_advisory_days": 430
},
{
"name": "urllib3",
"direct": false,
"version": "2.4.0",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-2xpw-w6gg-jr37",
"GHSA-38jv-5279-wg99",
"GHSA-48p4-8xcf-vxj5",
"GHSA-gm62-xv2j-4w53",
"GHSA-pq67-6m6q-mj2v",
"GHSA-qccp-gfcp-xxvc",
"PYSEC-2026-141",
"PYSEC-2026-1994",
"PYSEC-2026-1996",
"PYSEC-2026-1997"
],
"fixed_version": "2.7.0",
"advisory_count": 12,
"oldest_advisory_days": 403
},
{
"name": "github.com/gofiber/fiber/v2",
"direct": true,
"version": "v2.52.12",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-gcfq-8gqf-4876",
"GHSA-qjv7-627w-8qjv",
"GO-2026-5585"
],
"fixed_version": "3.3.0",
"advisory_count": 3,
"oldest_advisory_days": 82
},
{
"name": "github.com/quic-go/quic-go",
"direct": false,
"version": "v0.59.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-vvgj-x9jq-8cj9",
"GO-2026-5676"
],
"fixed_version": "0.59.1",
"advisory_count": 2,
"oldest_advisory_days": 53
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.25.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-5cv4-jp36-h3mw",
"GHSA-qxp5-gwg8-xv66",
"GHSA-vvgc-356p-c3xw",
"GO-2024-3333",
"GO-2025-3503",
"GO-2025-3595",
"GO-2026-4440",
"GO-2026-4441",
"GO-2026-4918",
"GO-2026-5025"
],
"fixed_version": "1.26.3",
"advisory_count": 16,
"oldest_advisory_days": 585
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.33.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-5cv4-jp36-h3mw",
"GHSA-qxp5-gwg8-xv66",
"GHSA-vvgc-356p-c3xw",
"GO-2025-3503",
"GO-2025-3595",
"GO-2026-4440",
"GO-2026-4441",
"GO-2026-4918",
"GO-2026-5025",
"GO-2026-5026"
],
"fixed_version": "1.26.3",
"advisory_count": 15,
"oldest_advisory_days": 501
},
{
"name": "idna",
"direct": false,
"version": "3.10",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-65pc-fj4g-8rjx",
"PYSEC-2026-215"
],
"fixed_version": "3.15",
"advisory_count": 2,
"oldest_advisory_days": 68
},
{
"name": "requests",
"direct": false,
"version": "2.32.3",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.5,
"advisory_ids": [
"GHSA-9hjg-9r4m-mvj7",
"GHSA-gc5v-m9x4-r6x2",
"PYSEC-2026-1872",
"PYSEC-2026-2275"
],
"fixed_version": "2.33.0",
"advisory_count": 4,
"oldest_advisory_days": 412
},
{
"name": "pygments",
"direct": false,
"version": "2.19.1",
"severity": "low",
"ecosystem": "pypi",
"cvss_score": 3.3,
"advisory_ids": [
"GHSA-5239-wwwm-4pmq",
"PYSEC-2026-2987"
],
"fixed_version": "2.20.0",
"advisory_count": 2,
"oldest_advisory_days": 126
},
{
"name": "github.com/go-chi/chi/v5",
"direct": true,
"version": "v5.2.5",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5774",
"GO-2026-5775",
"GO-2026-5777"
],
"fixed_version": "5.3.0",
"advisory_count": 3,
"oldest_advisory_days": 2
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.54.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5932"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 19
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.20.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 65
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.28.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 65
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.15.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 12
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.21.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 12
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"low": 1,
"high": 2,
"unknown": 6,
"critical": 2,
"moderate": 6
},
"advisory_count": 145,
"affected_count": 17,
"assessed_count": 108,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 3
},
"ecosystems": [
"go",
"pypi"
],
"dependencies": [
{
"name": "github.com/junioryono/godi/v5",
"manifest": "chi/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "chi/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/junioryono/godi/v5",
"manifest": "echo/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.0"
},
{
"name": "github.com/labstack/echo/v4",
"manifest": "echo/go.mod",
"ecosystem": "go",
"version_constraint": "v4.13.3"
},
{
"name": "github.com/stretchr/testify",
"manifest": "echo/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/gofiber/fiber/v2",
"manifest": "fiber/go.mod",
"ecosystem": "go",
"version_constraint": "v2.52.6"
},
{
"name": "github.com/junioryono/godi/v5",
"manifest": "fiber/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "fiber/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/gin-gonic/gin",
"manifest": "gin/go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.0"
},
{
"name": "github.com/junioryono/godi/v5",
"manifest": "gin/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "gin/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/junioryono/godi/v5",
"manifest": "http/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "http/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/danielgtaylor/huma/v2",
"manifest": "huma/go.mod",
"ecosystem": "go",
"version_constraint": "v2.37.3"
},
{
"name": "github.com/junioryono/godi/v5",
"manifest": "huma/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "huma/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/danielgtaylor/huma/v2",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v2.37.3"
},
{
"name": "github.com/gin-gonic/gin",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "github.com/go-chi/chi/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.2.5"
},
{
"name": "github.com/gofiber/fiber/v2",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v2.52.12"
},
{
"name": "github.com/junioryono/godi/chi/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/junioryono/godi/echo/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/junioryono/godi/fiber/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/junioryono/godi/gin/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/junioryono/godi/http/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/junioryono/godi/huma/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/junioryono/godi/v5",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v5.0.1"
},
{
"name": "github.com/labstack/echo/v4",
"manifest": "integrationtests/go.mod",
"ecosystem": "go",
"version_constraint": "v4.15.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/danielgtaylor/huma/v2",
"direct": true,
"version": "v2.37.3",
"ecosystem": "go"
},
{
"name": "github.com/gin-gonic/gin",
"direct": true,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/gin-gonic/gin",
"direct": true,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "github.com/go-chi/chi/v5",
"direct": true,
"version": "v5.2.5",
"ecosystem": "go"
},
{
"name": "github.com/gofiber/fiber/v2",
"direct": true,
"version": "v2.52.12",
"ecosystem": "go"
},
{
"name": "github.com/gofiber/fiber/v2",
"direct": true,
"version": "v2.52.6",
"ecosystem": "go"
},
{
"name": "github.com/labstack/echo/v4",
"direct": true,
"version": "v4.13.3",
"ecosystem": "go"
},
{
"name": "github.com/labstack/echo/v4",
"direct": true,
"version": "v4.15.0",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "github.com/andybalholm/brotli",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/andybalholm/brotli",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/bytedance/gopkg",
"direct": false,
"version": "v0.1.3",
"ecosystem": "go"
},
{
"name": "github.com/bytedance/sonic",
"direct": false,
"version": "v1.11.6",
"ecosystem": "go"
},
{
"name": "github.com/bytedance/sonic",
"direct": false,
"version": "v1.15.0",
"ecosystem": "go"
},
{
"name": "github.com/bytedance/sonic/loader",
"direct": false,
"version": "v0.1.1",
"ecosystem": "go"
},
{
"name": "github.com/bytedance/sonic/loader",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/clipperhouse/uax29/v2",
"direct": false,
"version": "v2.7.0",
"ecosystem": "go"
},
{
"name": "github.com/cloudwego/base64x",
"direct": false,
"version": "v0.1.4",
"ecosystem": "go"
},
{
"name": "github.com/cloudwego/base64x",
"direct": false,
"version": "v0.1.6",
"ecosystem": "go"
},
{
"name": "github.com/cloudwego/iasm",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/gabriel-vasile/mimetype",
"direct": false,
"version": "v1.4.13",
"ecosystem": "go"
},
{
"name": "github.com/gabriel-vasile/mimetype",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/gin-contrib/sse",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/gin-contrib/sse",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/go-playground/locales",
"direct": false,
"version": "v0.14.1",
"ecosystem": "go"
},
{
"name": "github.com/go-playground/universal-translator",
"direct": false,
"version": "v0.18.1",
"ecosystem": "go"
},
{
"name": "github.com/go-playground/validator/v10",
"direct": false,
"version": "v10.20.0",
"ecosystem": "go"
},
{
"name": "github.com/go-playground/validator/v10",
"direct": false,
"version": "v10.30.1",
"ecosystem": "go"
},
{
"name": "github.com/goccy/go-json",
"direct": false,
"version": "v0.10.2",
"ecosystem": "go"
},
{
"name": "github.com/goccy/go-json",
"direct": false,
"version": "v0.10.5",
"ecosystem": "go"
},
{
"name": "github.com/goccy/go-yaml",
"direct": false,
"version": "v1.19.2",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/json-iterator/go",
"direct": false,
"version": "v1.1.12",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "v1.17.9",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "v1.18.4",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/cpuid/v2",
"direct": false,
"version": "v2.2.7",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/cpuid/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/labstack/gommon",
"direct": false,
"version": "v0.4.2",
"ecosystem": "go"
},
{
"name": "github.com/leodido/go-urn",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.13",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.14",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.16",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/concurrent",
"direct": false,
"version": "v0.0.0-20180306012644-bacd9c7ef1dd",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/reflect2",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/pelletier/go-toml/v2",
"direct": false,
"version": "v2.2.2",
"ecosystem": "go"
},
{
"name": "github.com/pelletier/go-toml/v2",
"direct": false,
"version": "v2.2.4",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/qpack",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/quic-go",
"direct": false,
"version": "v0.59.0",
"ecosystem": "go"
},
{
"name": "github.com/rivo/uniseg",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/samber/do/v2",
"direct": false,
"version": "v2.0.0",
"ecosystem": "go"
},
{
"name": "github.com/samber/go-type-to-string",
"direct": false,
"version": "v1.8.0",
"ecosystem": "go"
},
{
"name": "github.com/twitchyliquid64/golang-asm",
"direct": false,
"version": "v0.15.1",
"ecosystem": "go"
},
{
"name": "github.com/ugorji/go/codec",
"direct": false,
"version": "v1.2.12",
"ecosystem": "go"
},
{
"name": "github.com/ugorji/go/codec",
"direct": false,
"version": "v1.3.1",
"ecosystem": "go"
},
{
"name": "github.com/valyala/bytebufferpool",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/valyala/fasthttp",
"direct": false,
"version": "v1.51.0",
"ecosystem": "go"
},
{
"name": "github.com/valyala/fasthttp",
"direct": false,
"version": "v1.69.0",
"ecosystem": "go"
},
{
"name": "github.com/valyala/fasttemplate",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/valyala/tcplisten",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/dig",
"direct": false,
"version": "v1.19.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/arch",
"direct": false,
"version": "v0.24.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/arch",
"direct": false,
"version": "v0.8.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.23.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.54.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.25.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.33.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.56.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.28.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.15.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.21.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.40.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.34.1",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "babel",
"direct": false,
"version": "2.17.0",
"ecosystem": "pypi"
},
{
"name": "certifi",
"direct": false,
"version": "2025.1.31",
"ecosystem": "pypi"
},
{
"name": "chardet",
"direct": false,
"version": "5.2.0",
"ecosystem": "pypi"
},
{
"name": "commonmark",
"direct": false,
"version": "0.9.1",
"ecosystem": "pypi"
},
{
"name": "docutils",
"direct": false,
"version": "0.20.1",
"ecosystem": "pypi"
},
{
"name": "idna",
"direct": false,
"version": "3.10",
"ecosystem": "pypi"
},
{
"name": "imagesize",
"direct": false,
"version": "1.4.1",
"ecosystem": "pypi"
},
{
"name": "jinja2",
"direct": false,
"version": "3.1.6",
"ecosystem": "pypi"
},
{
"name": "markupsafe",
"direct": false,
"version": "3.0.2",
"ecosystem": "pypi"
},
{
"name": "myst-parser",
"direct": false,
"version": "3.0.1",
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": false,
"version": "25.0",
"ecosystem": "pypi"
},
{
"name": "pygments",
"direct": false,
"version": "2.19.1",
"ecosystem": "pypi"
},
{
"name": "pyparsing",
"direct": false,
"version": "3.2.3",
"ecosystem": "pypi"
},
{
"name": "pytz",
"direct": false,
"version": "2025.2",
"ecosystem": "pypi"
},
{
"name": "requests",
"direct": false,
"version": "2.32.3",
"ecosystem": "pypi"
},
{
"name": "snowballstemmer",
"direct": false,
"version": "2.2.0",
"ecosystem": "pypi"
},
{
"name": "sphinx",
"direct": false,
"version": "7.4.7",
"ecosystem": "pypi"
},
{
"name": "sphinx-copybutton",
"direct": false,
"version": "0.5.2",
"ecosystem": "pypi"
},
{
"name": "sphinx-rtd-theme",
"direct": false,
"version": "3.0.2",
"ecosystem": "pypi"
},
{
"name": "sphinxcontrib-applehelp",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "sphinxcontrib-devhelp",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "sphinxcontrib-htmlhelp",
"direct": false,
"version": "2.1.0",
"ecosystem": "pypi"
},
{
"name": "sphinxcontrib-jsmath",
"direct": false,
"version": "1.0.1",
"ecosystem": "pypi"
},
{
"name": "sphinxcontrib-qthelp",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "sphinxcontrib-serializinghtml",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "sphinxext-rediraffe",
"direct": false,
"version": "0.2.7",
"ecosystem": "pypi"
},
{
"name": "urllib3",
"direct": false,
"version": "2.4.0",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 108,
"direct_count": 9,
"indirect_count": 99
}
},
"maintainership": {
"issues": {
"open_prs": 8,
"merged_prs": 17,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 2,
"closed_unmerged_prs": 16
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "junioryono",
"commits": 208,
"avatar_url": "https://avatars.githubusercontent.com/u/19849174?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"dependency-review.yml",
"pr-check.yml",
"pr-labeler.yml",
"release.yml",
"tag.yml",
"test.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 8,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/28 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 6,
"reason": "8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 8,
"reason": "dependency not pinned by hash detected -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 8,
"reason": "SAST tool is not run on all commits -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "54 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "dfe475678533d3322f8033cb60f9fd3c3b89eae3",
"ran_at": "2026-07-27T03:27:00Z",
"aggregate_score": 6.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-23T04:35:43Z",
"oldest_open_prs": [
{
"number": 36,
"created_at": "2026-07-18T18:22:53Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 37,
"created_at": "2026-07-18T18:22:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 38,
"created_at": "2026-07-18T18:22:56Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 39,
"created_at": "2026-07-18T18:22:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 41,
"created_at": "2026-07-18T18:23:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 42,
"created_at": "2026-07-18T18:24:12Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 43,
"created_at": "2026-07-23T04:33:28Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 44,
"created_at": "2026-07-23T04:34:01Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-18T16:20:17Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/junioryono/godi",
"host": "github.com",
"name": "godi",
"owner": "junioryono"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"security": 64,
"vitality": 81,
"community": 59,
"governance": 52,
"engineering": 86
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 81,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"commits_last_year": 148,
"human_commit_share": 0.93,
"days_since_last_push": 3,
"active_weeks_last_year": 11
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "11/52 weeks with commits",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 11
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "148 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 148
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 40,
"latest_release_tag": "v5.1.0",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 35.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "40 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 40
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~35.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 35.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 8,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 8 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 8
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 59,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"forks": 2,
"stars": 75,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "75 stars",
"points": 30.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 75
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 52,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"merged_prs": 17,
"open_issues": 0,
"closed_issues": 2,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 16
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "17/33 decided PRs merged",
"points": 19.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 17,
"decided": 33
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/28 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 49,
"inputs": {
"followers": 6,
"owner_type": "User",
"is_verified": null,
"owner_login": "junioryono",
"public_repos": 31,
"account_age_days": 3699
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "6 followers of junioryono",
"points": 6.1,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 6,
"login": "junioryono"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "31 public repos, account ~10 yr old",
"points": 23,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 31
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/junioryono/godi/v5",
"github.com/junioryono/godi/chi/v5",
"github.com/junioryono/godi/gin/v5",
"github.com/junioryono/godi/echo/v5",
"github.com/junioryono/godi/http/v5",
"github.com/junioryono/godi/huma/v5",
"github.com/junioryono/godi/fiber/v5",
"github.com/junioryono/godi"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "8 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 8,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "17 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 17
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "6 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 6
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://godi.readthedocs.io/en/latest/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://godi.readthedocs.io/en/latest/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 64,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 65,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 6.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/28 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "54 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 108 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 108
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 59,
"inputs": {
"source": "osv",
"advisories": 145,
"affected_packages": 17,
"assessed_packages": 108,
"unassessed_packages": 0,
"affected_by_severity": "critical 2, high 2, moderate 6, low 1, unknown 6",
"direct_affected_packages": 3
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "3 affected: github.com/gofiber/fiber/v2 v2.52.6 (high 7.7), github.com/gofiber/fiber/v2 v2.52.12 (moderate 5.3), github.com/go-chi/chi/v5 v5.2.5 (unknown)",
"points": 11.1,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 3,
"packages": "github.com/gofiber/fiber/v2 v2.52.6 (high 7.7), github.com/gofiber/fiber/v2 v2.52.12 (moderate 5.3), github.com/go-chi/chi/v5 v5.2.5 (unknown)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 430 days ago",
"points": 33.5,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 1,
"oldest": 430
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 108,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 69,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.548,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "51 of 93 human commits state their intent (structured subject or explanatory body)",
"points": 29.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 51,
"sampled": 93
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"docs/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.25,
"toolchain_manifests": [
"benchmarks/go.mod",
"chi/go.mod",
"echo/go.mod",
"fiber/go.mod",
"gin/go.mod",
"go.mod",
"http/go.mod",
"huma/go.mod",
"integrationtests/go.mod"
],
"dependency_bot_commit_share": 0.05
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, docs/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, docs/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "25 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 25,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "5 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 5,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 44999,
"source_files_sampled": 41,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/41 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 41,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-27T03:27:07.923140Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/junioryono/godi.svg",
"full_name": "junioryono/godi",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.