klever-io / klever-go

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

Full resolved dependency set from the GitHub dependency graph: 54 direct and 148 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 202 packages, which also include development and test pins that never ship: 5 carry known advisories, of which 3 are direct.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [
        "blockchain",
        "consensus",
        "cryptocurrency",
        "decentralized",
        "defi",
        "dpos",
        "golang",
        "klever",
        "kvm",
        "node",
        "p2p",
        "smart-contracts",
        "wasm",
        "web3",
        "webassembly"
      ],
      "is_fork": false,
      "size_kb": 48855,
      "has_wiki": false,
      "homepage": "https://klever.org",
      "languages": {
        "C": 139851,
        "Go": 12430734,
        "Rust": 5341,
        "Shell": 24149,
        "Makefile": 20854,
        "Dockerfile": 3550,
        "WebAssembly": 734
      },
      "pushed_at": "2026-07-24T17:39:42Z",
      "created_at": "2024-03-13T16:35:35Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-24T20:42:17Z",
      "description": "Official Go implementation of the Klever blockchain protocol — high-performance node, KVM smart contracts, and CLI tools",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "GPL-3.0",
      "default_branch": "develop",
      "license_spdx_raw": "GPL-3.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://klever.org",
      "name": "Klever",
      "type": "Organization",
      "login": "klever-io",
      "company": null,
      "location": "Switzerland",
      "followers": 106,
      "avatar_url": "https://avatars.githubusercontent.com/u/65120980?v=4",
      "created_at": "2020-05-10T13:59:49Z",
      "is_verified": null,
      "public_repos": 178,
      "account_age_days": 2269
    },
    "license": {
      "state": "standard",
      "spdx_id": "GPL-3.0",
      "raw_spdx": "GPL-3.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.7.20",
          "kind": "patch",
          "published_at": "2026-07-20T11:21:43Z"
        },
        {
          "tag": "v1.7.19",
          "kind": "patch",
          "published_at": "2026-06-22T14:56:59Z"
        },
        {
          "tag": "v1.7.18",
          "kind": "patch",
          "published_at": "2026-06-02T14:24:28Z"
        },
        {
          "tag": "v1.7.17",
          "kind": "patch",
          "published_at": "2026-05-13T15:20:04Z"
        },
        {
          "tag": "v1.7.16",
          "kind": "patch",
          "published_at": "2026-03-17T20:53:56Z"
        },
        {
          "tag": "v1.7.15",
          "kind": "patch",
          "published_at": "2025-11-04T12:34:06Z"
        },
        {
          "tag": "v1.7.14",
          "kind": "patch",
          "published_at": "2025-09-26T19:04:12Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "b7276d241e1897deeb1fbee52588f593d2de325f",
          "body": "…r) (#95)\n\n* fix: harden GNU_STACK on Linux/amd64 builds (validator/operator/keygenerator)\n\nherumi/bls-go-binary's vendored linux/amd64 archive ships object members\n(bint-x64-amd64.o, static_code.o) without a .note.GNU-stack section, causing\nGNU ld to mark the resulting binary's stack executable. Co\n[…]\nith `readelf -lW` showing GNU_STACK RW (not RWE) and\n`readelf -d` showing only $ORIGIN in RUNPATH, no @executable_path\ngarbage entry; `make -n newkey` (the separate GORUN path) resolves\ncorrectly too.",
          "is_bot": false,
          "headline": "fix: harden GNU_STACK on Linux builds (validator/operator/keygenerato…",
          "author_name": "Maik",
          "author_login": "Test0rMaik",
          "committed_at": "2026-07-24T17:39:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8f3c71dd7acf9522467d1869f25be2b96f28201a",
          "body": "Resolves all 16 open Dependabot alerts on go.mod:\n\n- golang.org/x/crypto v0.50.0 -> v0.52.0 (13 alerts, 7 critical):\n  SSH auth bypass via unenforced @revoked status, missing key\n  constraint enforcement, agent constraint forwarding, server\n  deadlock on unexpected client responses, infinite loop on\n[…]\nGHSA-5cv4-jp36-h3mw).\n- github.com/quic-go/quic-go v0.59.0 -> v0.59.1: HTTP/3 QPACK\n  trailer memory exhaustion (GHSA-vvgj-x9jq-8cj9).\n\nTransitive bumps: x/sys v0.45.0, x/term v0.43.0, x/text v0.37.0.",
          "is_bot": false,
          "headline": "fix(deps): update x/crypto, x/net and quic-go to patched versions (#87)",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-07-20T20:19:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0b70b0f1a1f5d95ac07c2038c227db7f18976a2a",
          "body": "…-slow-vm-hooks-continue-running\n\n[KLC-2517][KLR-14] fix: Bound BigFloatPow/BigIntPow gas so timed-out slow hooks cannot do unbounded free work",
          "is_bot": false,
          "headline": "Merge pull request #9 from klever-io/klc-2517-certik-klr-14-timed-out…",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-16T18:26:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "41647591aa707a0897d1ecb155df08e216056a57",
          "body": "…ign in BigFloatPow zero-base short-circuit, clarified timeout wrapper comment, added regression tests",
          "is_bot": false,
          "headline": "fork gated negative exponent fault order in BigIntPow, preserved -0 s…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-07-13T15:46:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb02c2f13e536167d1214eed89f480f749f6466b",
          "body": "…nical-nft-kda-transfer-amounts\n\n[KLC-2534][KLR-15] Fix: Validate nft transfer amount",
          "is_bot": false,
          "headline": "Merge pull request #13 from klever-io/KLC-2534-certik-klr-15-non-cano…",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-13T15:42:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24a2737dbd51f40596b0d6dc45f0d60e092eee92",
          "body": null,
          "is_bot": false,
          "headline": "added error handling to BigFloatPow",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-07-13T15:39:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5904bedcc66970eb4a3e9e5d85069a16d31abff8",
          "body": "…r amount",
          "is_bot": false,
          "headline": "switched from enforcing nft value to erroing out on non 1 nft transfe…",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-07-13T14:57:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11606a90ccc289f93d0175994733229b332d9cff",
          "body": "…lidate-bls-key\n\nValidate BLS public key on validator register and update (GHSA-9wh6-9hq7-9688)",
          "is_bot": false,
          "headline": "Merge pull request #18 from klever-io/security/GHSA-9wh6-9hq7-9688-va…",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-13T14:45:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "899e8c7a32f88fa2fa32a812aa299263e11eefae",
          "body": "* feat: add tests for FPR reward loss scenarios and update claim logic for unstaked buckets\n\n* feat: add tests for FPR claim scenarios before and after maturity to validate fix\n\n* test: address review nits\n\n- rename staking post-fix regression test for symmetry\n- use MaxUint32 as the disabled FixAuditChangesV3 sentinel\n- add exact unstake-epoch FPR claim boundary coverage\n- remove stray blank line in runStakingContractTx",
          "is_bot": false,
          "headline": "[KLC-2511][KLR-08] Unstaked FPR buckets permanently lose (#11)",
          "author_name": "RomuloSiebra",
          "author_login": "RomuloSiebra",
          "committed_at": "2026-07-13T14:41:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d89d435607e845da15417594f20a97a87cc0a816",
          "body": "* Gate account permission validation behind V3 fork\n\n* Add pre-fork account permission validation tests\n\n* Extract accumulateSignerWeight to reduce validateSigners complexity",
          "is_bot": false,
          "headline": "[KLC-2545] Gate account permission validation behind V3 fork (#15)",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-13T14:40:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "063bb3ed98f9a84a4b1f7286680613a5fc3c91b2",
          "body": "…c) (#16)\n\nBuy lacked the IsClaimed guard that Claim and CancelOrder enforce. A seller\ncould settle a resting-bid auction early via Claim's seller-accept branch,\nwhich sets IsClaimed=true but, unlike every other settle path, leaves EndTime\nin the future. The result is a \"zombie\" order that still rea\n[…]\nure epoch and stays\nreplay-safe.\n\nAdd a regression test covering both fork states: post-fork rejects the bid\nwith no funds moved; pre-fork preserves the legacy behaviour and shows the\nvictim stranded.",
          "is_bot": false,
          "headline": "fix(market): reject Buy on already-claimed orders (GHSA-26r5-4mm2-px5…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-07-13T14:39:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f54ea730cc80a3ba4f906586a7d221b281548190",
          "body": "…cape-account-name\n\nEscape account name in Elasticsearch bulk serialization (GHSA-7c7c-373r-gfjj)",
          "is_bot": false,
          "headline": "Merge pull request #19 from klever-io/security/GHSA-7c7c-373r-gfjj-es…",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-13T13:13:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f00366768b24be18fa7ae9de2e1905caa8b350af",
          "body": "The indexer built the Elasticsearch _bulk painless script line by splicing\nthe account name directly into JSON with fmt.Sprintf and no escaping. An\non-chain account name is fully attacker-controlled and only validated for\nUTF-8 and length, so a name containing quotes or newlines could break out\nof t\n[…]\ne with converters.JsonEscape before splicing it into the\nbulk params, mirroring how _id fields are already handled in the same\nfile. This is an off-chain indexer fix with no effect on consensus state.",
          "is_bot": false,
          "headline": "Escape account name in Elasticsearch bulk serialization",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-07-13T05:16:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "642da967893884d635986fed3c43bdc679cbfe8f",
          "body": "Validator registration and config updates accepted arbitrary bytes as a\nBLS public key and stored them without checking they form a valid curve\npoint. A key that is not a valid BLS12-381 G2 point fails deserialization\nin the consensus multi-signer's group reset, cancelling the slot for\nevery node in\n[…]\nic.\n\nThe validator is an injectable dependency that defaults to the real\nBLS12-381 validator when not supplied, so the runtime is protected\nwithout threading new wiring through the construction chain.",
          "is_bot": false,
          "headline": "Validate BLS public key on validator register and update",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-07-13T04:53:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6972e23b2dbe10463a4e6405d718a7b7195d8815",
          "body": "…tive-account-permission-thresholds-let-zero-weight-listed-signers-authorize-protected-operations\n\n[KLC-2512][KLR-09] Fix: Reject non-positive signer weights and threshold at account permission validation",
          "is_bot": false,
          "headline": "Merge pull request #12 from klever-io/KLC-2512-certik-klr-09-non-posi…",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-10T18:10:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e91e1cfc55b0e9a2bf5fbe7381cf8fe94022be76",
          "body": "…managed-buffer-storage-keys-allow-protected-kda-balance-writes\n\n[KLC-2523][Certik KLR-16] Prevent forged writes to protected KDA storage keys",
          "is_bot": false,
          "headline": "Merge pull request #14 from klever-io/KLC-2523-certik-klr-16-mutable-…",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-10T18:08:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65f424fd92b981907565ce5c00d6770cec187628",
          "body": null,
          "is_bot": false,
          "headline": "Extract storage update loop from processSCOutputAccounts",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-10T16:22:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca89e9b7f445bcd4e11f7cc67f8782638cf90264",
          "body": null,
          "is_bot": false,
          "headline": "Use bytes.Clone to copy storage update keys",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-10T15:19:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36a59ec2f604443dd49e9f8059ebd953c211d35b",
          "body": null,
          "is_bot": false,
          "headline": "Provide fork controller stub to storage context test hosts",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-10T15:19:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8abfd8ba042846a9f53d893f63d2c5a597864b91",
          "body": "Add an end-to-end host test that stores a value under an unprotected\nkey, mutates that same managed buffer to a protected KDA prefix, and\nasserts the persisted storage-update key stays the validated key and no\nprotected key is written. Without the key copy this test observes the\nforged KDA key inste\n[…]\nunts and asserts\na written protected-prefix key is rejected with ErrStoreProtectedKey,\nwhile read-only, regular, and VM-internal keys still persist, plus a\ntable covering the protected-key classifier.",
          "is_bot": false,
          "headline": "Cover protected-key storage guards with regression tests",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-10T14:22:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "028df52670bb4c87629f7225e81294277b5de3e8",
          "body": "processSCOutputAccounts saved every StorageUpdate.Offset with no prefix\ncheck, as the existing BUG note flagged. Add a defense-in-depth guard at\nthe persistence sink: reject written updates whose key targets a\nprotocol-protected prefix (KLEVER, KLV, KFI, KDA) that a contract can\nnever legitimately w\n[…]\nage still persists. Read-cache entries (Written=false) are left\nuntouched. Gated behind FixAuditChangesV3 so pre-fork state is preserved;\nafter the fork a forged protected write fails the transaction.",
          "is_bot": false,
          "headline": "Reject protected storage keys when persisting VM output",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-10T14:11:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "55bf50d1289b2c680b90943fc81a196dc95ec9dc",
          "body": "MBufferStorageStore passes the storage context a live managed-buffer\nslice. SetStorage validated the key once, but changeStorageUpdate,\nthe cached-read path, and getOldValue all stored that same slice in\nStorageUpdate.Offset without copying. A contract could then mutate the\nbuffer in place to a prot\n[…]\nt at all three sites. Gated behind\nFixAuditChangesV3: before the fork the key is still aliased so historical\nstate is unchanged; after the fork the persisted key is a stable copy of\nthe validated key.",
          "is_bot": false,
          "headline": "Copy storage keys before recording VM output updates",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-10T14:05:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8f75940696a926e6efa709504ca476f42a1e6ab5",
          "body": "…-guard\n\n[KLC-2513] Count KDA transfers only for transfer builtin functions",
          "is_bot": false,
          "headline": "Merge pull request #10 from klever-io/KLC-2513-usage-counter-transfer…",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-09T13:07:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb08b37c473bf24dc8522b0afe8ec82ca0d9c1ad",
          "body": "… separate function",
          "is_bot": false,
          "headline": "extract transaction interception's permission validation logic into a…",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-07-09T12:11:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98535aa7c349c0ae219e1a66f544a61fc9b99657",
          "body": "…dated/added tests",
          "is_bot": false,
          "headline": "added guards against 0 weight signers and 0 threshold permissions; up…",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-07-09T12:11:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "461251212b641e79ecb9bb33060796e12e0e5e14",
          "body": null,
          "is_bot": false,
          "headline": "fork gated behaviour, updated tests",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-07-09T12:09:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34b3f16a0500b39ccecc29d6816f93c8883986ff",
          "body": "…d changes",
          "is_bot": false,
          "headline": "reworked zero base handling in BigPow methods, removed context relate…",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-07-09T11:06:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04519edad7bff9f15d3cb86c7da447429b1e47c7",
          "body": "…ext validity check for writes into VM managed maps",
          "is_bot": false,
          "headline": "fixed zero-based gas calculation on BigIntPow/BigFloatPow, added cont…",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-07-09T11:06:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d95a9af60bb9f3353b4e0875c78a6f2a770a24cf",
          "body": null,
          "is_bot": false,
          "headline": "nit + goimports",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-07-09T11:00:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ecccc38ce27149c558ae075bd504f25f417629d9",
          "body": "…reflection into callValue map",
          "is_bot": false,
          "headline": "add nft transfer amount normalization and actualized transfer amount …",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-07-09T10:56:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2352e76c140243bace5362e09252f7d946edc1da",
          "body": "Inject core.ForkController into usageCounter and only apply the\ntransfer-builtin guard when FixAuditChangesV3 is active. Before the\nfork the legacy behavior is preserved (any transfer-shaped built-in\ncounts toward the transfer cap); after the fork only KleverTransfer\nis counted toward it.\n\nCover both fork states: transfer-shaped non-transfer built-ins and\nreal multi-transfers pre- and post-fork, plus the nil fork controller\nconstructor check.",
          "is_bot": false,
          "headline": "Gate transfer-count guard behind FixAuditChangesV3 fork",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-08T14:07:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e7c4f4c65fab882ac89cab91a2236ff68812174",
          "body": "* fix: reject oversized KDA/KLV transfer amounts\n\n* refactor: drop no-op forwarded-value normalization\n\n* fix: reject oversized transfer values on contract create path",
          "is_bot": false,
          "headline": "[KLC-2463][Certik KLR-02] Reject oversized KDA/KLV transfer amounts (#6)",
          "author_name": "Beroni",
          "author_login": "Beroni",
          "committed_at": "2026-07-08T13:26:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "608634e4054e168da4fc7764de8bf36e1355552e",
          "body": "…ct-argument-count\n\n[KLC-2479] [Certik] KLR-06 - Unbounded Indirect Argument Count Can Panic VM Execution Or Exhaust Host Memory Before Hook Handling",
          "is_bot": false,
          "headline": "Merge pull request #5 from klever-io/KLC-2479-KLR-06-unbounded-indire…",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-07T15:56:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83e32346132de62a09d4240bc18d9a8f22fd0c63",
          "body": "…contract-execution-can-invoke-protected-upgrade-lifecycle-hook\n\n[KLC-2510][Certik KLR-07]fix: block indirect dispatch from invoking upgrade hook",
          "is_bot": false,
          "headline": "Merge pull request #8 from klever-io/KLC-2510-certik-klr-07-indirect-…",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-07T15:53:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2911a8ea7c6f8575ac2e7f9e11cf4d5d2fe21eb0",
          "body": "[KLC-2457] feat(market): snapshot royalty into order at Sell",
          "is_bot": false,
          "headline": "Merge pull request #4 from klever-io/klc-2457-royalty-snapshot",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-07-07T15:10:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a43c726b1b54d25c9f640586c10855be219b396",
          "body": "…itmap-bits-can-satisfy-block-header-quorum-without-corresponding-aggregate-signers\n\n[KLC-2477][Certik KLR-04] Padding bitmap bits can satisfy block header quorum without corresponding aggregate signers",
          "is_bot": false,
          "headline": "Merge pull request #3 from klever-io/KLC-2477-certik-klr-04-padding-b…",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-07T14:21:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82e16f7c5b21199a19cb89ed8d4a97d260b4c537",
          "body": "…able-recipientaddr\n\n[KLC-2478] Authorize permission update against caller",
          "is_bot": false,
          "headline": "Merge pull request #2 from klever-io/KLC-2478-permission-update-spoof…",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-07T13:52:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc6f00f6b4c639d87a558d52b323eb4c22de2399",
          "body": "[KLC-2475] Bound signer count in decodeSigners",
          "is_bot": false,
          "headline": "Merge pull request #1 from klever-io/KLC-2475-bound-signer-count",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-07T13:35:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74aa8d03b03651652d96cddf37acd0bf157dcc0b",
          "body": null,
          "is_bot": false,
          "headline": "chore: add comments to fork",
          "author_name": "Beroni",
          "author_login": "Beroni",
          "committed_at": "2026-07-07T13:25:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ff49697a13336f8726228ea76c7dcf380ea1c80",
          "body": "…getArgumentsFromMemory",
          "is_bot": false,
          "headline": "add validation for argument lengths and implement overflow checks in …",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-07-07T08:59:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ce2a7c063216455db7427e73964eae09b7cb957",
          "body": null,
          "is_bot": false,
          "headline": "Count KDA transfers only for transfer builtin functions",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-06T21:07:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a04aef305d7eb6e81c8cea144c7090fb18b9152e",
          "body": "…ltin suite",
          "is_bot": false,
          "headline": "Remove dead accountsCacher param and fold authorization test into bui…",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-06T19:59:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6f0896a9326d2b09d24bf2146cb4cab18413cbf",
          "body": null,
          "is_bot": false,
          "headline": "fix: block indirect dispatch from invoking upgrade hook",
          "author_name": "Beroni",
          "author_login": "Beroni",
          "committed_at": "2026-07-06T19:14:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8f11f0bc7c35532c07749eab3fda4a8555253c8",
          "body": "…upply endpoints (#79)\n\n* [KLC-2506] feat: add /network/economics endpoint for live KLV supply\n\nAdd a read-only /network/economics endpoint exposing live KLV supply\nfigures (circulating, minted, burned, initial/max, total staked) plus\nnode-state held aggregates scanned from KApp tries: pending rewar\n[…]\nder the limit; operation order, error precedence,\nand the KFI/KLV field mapping are unchanged.\n\nExtract the duplicated \"%s: %s\" error-wrap literal in the network routes\ninto an errWrapFormat constant.",
          "is_bot": false,
          "headline": "[KLC-2506] feat: add /network/economics and /network/account-totals s…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-07-06T13:09:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f94294b5cc6142eb3c2ec90d526358320ada3e68",
          "body": null,
          "is_bot": false,
          "headline": "Remove redundant signer-count integration test",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-03T23:05:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c92538a68940a4a0c4df76df81c736f3aecbb26",
          "body": "* Normalize connector node address for metrics and log providers\n\n* Simplify connector address scheme parsing\n\n* Inline log websocket URL builder\n\n* Add timeout to metrics HTTP client\n\n* Guard connector log websocket pointer with a mutex\n\n* Use fixed timeout for connector metrics HTTP client\n\n* Close metrics response body when read fails",
          "is_bot": false,
          "headline": "[KLC-2437] Normalize connector node address for both providers (#81)",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-03T20:08:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f588f704cae185c0b7ed172cb50393fa052252d",
          "body": "* Check HTTP status code in operator GetURL and PostURL\n\n* Sanitize and bound operator HTTP responses\n\n* Refactor and extend operator HTTP tests",
          "is_bot": false,
          "headline": "[KLC-2448] Check HTTP status in operator GetURL and PostURL (#80)",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-03T13:46:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8af922e749ec1fa7451b2c6e7c9f634d8603be2",
          "body": "…ptions (GHSA-4fwh-wrm6-97xm) (#76)\n\n* [KLC-2440] bound /subscribe WS reads, connections, and subscriptions (GHSA-4fwh-wrm6-97xm)\n\nThe unauthenticated /subscribe WebSocket endpoint had no resource bounds: a single\nframe could be read unbounded, live connections were uncounted, the per-connection\nadd\n[…]\n\nchars) in HandleClientInsertion, before they are retained as map keys.\nThe count caps alone left a per-connection memory-amplification path\nvia unique oversized address strings (GHSA-4fwh-wrm6-97xm).",
          "is_bot": false,
          "headline": "[KLC-2440] Bound /subscribe WebSocket reads, connections, and subscri…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-07-03T13:03:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "edd09a0311e8afffa55fad11b3e4b780f076b798",
          "body": null,
          "is_bot": false,
          "headline": "improve argument length validation and add unit tests for overflow cases",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-07-03T02:52:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c3508feca080228d500a8e538fddb33b008c8110",
          "body": "…ta race (#77)\n\ncreatePubSub mutated the package-level pubsub.TimeCacheDuration global on every\nmessenger construction, which the race detector flags when messengers are built\nconcurrently. Use pubsub.WithSeenMessagesTTL per instance instead, removing the\nglobal write; the effective TTL is unchanged\n[…]\nds\nthe global.\n\nAdd a parallel-construction regression test covering the mock and real messenger\npaths, and restore t.Parallel() on the two import-db self-send tests that had it\ndropped for this race.",
          "is_bot": false,
          "headline": "[KLC-2430] fix: set pubsub seen-messages TTL per instance to avoid da…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-07-01T14:33:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a2740c985a788fb69e17742ea4f0c37c440733b2",
          "body": "…tion (GHSA-9v8p-frvj-2pcm) (#74)\n\n* [KLC-2438] require auth for /log and stop unauthenticated logger mutation (GHSA-9v8p-frvj-2pcm)\n\nGET /log (node and seednode) was unauthenticated and applied a client-supplied\nlogger profile to the process-global logger. A remote client could read the\nlive log st\n[…]\nRouteSecured\n  (config-package coverage on the new helpers).\n\n* [KLC-2438] test: add empty-config assertion for IsRouteSecured\n\nMirror the empty-config case already covered in the IsRouteEnabled test.",
          "is_bot": false,
          "headline": "[KLC-2438] require auth for /log and stop unauthenticated logger muta…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-07-01T14:22:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a0ac27bcfccb9cfc5852a68de6684ee64c0705c",
          "body": "* Add FixAuditChangesV3 activation flag\n\n* Guard kdaFeesPool fee ratios and swap price\n\n* Add tests for fee ratio validation\n\n* Extract fee-ratio check to reduce UpdatePool complexity\n\n* Add core/fork test coverage\n\n* Neutralize stored non-positive fee ratios in compute\n\n* Reject non-positive fee ratio in stateless validator\n\n* Add regression test for stored non-positive ratios\n\n* Extract helpers to reduce trigger-field validation complexity\n\n* Add test for KDA fee pool ratio validation",
          "is_bot": false,
          "headline": "[KLC-2469] Validate kdaFeesPool fee ratios (#75)",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-01T12:55:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83189e8ad34c141e83e344dc61e30992aa0bea63",
          "body": "* Compute validator commission with big.Int to avoid overflow\n\n* Test validator commission big.Int overflow handling\n\n* Move commission overflow test into peersUpdate_test.go",
          "is_bot": false,
          "headline": "[KLC-2471] Fix validator commission int64 overflow (#78)",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-07-01T12:55:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55dbc8291a2a9ab397cc8a9abdf1986f9b3858e5",
          "body": null,
          "is_bot": false,
          "headline": "refactor: centralize bitmap padding check into shared helper",
          "author_name": "Beroni",
          "author_login": "Beroni",
          "committed_at": "2026-06-30T19:46:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4aacbf8e6e0016c3910589633c580a6dbd93c708",
          "body": null,
          "is_bot": false,
          "headline": "updated tests",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-06-24T14:52:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1c25257db06fe4d41bd57a9a040848a92729c54",
          "body": "…etArgumentsFromMemory",
          "is_bot": false,
          "headline": "add maxNumArgumentsFromMemory constant and validate numArguments in g…",
          "author_name": "Natalino",
          "author_login": "n4t4l",
          "committed_at": "2026-06-24T13:13:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc1aa9507443df404fd7383467e600b5e7731230",
          "body": null,
          "is_bot": false,
          "headline": "test: use range-over-int loops in padding bitmap tests",
          "author_name": "Beroni",
          "author_login": "Beroni",
          "committed_at": "2026-06-23T17:36:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3c6cd3a5d782644535c3793b880e429219db931",
          "body": null,
          "is_bot": false,
          "headline": "tests: add test for mainnet/testnet consensus size",
          "author_name": "Beroni",
          "author_login": "Beroni",
          "committed_at": "2026-06-23T17:28:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c076a2e25fde204e10e533c4c385addff63fbb3c",
          "body": null,
          "is_bot": false,
          "headline": "tests: reject bitmap padding bits in final-info validation",
          "author_name": "Beroni",
          "author_login": "Beroni",
          "committed_at": "2026-06-23T17:23:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94bfe6e35e9c15287428212426345fc71ab2a3f7",
          "body": null,
          "is_bot": false,
          "headline": "fix: reject bitmap padding bits in final-info validation",
          "author_name": "Beroni",
          "author_login": "Beroni",
          "committed_at": "2026-06-23T17:23:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a11cb28e495e608d8034dbe83a91e89d0c68e0f7",
          "body": null,
          "is_bot": false,
          "headline": "chore: reject bitmaps with non-zero padding bits in quorum check",
          "author_name": "Beroni",
          "author_login": "Beroni",
          "committed_at": "2026-06-23T17:23:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "457f236d9fccb98d9690cb3de575206f448f189a",
          "body": null,
          "is_bot": false,
          "headline": "Test centralized permission-update authorization",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-06-23T13:25:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c58740eb74d7ee8f07db1e18a7d6214b5559ba32",
          "body": null,
          "is_bot": false,
          "headline": "Authorize permission update against caller not recipient",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-06-23T13:25:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37d18f9e8b7ba17ec1665211ffb09736481f06c3",
          "body": null,
          "is_bot": false,
          "headline": "Test decodeSigners rejects oversized signer count",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-06-23T13:21:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20902de5fc885f0f8d5e614ec83028d8c40539e9",
          "body": null,
          "is_bot": false,
          "headline": "Bound signer count in decodeSigners",
          "author_name": "nickgs1337",
          "author_login": "nickgs1337",
          "committed_at": "2026-06-23T13:21:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c70ae22f884d9defb8c0bcecbe75172a1a25936",
          "body": "…log-save (#72)\n\n* [KLC-2465] avoid permanent zombie from bugsnag panic monitor under --log-save\n\nbugsnag.Configure's default PanicHandler forks a panicwrap monitor child\nthat reads the parent's stderr through a pipe and is started without a\nmatching Wait. With --log-save, RedirectStderr dup2's the \n[…]\nt the log file, so nothing is lost.\n\n* [KLC-2465] fix bugsnag ProjectPackages module path typo\n\n\"klever-io/klver-go\" never matched the real module path, so bugsnag\ncould not mark frames as in-project.",
          "is_bot": false,
          "headline": "[KLC-2465] avoid permanent zombie from bugsnag panic monitor under --…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-06-22T19:03:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e37326fa621e171fa7f45aa576a2e0db394e93a",
          "body": "## Summary\n\nAdd operator ms sign subcommand to sign a multisign transaction and post the signature to the multisign API, also supporting an interactive mode to choose between pending multisignature transactions.\n\n## Problem\n\nPreviously the user would have to fetch, sign and post the signature manual\n[…]\nmessages follow [Conventional Commits](https://www.conventionalcommits.org/)\n\n- [x] No unnecessary files included\n\n- [x] Breaking changes documented above\n\n- [x] Configuration changes documented above",
          "is_bot": false,
          "headline": "[KLC-2394] feat: operator add ms sign subcommand to sign multisi (#66)",
          "author_name": "n4t4l",
          "author_login": "n4t4l",
          "committed_at": "2026-06-22T15:12:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8bcc600b0ac88070740c63c7ce1c8a968dd85251",
          "body": "* fix(market): prevent buy settlement from paying out more than the bid\n\nexecuteBuyMarket split a buyer's payment into referral, royalties and the\nmarket-order owner shares, paying referral and royalties unconditionally\nwhile only paying the owner share when positive. When referral + royalties\nexcee\n[…]\nrather than a freeze-specific error so the API\ncannot be used to enumerate the frozen set; the real reason is logged at\ndebug for operators.\n\n---------\n\nCo-authored-by: nickgs1337 <nicklatim@live.com>",
          "is_bot": false,
          "headline": "Merge commit from fork",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-06-22T14:10:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "085a5d1c9956b71efa8546b7b66314237324c80c",
          "body": "…ot open: File exists\" errors (#71)\n\n* [KLC-1927] skip actions/cache on self-hosted runners to fix tar collisions\n\nThe klever-pipe self-hosted runners persist ~/go/pkg/mod and ./vendor\nacross runs, so actions/cache restores its tarball over files that already\nexist and emits \"/usr/bin/tar: Cannot op\n[…]\nud-storage v3 keeps predefinedAcl/parent; setup-buildx v4 keeps\ndriver-opts. quality-gate-action and twingate are composite (unaffected);\ngolangci-lint-action and actions/checkout are already Node 24.",
          "is_bot": false,
          "headline": "[KLC-1927] Skip actions/cache on self-hosted runners to fix tar \"Cann…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-06-16T04:28:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8c1719ecfc5835fd7ddf100e9bf5ab21628182ad",
          "body": "…el (#70)\n\nmacos-13 (GitHub's last Intel x86_64 hosted runner) was retired Dec 2025;\nit hung ~2h and was canceled during the v1.7.18 release. macos-15-intel is\nthe native x86_64 replacement (supported until macOS 15 retires, ~Fall 2027),\npreserving the darwin (amd64) build and its x86_64 libvmexeccapi.dylib with no\ncross-compile. macos-latest (arm64) and ubuntu-latest are unchanged.",
          "is_bot": false,
          "headline": "[KLC-2447] release: replace retired macos-13 runner with macos-15-int…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-06-16T04:27:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "785b77ccb27162506c888cb62657cd7117d23126",
          "body": "…HSA-w4c6-7r69-w7j9)\n\nFollow-up to KLC-2428 (slow-header fix): extend the slow-header hardening on the\nshared http.Server with a slow-body defense and tighter limits:\n\n- Add a per-request body read deadline (30s) via ResponseController.SetReadDeadline,\n  applied only to body-bearing requests so the \n[…]\ndy deadline (slow-body cut, slow-handler-not-cancelled, bodiless-upgrade\nskip), a live websocket round-trip through the hardened server, and an end-to-end\nslow-header drop on the real seednode routes.",
          "is_bot": false,
          "headline": "[KLC-2434] bound REST slow-body reads and tighten header/body caps (G…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-06-01T13:58:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a8d6682f80097d03fcc95c3e9d0f8595bd020d7c",
          "body": "…r69-w7j9)\n\nBoth REST APIs started their gin engine via Engine.Run, which calls\nhttp.ListenAndServe with no ReadHeaderTimeout. An unauthenticated client\ncould hold incomplete request headers open indefinitely and exhaust\nconnections (slow-header / slowloris).\n\nRoute both start paths (seednode and no\n[…]\ne and an actively-dripping slow-header connection both dropped at\n~ReadHeaderTimeout, the body-size cap, and the bulk count limit (at-limit\npasses, over-limit is rejected without reaching the facade).",
          "is_bot": false,
          "headline": "[KLC-2428] harden REST listeners against slow-header DoS (GHSA-w4c6-7…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-30T16:11:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2cf19442b62cf1594db3479023de00a26cf72bfa",
          "body": "…2g-6j7h-98wg)\n\nRemove the per-message goroutine in directMessageHandler and call\nProcessReceivedMessage inline. Each direct-send stream already has its own\nreader goroutine, so concurrency is bounded to one in-flight per stream and\nTCP backpressure is preserved. Previously a single peer could spawn\n[…]\nline stubs now return nil to support it.\n\nAdd regression tests: direct-message in-flight tracks stream count not message\ncount, and the import-db self-send loopback stays synchronous without deadlock.",
          "is_bot": false,
          "headline": "[KLC-2427] p2p: process direct-message ingress synchronously (GHSA-hf…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-30T13:53:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3c2e67ac6a84a8aeaed570cbce9b5235230ec27",
          "body": "…end recover gap (GHSA-rm5c-5x2p-48wr)\n\nSecond instance of the same class as the tx fix:\n\n- interceptedBlock: Identifiers()/String() run before CheckValidity on\n  untrusted data and dereferenced a nil block.Header. Use the nil-safe\n  block.GetX() getters so an omitted Header cannot panic.\n- netMesse\n[…]\nthe same interceptor\n  with no recover and still crashed (confirmed via PoC). Factor the recover\n  into a shared helper and apply it to the direct-send path too.\n\nAdd regression tests for both layers.",
          "is_bot": false,
          "headline": "[KLC-2432] fix nil-Header panic in block interceptor + cover direct-s…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-30T00:42:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7622deed6128f5b5d935db988ffcc47e41e011f1",
          "body": "…HSA-rm5c-5x2p-48wr)\n\nA protobuf Transaction gossiped with RawData omitted unmarshals to a nil\nRawData, which panicked in txVersionChecker.CheckTxVersion and crashed the\nnode. Any unauthenticated peer could halt a node with a ~5-byte message on\nthe transactions topic.\n\n- createTx: reject nil RawData\n[…]\nther construction path\n- pubsubCallback: recover() circuit-breaker that blacklists both peers and\n  rejects the message so no interceptor panic can crash the node\n\nAdd regression tests for each layer.",
          "is_bot": false,
          "headline": "[KLC-2432] fix unauthenticated nil-pointer panic in tx interceptor (G…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-29T22:14:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "23b74e1e69cea01c342fd694b877dc7088192890",
          "body": "…#65)\n\n* [KLC-2424] blockchain: atomic Set/Get current header+hash primitive\n\nAdds SetCurrentBlockHeaderAndHash and GetCurrentBlockHeaderAndHash on\nChainHandler so the (header, hash) pair is updated and read under a\nsingle lock acquisition. Without this, readers (chronology, sync,\nbootstrap) could o\n[…]\ne current pair when reverting block 1,\n  mirroring production rollBackOneBlock's nonce>1 branch\n- blockchain_test: capture writer-side errors in race tests via buffered chan,\n  assert empty after join",
          "is_bot": false,
          "headline": "[KLC-2424] blockchain: atomic Set/Get current header+hash primitive (…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-29T13:45:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "49b77063e9e056bb00fcfae3db95f13398a251f1",
          "body": "…(#64)\n\n* [KLC-2423] heartbeat: stop Monitor and sender goroutines on shutdown\n\nMonitor's refresh goroutine had no stop path; on test restarts with a shared\nstorer the leaked goroutine could write stale state and trip\nTestMonitor_ObserverGapValidatorPartlyOnline5.\n\nAdd Monitor.Close() guarded by syn\n[…]\n added before each mon2 construction were\ndiscarding the returned error. Wrap them with assert.NoError so any future\nregression in monitor shutdown is surfaced by the affected tests instead of\nmasked.",
          "is_bot": false,
          "headline": "[KLC-2423] heartbeat: stop Monitor and sender goroutines on shutdown …",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-29T13:43:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5b2d539a3ac1af9543923ac58cb2a7daa67d2b88",
          "body": "…ets (#63)\n\n* [KLC-2425] Makefile: reorganize sections and add pprof debugging targets\n\nReorganize the root Makefile with consistent section banners and consolidate\nmisplaced targets. Add four pprof targets for live node profiling and a\ntop-level usage/env-vars block to improve discoverability for n\n[…]\n not :8080\n  (Copilot review)\n* Replace non-greedy '.*?' in the make help awk regex with the POSIX-portable\n  '[^#]*' so the pattern works consistently across awk implementations\n  (CodeRabbit review)",
          "is_bot": false,
          "headline": "[KLC-2425] Makefile: reorganize sections and add pprof debugging targ…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-29T13:42:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eb1f3e241afe9fb085f381b19d3735ad8afa18e8",
          "body": "* [KLC-2357] sanitize BlacklistPeer reasons to defeat log injection\n\nEvery BlacklistPeer call site that previously concatenated raw\nerr.Error() or a free-form descriptive string into the reason argument\nnow uses a fixed enumerator from the new shared core/process/reasons.go,\nand forwards the underly\n[…]\n the multiDataInterceptor security-test\n  helper now requires exactly two BlacklistPeer calls (originator +\n  fromConnectedPeer), so a regression that drops one of the two calls\n  cannot slip through.",
          "is_bot": false,
          "headline": "[KLC-2357] sanitize BlacklistPeer reasons to defeat log injection (#62)",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-29T13:42:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "25ba0ba4ae70309c72ba14cc234bac54b639439d",
          "body": "* security: cap Batch.Data items to block resolver hash-array amplification (GHSA-w342-mj6g-v9c4)\n\nA compressed RequestDataType_HashArrayType request only 442 bytes on the\nwire could decompress into 200,000 entries, amplifying memory and CPU work\nthrough TxResolver.resolveTxRequestByHashArray and\nTr\n[…]\nreat-to-defense mapping, breakage verification\nfor legitimate production traffic across every sender path, test-fixture\nmigration, and revision history including the F1 finding and the\nsentinel split.",
          "is_bot": false,
          "headline": "Merge commit from fork",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-29T13:37:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "10bcfd50f691559bbd5ae53d6153b7af7c4f9323",
          "body": "* [KLC-2355] interceptors: use errors.Is for sentinel comparisons + codebase migration\n\nmultiDataInterceptor and singleDataInterceptor compared CheckValidity errors\nwith == against ErrInvalidTransactionVersion / ErrInvalidChainID. Any future\n%w wrapping in the factory chain would silently disable th\n[…]\nrs with require.NoError\n\nWrap SetKAppController and SetAccountsCacher stub-installation calls in the\nnew tests so a broken fixture fails the test instead of silently running with\nan unconfigured kapp.",
          "is_bot": false,
          "headline": "[KLC-2355] interceptors: use errors.Is for sentinel comparisons (#61)",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-22T21:27:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "036eb81c63f97e0bd6494ad84764eb275dba5cc4",
          "body": "…#60)\n\n* [KLC-2405] expose NTP clock offset + last-sync timestamp as metrics\n\nA validator's OS clock can drift relative to the consensus group and\nsilently degrade quorum participation; the previously-investigated bad\nnode (157.90.246.51) sat at -38ms and produced 535 \"small consensus\nquorum\" warnin\n[…]\n getters.\n  TestBuildClockMetricsPollingFunc_NegativeUnixGuard verifies a 1969\n  timestamp publishes 0, not the uint64 wrap-around.\n\nAddresses review threads from @copilot and @coderabbitai on PR #60.",
          "is_bot": false,
          "headline": "[KLC-2405] expose NTP clock offset + last-sync timestamp as metrics (…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-22T15:07:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dce5716b763b940a7a36cf37c418315e35a8dfe5",
          "body": "* [KLC-2383] peerHonesty: await decay goroutine in Close()\n\nClose() previously only cancelled the context, leaving no happens-before\nedge between the decay goroutine's writes and post-Close reads. Add a\ndone channel closed by the goroutine on exit and have Close() block on\nit. Tighten the test's num\n[…]\negression\nnow fails fast with a clear message instead of hanging until the test\nrunner kills the process.\n\nAlso picks up the gofmt field-alignment fix on PeerHonestyHandlerStub\nthat goimports flagged.",
          "is_bot": false,
          "headline": "[KLC-2383] peerHonesty: await decay goroutine in Close() (#59)",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-21T21:28:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ea9483088cfe177c1c803a0624596098c36b01f6",
          "body": "…ndows (#58)\n\n* [KLC-2400] fix flaky configITO ShouldError test: slot-relative ITO windows\n\nThe KAPP validates ITO windows against ctx.Block().GetTimestamp(), which\nin tests is genesis + slot*slotDuration — fully deterministic. The test\nwas using time.Now().Add(4s) for StartTime, so on slow runners \n[…]\nDuration. With the\n  previous +1, a 1s slotDuration would land itoEnd exactly at blockTs(slot+2)\n  and the final \"out of window\" buy would silently pass the strict-less-than\n  check at ito.go:336-337.",
          "is_bot": false,
          "headline": "[KLC-2400] fix flaky configITO ShouldError test: slot-relative ITO wi…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-21T19:14:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bfd40013e76c284ebb2c3c92bfbe4a975bbe42ea",
          "body": "* [KLC-2402] appStatusPolling: make Poll stoppable; wire shutdown\n\nReplaces the unbounded `for { Sleep; ... }` goroutine in AppStatusPolling\nwith a select over a `done` channel and a ticker, exposing an idempotent\n`Close() error` (io.Closer). Killed a pre-existing nil-pointer panic in\nTestStartStatu\n[…]\nsPolling error with %w in both Start* wrappers\n- Test: fix duration multiplication typo (~63yr -> 2s)\n- Test: use require.Eventually for first-tick wait; settling-window check for post-Close stability",
          "is_bot": false,
          "headline": "[KLC-2402] appStatusPolling: make Poll stoppable; wire shutdown (#57)",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-21T17:27:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9c6c33bc064872ec3bea9cf6317f831fd7564b0f",
          "body": "…/node/metrics (#56)\n\n* [KLC-2418] seednode: reduce log noise + expose /peers, /node/status, /node/metrics\n\nThe seednode was dumping its full connected-peer table at INFO every 5 s\n(~190 lines per tick at production peer counts) on top of the concise\nsingle-line summary already emitted at DEBUG by t\n[…]\ninted view.\n\n- api.go: copy before sort in server.snapshot.\n- main.go: same in emitPeerStatus.\n- api_test: regression test TestSnapshot_doesNotMutateMessengerSlices,\n  verified failing before the fix.",
          "is_bot": false,
          "headline": "[KLC-2418] seednode: reduce log noise + expose /peers, /node/status, …",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-21T11:29:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a4ba64ef339e3b1bcca1314a0e81c17ae7fbf506",
          "body": "* chore(p2p): replace default BasicConnMgr with NullConnMgr on seed nodes [KLC-2416]\n\nAdd IsSeedNode flag to ArgsNetworkMessenger and use it to wire\nlibp2p.ConnectionManager(connmgr.NullConnMgr{}) only on seed-node\nbuilds. Removes the 160/192 BasicConnMgr peer cap that was throttling\nseed peer count\n[…]\n) by\n  extracting the broadcast multiaddr setup into buildAddressFactory.\n- Fix gosec G115 in getFDLimit by clamping uint64 → int with math.MaxInt.\n- Add unit and parity tests for buildAddressFactory.",
          "is_bot": false,
          "headline": "[KLC-2416] p2p: disable BasicConnMgr peer cap on seed nodes (#55)",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-20T20:11:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "06e338282abc7ec751b1a39a29dc940b31ec99ed",
          "body": "* feat(indexer): [KLC-2309] dispatch websocket account events without indexer\n\nPromote eventsProcessor to a per-block orchestrator so websocket subscribers\nreceive BLOCKS / USER_TRANSACTIONS / TRANSACTIONS / ACCOUNTS events whether\nor not the elasticsearch indexer is configured. The orchestrator run\n[…]\ngnitive-complexity ceiling.\nBehavior is unchanged: same prep fallback, same sequential index steps,\nsame first-error short-circuit.\n\n---------\n\nCo-authored-by: Fernando Sobreira <fbsobreira@gmail.com>",
          "is_bot": false,
          "headline": "[KLC-2309] Dispatch websocket account events without indexer (#38)",
          "author_name": "phcarneirobc",
          "author_login": "phcarneirobc",
          "committed_at": "2026-05-20T12:16:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9640d63265e910e166dfa694c8e5ddeb53018ffd",
          "body": "* [KLC-2408] operator: show tx hash in pre-sign review prompt\n\nThe \"Requested Transaction Details\" prompt printed an empty hash field\nbecause the hash had not yet been computed at confirmation time. Since\nthe Klever tx hash is derived solely from RawData and not from the\nsignature, it can be compute\n[…]\nll call sites (shouldSign, ms decode)\npropagate it, so no caller updates are needed. The nil-guard is\npreserved so ms decode can still surface non-hash fields of a\nmalformed tx without aborting early.",
          "is_bot": false,
          "headline": "[KLC-2408] operator: show tx hash in pre-sign review prompt (#54)",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-19T19:30:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "319e361c8eac123337454a8f00337a8b31b44ed8",
          "body": "…(#52)\n\n* [KLC-2358] expose redundancy metrics via /node/status and Prometheus\n\nRoute klv_redundancy_level and the new redundancy booleans through the\nshared status-handler polling path so /node/status JSON and the\n/node/metrics Prometheus surface report from the same store. The\nprevious routes.go i\n[…]\nrough and would have hit the same\nimplementation-defined cast the allowlist exists to avoid. Practical\nreachability is zero (JSON integers above 2^53 already lose precision)\nbut the fix costs nothing.",
          "is_bot": false,
          "headline": "[KLC-2358] expose redundancy metrics via /node/status and Prometheus …",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-18T20:45:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "780910a2664cce3a20ecdd69ba74143747498a09",
          "body": "…tent reads (#51)\n\n* fix(statistics): guard TpsBenchmark getters with RLock and defensive big.Int copies\n\nThe writer (Update -> updateStatistics) takes s.mut.Lock but none of the\ngetters took the lock, producing data races detected by 'go test -race\n./core/statistics/'. The three *big.Int fields are\n[…]\nmark) and add tpsBenchmark.Snapshot() to the\n   updateTpsBenchmark helper so every flow test exercises it.\n\nCoverage on tpsBenchmark.go (under -short): 90.9% -> 93.6%, Snapshot()\n0% -> 100%.\n\nKLC-2398",
          "is_bot": false,
          "headline": "[KLC-2398] Fix data races in TpsBenchmark + add Snapshot() for consis…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-13T18:52:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1ce066b74d84c12cf79a22fc77146646d19bd2f9",
          "body": "…-dht (clears Dependabot #33) (#50)\n\n* chore(deps): upgrade gopsutil v3 → v4 [KLC-2384]\n\nBump github.com/shirou/gopsutil from v3.21.11+incompatible (released\n2021-11, long-term maintenance) to github.com/shirou/gopsutil/v4@v4.26.4.\n\nSilences the macOS-12+ cgo deprecation warning emitted on every\ngo \n[…]\n 0.2.0 → 0.3.0\n    golang.org/x/net         0.52.0 → 0.53.0\n    golang.org/x/sys         0.42.0 → 0.43.0\n    + golang.org/x/{exp,mod,telemetry,tools}\n\nNo first-party source changes — pure module bump.",
          "is_bot": false,
          "headline": "[KLC-2384] chore(deps): upgrade gopsutil v3 → v4 + bump go-libp2p-kad…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-13T18:03:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ee255e8b768af11de0d39920390cd3e026aff26d",
          "body": "…#48)\n\n* [KLC-2382] deflake TestConsensus_RevertBlockAndTransactions\n\nThree independent root causes — fixing all three brings the test to\n44 consecutive PASS in a 50-iteration fresh-process loop at the mainnet\n4-second slot budget, up from ~45% failure rate beforehand.\n\n1. delayedBlockBroadcaster.Se\n[…]\n: remove stray ConsensusGroup()[1] = \"X\" mutation\n  from TestSlotConsensus_ResetValidationMap; it never affected any\n  assertion and modeled an antipattern against the documented\n  read-only contract.",
          "is_bot": false,
          "headline": "[KLC-2382] fix data races in consensus, sharding, and libp2p layers (…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-13T17:54:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3b06f690e97491dafb0199f0554a628113d3f4e3",
          "body": "…s (#45)\n\n* perf(kapp): zero-copy GetAndClearReturnData + pre-size receipt filters\n\nTwo related allocation reductions in core/kapp/context.go.\n\n1. GetAndClearReturnData: move semantics instead of deep copy\n\n   The function deep-copied k.returnData into a fresh slice and then\n   reset k.returnData to\n[…]\nenchmark helper\n\nnewCtxWithReturnData was introduced for benchmark setup but ended up\nunused once both benchmarks constructed their contexts inline. Flagged\nby golangci-lint (unused) in PR #45 review.",
          "is_bot": false,
          "headline": "perf(kapp): zero-copy GetAndClearReturnData + pre-size receipt filter…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-12T13:57:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d695ec5c2cf18a23f551e80de2ae30cc303bc9bf",
          "body": "…y (#44)\n\n* perf(dataValidators): drop per-tx goroutine fan-out in CheckTxValidity\n\nThe signer-key decode loop in CheckTxValidity spawned one goroutine per\npermission signer, joined via WaitGroup, with a Mutex around the shared\nmap and an unsynchronized loadErr write. Replace with a serial loop.\n\nTw\n[…]\nit. The error path\nis only reachable on an empty address (not the case here), but the\ndefensive check matches the file's existing error-handling pattern\nand silences the CodeRabbit nitpicks on PR #44.",
          "is_bot": false,
          "headline": "perf(dataValidators): drop per-tx goroutine fan-out in CheckTxValidit…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-12T13:56:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "333f6ec910906e227705fc5767dc897d8fbfc862",
          "body": "* [KLC-2352] Cap gzip decompression in Batch to prevent P2P bomb DoS\n\nBound the inflated payload of a compressed Batch to a hard ceiling\n(10 MiB) using io.LimitReader so a small gossip message can no longer\ninflate to multi-GB and OOM-kill validators or relays. Reject batches\nwhose self-reported Dat\n[…]\ndecremented from the mock LogProcessedHashes callback so\n  the test deterministically waits for every spawned worker's\n  debugHandler read; pre-fix, go test -race fails with a worker-side\n  data race.",
          "is_bot": false,
          "headline": "Merge commit from fork",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-11T19:17:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7e0b1642b11c4183408d31c21a0cfff5d8c9b7a4",
          "body": "* [KLC-2377] bump libp2p stack to clear Dependabot security alerts\n\nUpgrade go-libp2p (v0.44.0 -> v0.48.0) and go-libp2p-kad-dht\n(v0.35.1 -> v0.39.1) so go mod tidy resolves all transitively\nvulnerable packages to patched versions:\n\n  go.opentelemetry.io/otel       v1.38.0  -> v1.42.0   (GHSA-mh2q-q\n[…]\nest job.\n\nPin every workflow fallback (and the composite go-setup-action default)\nto `'1.25.7'` so setup-go installs the right minor directly. Repos that\noverride via `vars.GO_VERSION` are unaffected.",
          "is_bot": false,
          "headline": "[KLC-2377] bump libp2p stack to clear Dependabot security alerts (#42)",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-06T19:12:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a5b9721e1ffe22979419af4067ba181ee6b9c530",
          "body": null,
          "is_bot": false,
          "headline": "chore: Add title and description fields to error receipts (#39)",
          "author_name": "Beroni",
          "author_login": "Beroni",
          "committed_at": "2026-05-06T09:10:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e50a9285a8c240be572e9d8a1d21ad32bb73e170",
          "body": "…e builds (#41)\n\n* [KLC-2349] Adopt -trimpath -s -w -buildid= -buildvcs=false for release builds\n\nAdd a `RELEASE=1` Makefile switch that opts into release-grade build flags:\n- `-trimpath` removes build-machine path prefix from binary\n- `-s -w` strips symbol table and DWARF debug info\n- `-buildid=` e\n[…]\nnon-empty value including `RELEASE=0`,\nwhich would surprise anyone trying to disable release flags via that\nform. Switch to `ifeq ($(RELEASE),1)` so release mode only activates\non the explicit opt-in.",
          "is_bot": false,
          "headline": "[KLC-2349] Adopt -trimpath -s -w -buildid= -buildvcs=false for releas…",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-05T18:22:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6f423a5e4e5a20a81ea213a5831282b7640e182a",
          "body": null,
          "is_bot": false,
          "headline": "Refactor golangci-lint installation and execution steps in CI workflow",
          "author_name": "Fernando Sobreira",
          "author_login": "fbsobreira",
          "committed_at": "2026-05-05T13:54:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 7,
      "commits_last_year": 155,
      "latest_release_at": "2026-07-20T11:21:43Z",
      "latest_release_tag": "v1.7.20",
      "releases_from_tags": false,
      "days_since_last_push": 3,
      "active_weeks_last_year": 33,
      "days_since_latest_release": 7,
      "mean_days_between_releases": 49.4
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 87,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/klever-io/klever-go",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/klever-io/klever-go",
          "is_deprecated": false,
          "latest_version": "v1.7.20",
          "repository_url": "https://github.com/klever-io/klever-go",
          "versions_count": 7,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-16T18:26:42Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 11
        }
      ]
    },
    "popularity": {
      "forks": 6,
      "stars": 30,
      "watchers": 6,
      "fork_history": {
        "days": [
          {
            "date": "2026-02-26",
            "count": 2
          },
          {
            "date": "2026-02-27",
            "count": 1
          },
          {
            "date": "2026-05-18",
            "count": 1
          },
          {
            "date": "2026-07-05",
            "count": 1
          },
          {
            "date": "2026-07-18",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 6,
        "total_forks": 6
      },
      "star_history": null,
      "open_issues_and_prs": 13
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile",
        "docker/Makefile"
      ],
      "api_schema_files": [
        "common/mock/proto/accountWrapperMock.proto",
        "core/consensus/proto/message.proto",
        "core/kapp/kdaFeesPool/proto/kdaFeesPoolData.proto",
        "core/kapp/validators/proto/validatorData.proto",
        "core/process/block/bootstrapStorage/proto/bootstrapData.proto",
        "data/batch/proto/batch.proto",
        "data/block/proto/block.proto",
        "data/dkda/proto/dkda.proto",
        "data/metrics/proto/metrics.proto",
        "data/retriever/proto/requestData.proto",
        "data/state/proto/kappAccountData.proto",
        "data/state/proto/peerAccountData.proto",
        "data/state/proto/userAccountData.proto",
        "data/state/proto/validatorInfo.proto",
        "data/transaction/proto/contracts.proto",
        "data/transaction/proto/log.proto",
        "data/transaction/proto/transaction.proto",
        "data/trie/proto/node.proto",
        "kapps/proto/ito.proto",
        "kapps/proto/kda.proto",
        "kapps/proto/market.proto",
        "kapps/proto/proposal.proto",
        "kapps/proto/staking.proto",
        "kapps/proto/systemAccount.proto",
        "kapps/proto/userKapps.proto",
        "network/p2p/data/proto/authMessage.proto",
        "network/p2p/data/proto/topicMessage.proto",
        "node/heartbeat/data/proto/heartbeat.proto",
        "protobuf/google/protobuf/api.proto",
        "protobuf/google/protobuf/compiler/plugin.proto",
        "protobuf/google/protobuf/descriptor.proto",
        "protobuf/google/protobuf/duration.proto",
        "protobuf/google/protobuf/empty.proto",
        "protobuf/google/protobuf/field_mask.proto",
        "protobuf/google/protobuf/source_context.proto",
        "protobuf/google/protobuf/struct.proto",
        "protobuf/google/protobuf/timestamp.proto",
        "protobuf/google/protobuf/type.proto",
        "protobuf/google/protobuf/wrappers.proto"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 256455,
      "source_files_sampled": 2189,
      "oversized_source_files": 21,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "github.com/quic-go/webtransport-go",
            "direct": false,
            "version": "v0.10.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-g35j-m5xg-vh3q"
            ],
            "fixed_version": "0.11.1",
            "advisory_count": 1,
            "oldest_advisory_days": 3
          },
          {
            "name": "github.com/libp2p/go-libp2p-kad-dht",
            "direct": true,
            "version": "v0.39.2",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2024-3218"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 592
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.52.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 20
          },
          {
            "name": "golang.org/x/text",
            "direct": true,
            "version": "v0.37.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 13
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5942"
            ],
            "fixed_version": "0.56.0",
            "advisory_count": 1,
            "oldest_advisory_days": 13
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 4,
          "moderate": 1
        },
        "advisory_count": 5,
        "affected_count": 5,
        "assessed_count": 202,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 3
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/ElrondNetwork/concurrent-map",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.3"
        },
        {
          "name": "github.com/awalterschulze/gographviz",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.3+incompatible"
        },
        {
          "name": "github.com/beevik/ntp",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.0"
        },
        {
          "name": "github.com/btcsuite/btcd/btcec/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.3.4"
        },
        {
          "name": "github.com/btcsuite/btcd/chaincfg/chainhash",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.0"
        },
        {
          "name": "github.com/btcsuite/btcutil",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.2"
        },
        {
          "name": "github.com/bugsnag/bugsnag-go/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.1.2"
        },
        {
          "name": "github.com/decred/dcrd/dcrec/secp256k1/v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.4.1"
        },
        {
          "name": "github.com/dustinkirkland/golang-petname",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20191129215211-8e5a1ed0cff0"
        },
        {
          "name": "github.com/elastic/go-elasticsearch/v8",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v8.4.0"
        },
        {
          "name": "github.com/fatih/color",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.13.0"
        },
        {
          "name": "github.com/gin-contrib/cors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/gin-contrib/pprof",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.0"
        },
        {
          "name": "github.com/gin-gonic/gin",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.9.1"
        },
        {
          "name": "github.com/gizak/termui/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.1.0"
        },
        {
          "name": "github.com/gocarina/gocsv",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20220729221910-a7386ae0b221"
        },
        {
          "name": "github.com/gogo/protobuf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.2"
        },
        {
          "name": "github.com/google/gops",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.23"
        },
        {
          "name": "github.com/gorilla/websocket",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.3"
        },
        {
          "name": "github.com/hashicorp/golang-lru",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.2"
        },
        {
          "name": "github.com/herumi/bls-go-binary",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.28.2"
        },
        {
          "name": "github.com/ipfs/go-log/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.9.1"
        },
        {
          "name": "github.com/jbenet/goprocess",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.4"
        },
        {
          "name": "github.com/joho/godotenv",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.0"
        },
        {
          "name": "github.com/keygen-sh/machineid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/klever-io/klever-go-logger",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.1"
        },
        {
          "name": "github.com/libp2p/go-libp2p",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.48.0"
        },
        {
          "name": "github.com/libp2p/go-libp2p-kad-dht",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.39.2"
        },
        {
          "name": "github.com/libp2p/go-libp2p-kbucket",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.8.0"
        },
        {
          "name": "github.com/libp2p/go-libp2p-pubsub",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.15.0"
        },
        {
          "name": "github.com/martinlindhe/base36",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/mitchellh/mapstructure",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.0"
        },
        {
          "name": "github.com/mr-tron/base58",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.0"
        },
        {
          "name": "github.com/multiformats/go-base36",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.2.0"
        },
        {
          "name": "github.com/multiformats/go-multiaddr",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.16.1"
        },
        {
          "name": "github.com/nwidger/jsoncolor",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.0"
        },
        {
          "name": "github.com/patrickmn/go-cache",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.1.0+incompatible"
        },
        {
          "name": "github.com/pelletier/go-toml",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.9.3"
        },
        {
          "name": "github.com/pkg/errors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.1"
        },
        {
          "name": "github.com/shirou/gopsutil/v4",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v4.26.4"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.1"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "github.com/swaggo/files",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.1"
        },
        {
          "name": "github.com/swaggo/gin-swagger",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.2"
        },
        {
          "name": "github.com/swaggo/swag",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.16.6"
        },
        {
          "name": "github.com/syndtr/goleveldb",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.1-0.20210819022825-2ae1ddf74ef7"
        },
        {
          "name": "github.com/urfave/cli",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.22.10"
        },
        {
          "name": "github.com/whyrusleeping/timecache",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20160911033111-cfcb2f1abfee"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.52.0"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.43.0"
        },
        {
          "name": "golang.org/x/text",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.37.0"
        },
        {
          "name": "google.golang.org/protobuf",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.36.11"
        },
        {
          "name": "gopkg.in/go-playground/validator.v8",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v8.18.2"
        },
        {
          "name": "gopkg.in/yaml.v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/awalterschulze/gographviz",
            "direct": true,
            "version": "v2.0.3+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beevik/ntp",
            "direct": true,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/btcsuite/btcd/btcec/v2",
            "direct": true,
            "version": "v2.3.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/btcsuite/btcd/chaincfg/chainhash",
            "direct": true,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/btcsuite/btcutil",
            "direct": true,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bugsnag/bugsnag-go/v2",
            "direct": true,
            "version": "v2.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/decred/dcrd/dcrec/secp256k1/v4",
            "direct": true,
            "version": "v4.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustinkirkland/golang-petname",
            "direct": true,
            "version": "v0.0.0-20191129215211-8e5a1ed0cff0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/elastic/go-elasticsearch/v8",
            "direct": true,
            "version": "v8.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/elrondnetwork/concurrent-map",
            "direct": true,
            "version": "v0.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": true,
            "version": "v1.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gin-contrib/cors",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gin-contrib/pprof",
            "direct": true,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gin-gonic/gin",
            "direct": true,
            "version": "v1.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gizak/termui/v3",
            "direct": true,
            "version": "v3.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gocarina/gocsv",
            "direct": true,
            "version": "v0.0.0-20220729221910-a7386ae0b221",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gogo/protobuf",
            "direct": true,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gops",
            "direct": true,
            "version": "v0.3.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/websocket",
            "direct": true,
            "version": "v1.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru",
            "direct": true,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/herumi/bls-go-binary",
            "direct": true,
            "version": "v1.28.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ipfs/go-log/v2",
            "direct": true,
            "version": "v2.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jbenet/goprocess",
            "direct": true,
            "version": "v0.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/joho/godotenv",
            "direct": true,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/keygen-sh/machineid",
            "direct": true,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klever-io/klever-go-logger",
            "direct": true,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-libp2p",
            "direct": true,
            "version": "v0.48.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-libp2p-kad-dht",
            "direct": true,
            "version": "v0.39.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-libp2p-kbucket",
            "direct": true,
            "version": "v0.8.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-libp2p-pubsub",
            "direct": true,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/martinlindhe/base36",
            "direct": true,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/mapstructure",
            "direct": true,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mr-tron/base58",
            "direct": true,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-base36",
            "direct": true,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-multiaddr",
            "direct": true,
            "version": "v0.16.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nwidger/jsoncolor",
            "direct": true,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/patrickmn/go-cache",
            "direct": true,
            "version": "v2.1.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml",
            "direct": true,
            "version": "v1.9.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": true,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shirou/gopsutil/v4",
            "direct": true,
            "version": "v4.26.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/swaggo/files",
            "direct": true,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/swaggo/gin-swagger",
            "direct": true,
            "version": "v1.4.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/swaggo/swag",
            "direct": true,
            "version": "v1.16.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/syndtr/goleveldb",
            "direct": true,
            "version": "v1.0.1-0.20210819022825-2ae1ddf74ef7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/urfave/cli",
            "direct": true,
            "version": "v1.22.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/whyrusleeping/timecache",
            "direct": true,
            "version": "v0.0.0-20160911033111-cfcb2f1abfee",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.52.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": true,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": true,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": true,
            "version": "v1.36.11",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/go-playground/validator.v8",
            "direct": true,
            "version": "v8.18.2",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": true,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "filippo.io/bigmod",
            "direct": false,
            "version": "v0.1.1-0.20260103110540-f8a47775ebe5",
            "ecosystem": "go"
          },
          {
            "name": "filippo.io/keygen",
            "direct": false,
            "version": "v0.0.0-20260114151900-8e2790ea4c5b",
            "ecosystem": "go"
          },
          {
            "name": "github.com/benbjohnson/clock",
            "direct": false,
            "version": "v1.3.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bugsnag/panicwrap",
            "direct": false,
            "version": "v1.3.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bytedance/sonic",
            "direct": false,
            "version": "v1.11.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/chenzhuoyu/base64x",
            "direct": false,
            "version": "v0.0.0-20230717121745-296ad89f973d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/chenzhuoyu/iasm",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cpuguy83/go-md2man/v2",
            "direct": false,
            "version": "v2.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davidlazar/go-crypto",
            "direct": false,
            "version": "v0.0.0-20200604182044-b73af7476f6c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dunglas/httpsfv",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ebitengine/purego",
            "direct": false,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/elastic/elastic-transport-go/v8",
            "direct": false,
            "version": "v8.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/filecoin-project/go-clock",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/flynn/noise",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gabriel-vasile/mimetype",
            "direct": false,
            "version": "v1.4.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gin-contrib/sse",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "v1.2.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.19.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.19.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/spec",
            "direct": false,
            "version": "v0.20.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.19.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-playground/locales",
            "direct": false,
            "version": "v0.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-playground/universal-translator",
            "direct": false,
            "version": "v0.18.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-playground/validator/v10",
            "direct": false,
            "version": "v10.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goccy/go-json",
            "direct": false,
            "version": "v0.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofrs/uuid",
            "direct": false,
            "version": "v4.0.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/snappy",
            "direct": false,
            "version": "v0.0.5-0.20231225225746-43d5d4cd4e0e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gopacket",
            "direct": false,
            "version": "v1.1.19",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru/v2",
            "direct": false,
            "version": "v2.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/huin/goupnp",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ipfs/boxo",
            "direct": false,
            "version": "v0.39.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ipfs/go-cid",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ipfs/go-datastore",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ipld/go-ipld-prime",
            "direct": false,
            "version": "v0.23.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackpal/go-nat-pmp",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jbenet/go-temp-err-catcher",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kardianos/osext",
            "direct": false,
            "version": "v0.0.0-20190222173326-2bc1f35cddc0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/cpuid/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/koron/go-ssdp",
            "direct": false,
            "version": "v0.0.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kylebanks/depth",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/leodido/go-urn",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-buffer-pool",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-cidranger",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-flow-metrics",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-libp2p-asn-util",
            "direct": false,
            "version": "v0.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-libp2p-record",
            "direct": false,
            "version": "v0.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-libp2p-routing-helpers",
            "direct": false,
            "version": "v0.7.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-msgio",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-netroute",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-reuseport",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/libp2p/go-yamux/v5",
            "direct": false,
            "version": "v5.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lufia/plan9stats",
            "direct": false,
            "version": "v0.0.0-20211012122336-39d0f177ccd0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/marten-seemann/tcp",
            "direct": false,
            "version": "v0.0.0-20210406111302-dfbc87cc63fd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mikioh/tcpinfo",
            "direct": false,
            "version": "v0.0.0-20190314235526-30a79bb1804b",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mikioh/tcpopt",
            "direct": false,
            "version": "v0.0.0-20190314235656-172688c1accc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/minio/sha256-simd",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-wordwrap",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-base32",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-multiaddr-dns",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-multiaddr-fmt",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-multibase",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-multicodec",
            "direct": false,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-multihash",
            "direct": false,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-multistream",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/multiformats/go-varint",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nsf/termbox-go",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/onsi/gomega",
            "direct": false,
            "version": "v1.30.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pbnjay/memory",
            "direct": false,
            "version": "v0.0.0-20210728143218-7b4eea64cf58",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml/v2",
            "direct": false,
            "version": "v2.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/datachannel",
            "direct": false,
            "version": "v1.5.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/dtls/v3",
            "direct": false,
            "version": "v3.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/ice/v4",
            "direct": false,
            "version": "v4.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/interceptor",
            "direct": false,
            "version": "v0.1.40",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/logging",
            "direct": false,
            "version": "v0.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/mdns/v2",
            "direct": false,
            "version": "v2.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/randutil",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/rtcp",
            "direct": false,
            "version": "v1.2.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/rtp",
            "direct": false,
            "version": "v1.8.19",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/sctp",
            "direct": false,
            "version": "v1.8.39",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/sdp/v3",
            "direct": false,
            "version": "v3.0.18",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/srtp/v3",
            "direct": false,
            "version": "v3.0.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/stun/v3",
            "direct": false,
            "version": "v3.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/transport/v3",
            "direct": false,
            "version": "v3.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/transport/v4",
            "direct": false,
            "version": "v4.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/turn/v4",
            "direct": false,
            "version": "v4.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pion/webrtc/v4",
            "direct": false,
            "version": "v4.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/polydawn/refmt",
            "direct": false,
            "version": "v0.89.1-0.20231129105047-37766d95467a",
            "ecosystem": "go"
          },
          {
            "name": "github.com/power-devops/perfstat",
            "direct": false,
            "version": "v0.0.0-20240221224432-82ca36839d55",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.67.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.20.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/puerkitobio/purell",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/puerkitobio/urlesc",
            "direct": false,
            "version": "v0.0.0-20170810143723-de5bf2ad4578",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quic-go/qpack",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quic-go/quic-go",
            "direct": false,
            "version": "v0.59.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/quic-go/webtransport-go",
            "direct": false,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.4.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/russross/blackfriday/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spaolacci/murmur3",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/go-sysconf",
            "direct": false,
            "version": "v0.3.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/numcpus",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/twitchyliquid64/golang-asm",
            "direct": false,
            "version": "v0.15.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ugorji/go/codec",
            "direct": false,
            "version": "v1.2.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/whyrusleeping/go-keyspace",
            "direct": false,
            "version": "v0.0.0-20160322163242-5b898ac5add1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/wlynxg/anet",
            "direct": false,
            "version": "v0.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yusufpapurcu/wmi",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.42.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.42.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.42.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/dig",
            "direct": false,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/fx",
            "direct": false,
            "version": "v1.24.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/mock",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": false,
            "version": "v1.27.1",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/arch",
            "direct": false,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20260410095643-746e56fc9e2f",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.35.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.55.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/telemetry",
            "direct": false,
            "version": "v0.0.0-20260409153401-be6f6cb8b1fa",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.12.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.44.0",
            "ecosystem": "go"
          },
          {
            "name": "gonum.org/v1/gonum",
            "direct": false,
            "version": "v0.17.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/go-playground/assert.v1",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "lukechampine.com/blake3",
            "direct": false,
            "version": "v1.4.1",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 202,
        "direct_count": 54,
        "indirect_count": 148
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 7,
        "merged_prs": 71,
        "open_issues": 6,
        "closed_ratio": 0,
        "closed_issues": 0,
        "closed_unmerged_prs": 13
      },
      "bus_factor": 2,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "fbsobreira",
          "commits": 128,
          "avatar_url": "https://avatars.githubusercontent.com/u/8503176?v=4"
        },
        {
          "type": "User",
          "login": "nickgs1337",
          "commits": 74,
          "avatar_url": "https://avatars.githubusercontent.com/u/16809614?v=4"
        },
        {
          "type": "User",
          "login": "Beroni",
          "commits": 65,
          "avatar_url": "https://avatars.githubusercontent.com/u/27152746?v=4"
        },
        {
          "type": "User",
          "login": "phcarneirobc",
          "commits": 32,
          "avatar_url": "https://avatars.githubusercontent.com/u/125515049?v=4"
        },
        {
          "type": "User",
          "login": "marcioecom",
          "commits": 31,
          "avatar_url": "https://avatars.githubusercontent.com/u/63985887?v=4"
        },
        {
          "type": "User",
          "login": "emersonfbarros",
          "commits": 22,
          "avatar_url": "https://avatars.githubusercontent.com/u/72613326?v=4"
        },
        {
          "type": "User",
          "login": "n4t4l",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/9087347?v=4"
        },
        {
          "type": "User",
          "login": "2yuri",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/54409166?v=4"
        },
        {
          "type": "User",
          "login": "RomuloSiebra",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/51921927?v=4"
        },
        {
          "type": "User",
          "login": "Test0rMaik",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/47918413?v=4"
        }
      ],
      "contributors_sampled": 11,
      "top_contributor_share": 0.332
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "e2e-tests.yaml",
        "go-setup-lint.yaml",
        "pr-qa-sec.yaml",
        "push.yaml",
        "release-docker.yaml",
        "release.yaml",
        "tests-dispatch.yaml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 0,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 5,
            "reason": "1 out of 2 merged PRs checked by a CI test -- score normalized to 5",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 2/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 4 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 0,
            "reason": "dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 5,
            "reason": "5 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "b7276d241e1897deeb1fbee52588f593d2de325f",
        "ran_at": "2026-07-28T09:44:28Z",
        "aggregate_score": 2.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-25T16:57:03Z",
      "oldest_open_prs": [
        {
          "number": 83,
          "created_at": "2026-07-10T13:31:40Z",
          "last_comment_at": "2026-07-10T13:33:50Z",
          "last_comment_author": "coderabbitai"
        },
        {
          "number": 86,
          "created_at": "2026-07-19T16:46:21Z",
          "last_comment_at": "2026-07-24T19:51:34Z",
          "last_comment_author": "coderabbitai"
        },
        {
          "number": 92,
          "created_at": "2026-07-20T15:47:46Z",
          "last_comment_at": "2026-07-20T15:48:30Z",
          "last_comment_author": "coderabbitai"
        },
        {
          "number": 96,
          "created_at": "2026-07-21T14:41:52Z",
          "last_comment_at": "2026-07-25T07:24:06Z",
          "last_comment_author": "coderabbitai"
        },
        {
          "number": 97,
          "created_at": "2026-07-23T13:38:38Z",
          "last_comment_at": "2026-07-25T06:21:08Z",
          "last_comment_author": "coderabbitai"
        },
        {
          "number": 98,
          "created_at": "2026-07-23T14:13:39Z",
          "last_comment_at": "2026-07-26T05:02:27Z",
          "last_comment_author": "Test0rMaik"
        },
        {
          "number": 99,
          "created_at": "2026-07-23T14:23:37Z",
          "last_comment_at": "2026-07-26T13:53:43Z",
          "last_comment_author": "coderabbitai"
        }
      ],
      "last_merged_pr_at": "2026-07-24T17:39:42Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 49,
          "created_at": "2026-05-13T09:52:29Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 88,
          "created_at": "2026-07-20T08:45:26Z",
          "last_comment_at": "2026-07-20T10:49:15Z",
          "last_comment_author": "MathijsBok"
        },
        {
          "number": 90,
          "created_at": "2026-07-20T13:04:16Z",
          "last_comment_at": "2026-07-20T14:50:20Z",
          "last_comment_author": "MathijsBok"
        },
        {
          "number": 91,
          "created_at": "2026-07-20T13:46:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 93,
          "created_at": "2026-07-20T16:02:18Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 94,
          "created_at": "2026-07-20T16:02:20Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/klever-io/klever-go",
    "host": "github.com",
    "name": "klever-go",
    "owner": "klever-io"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 67,
      "inputs": {
        "security": 37,
        "vitality": 85,
        "community": 61,
        "governance": 65,
        "engineering": 80
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 85,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 87,
            "inputs": {
              "commits_last_year": 155,
              "human_commit_share": 1,
              "days_since_last_push": 3,
              "active_weeks_last_year": 33
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "33/52 weeks with commits",
                "points": 22.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 33
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "155 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 155
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 83,
            "inputs": {
              "releases_count": 7,
              "latest_release_tag": "v1.7.20",
              "releases_from_tags": false,
              "days_since_latest_release": 7,
              "mean_days_between_releases": 49.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "7 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 7 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~49.4 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 49.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 3,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 3 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 61,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 33,
            "inputs": {
              "forks": 6,
              "stars": 30,
              "watchers": 6,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "30 stars",
                "points": 23.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 30
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "6 forks",
                "points": 5.8,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "6 watchers",
                "points": 3.9,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (GPL-3.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "GPL-3.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 65,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 11,
              "top_contributor_share": 0.332
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 33% of commits",
                "points": 15,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 33
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "11 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 32,
            "inputs": {
              "merged_prs": 71,
              "open_issues": 6,
              "closed_issues": 0,
              "issue_closed_ratio": 0,
              "closed_unmerged_prs": 13
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "0% of issues closed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 0
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "71/84 decided PRs merged",
                "points": 32.3,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 71,
                      "decided": 84
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 2/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "followers": 106,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "klever-io",
              "public_repos": 178,
              "account_age_days": 2269
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "106 followers of klever-io",
                "points": 14.6,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 106,
                      "login": "klever-io"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "178 public repos, account ~6 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 178
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/klever-io/klever-go"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 11
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 11 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 11
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "7 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 80,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "7 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 2 merged PRs checked by a CI test -- score normalized to 5",
                "points": 10,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [
                "blockchain",
                "consensus",
                "cryptocurrency",
                "decentralized",
                "defi",
                "dpos",
                "golang",
                "klever",
                "kvm",
                "node",
                "p2p",
                "smart-contracts",
                "wasm",
                "web3",
                "webassembly"
              ],
              "has_wiki": false,
              "homepage": "https://klever.org",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://klever.org",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "15 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 37,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 26,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 2.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 2 merged PRs checked by a CI test -- score normalized to 5",
                "points": 1.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 2/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "dangerous workflow patterns detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "5 existing vulnerabilities detected",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "good",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 202 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 202
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "source": "osv",
              "advisories": 5,
              "affected_packages": 5,
              "assessed_packages": 202,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 1, unknown 4",
              "direct_affected_packages": 3
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "3 affected: github.com/libp2p/go-libp2p-kad-dht v0.39.2 (unknown), golang.org/x/crypto v0.52.0 (unknown), golang.org/x/text v0.37.0 (unknown)",
                "points": 23.1,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 3,
                      "packages": "github.com/libp2p/go-libp2p-kad-dht v0.39.2 (unknown), golang.org/x/crypto v0.52.0 (unknown), golang.org/x/text v0.37.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 592 days ago",
                "points": 37.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 592
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 202,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 10
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 62,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.76,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "76 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 76,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile",
                "docker/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile, docker/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile, docker/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 256455,
              "source_files_sampled": 2189,
              "oversized_source_files": 21
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "21/2189 source files over 60KB",
                "points": 54.5,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 2189,
                      "oversized": 21
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": false,
              "api_schema_files": [
                "common/mock/proto/accountWrapperMock.proto",
                "core/consensus/proto/message.proto",
                "core/kapp/kdaFeesPool/proto/kdaFeesPoolData.proto",
                "core/kapp/validators/proto/validatorData.proto",
                "core/process/block/bootstrapStorage/proto/bootstrapData.proto",
                "data/batch/proto/batch.proto",
                "data/block/proto/block.proto",
                "data/dkda/proto/dkda.proto",
                "data/metrics/proto/metrics.proto",
                "data/retriever/proto/requestData.proto",
                "data/state/proto/kappAccountData.proto",
                "data/state/proto/peerAccountData.proto",
                "data/state/proto/userAccountData.proto",
                "data/state/proto/validatorInfo.proto",
                "data/transaction/proto/contracts.proto",
                "data/transaction/proto/log.proto",
                "data/transaction/proto/transaction.proto",
                "data/trie/proto/node.proto",
                "kapps/proto/ito.proto",
                "kapps/proto/kda.proto",
                "kapps/proto/market.proto",
                "kapps/proto/proposal.proto",
                "kapps/proto/staking.proto",
                "kapps/proto/systemAccount.proto",
                "kapps/proto/userKapps.proto",
                "network/p2p/data/proto/authMessage.proto",
                "network/p2p/data/proto/topicMessage.proto",
                "node/heartbeat/data/proto/heartbeat.proto",
                "protobuf/google/protobuf/api.proto",
                "protobuf/google/protobuf/compiler/plugin.proto",
                "protobuf/google/protobuf/descriptor.proto",
                "protobuf/google/protobuf/duration.proto",
                "protobuf/google/protobuf/empty.proto",
                "protobuf/google/protobuf/field_mask.proto",
                "protobuf/google/protobuf/source_context.proto",
                "protobuf/google/protobuf/struct.proto",
                "protobuf/google/protobuf/timestamp.proto",
                "protobuf/google/protobuf/type.proto",
                "protobuf/google/protobuf/wrappers.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "common/mock/proto/accountWrapperMock.proto, core/consensus/proto/message.proto, core/kapp/kdaFeesPool/proto/kdaFeesPoolData.proto, core/kapp/validators/proto/validatorData.proto, core/process/block/bootstrapStorage/proto/bootstrapData.proto, data/batch/proto/batch.proto, data/block/proto/block.proto, data/dkda/proto/dkda.proto, data/metrics/proto/metrics.proto, data/retriever/proto/requestData.proto, data/state/proto/kappAccountData.proto, data/state/proto/peerAccountData.proto, data/state/proto/userAccountData.proto, data/state/proto/validatorInfo.proto, data/transaction/proto/contracts.proto, data/transaction/proto/log.proto, data/transaction/proto/transaction.proto, data/trie/proto/node.proto, kapps/proto/ito.proto, kapps/proto/kda.proto, kapps/proto/market.proto, kapps/proto/proposal.proto, kapps/proto/staking.proto, kapps/proto/systemAccount.proto, kapps/proto/userKapps.proto, network/p2p/data/proto/authMessage.proto, network/p2p/data/proto/topicMessage.proto, node/heartbeat/data/proto/heartbeat.proto, protobuf/google/protobuf/api.proto, protobuf/google/protobuf/compiler/plugin.proto, protobuf/google/protobuf/descriptor.proto, protobuf/google/protobuf/duration.proto, protobuf/google/protobuf/empty.proto, protobuf/google/protobuf/field_mask.proto, protobuf/google/protobuf/source_context.proto, protobuf/google/protobuf/struct.proto, protobuf/google/protobuf/timestamp.proto, protobuf/google/protobuf/type.proto, protobuf/google/protobuf/wrappers.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "common/mock/proto/accountWrapperMock.proto, core/consensus/proto/message.proto, core/kapp/kdaFeesPool/proto/kdaFeesPoolData.proto, core/kapp/validators/proto/validatorData.proto, core/process/block/bootstrapStorage/proto/bootstrapData.proto, data/batch/proto/batch.proto, data/block/proto/block.proto, data/dkda/proto/dkda.proto, data/metrics/proto/metrics.proto, data/retriever/proto/requestData.proto, data/state/proto/kappAccountData.proto, data/state/proto/peerAccountData.proto, data/state/proto/userAccountData.proto, data/state/proto/validatorInfo.proto, data/transaction/proto/contracts.proto, data/transaction/proto/log.proto, data/transaction/proto/transaction.proto, data/trie/proto/node.proto, kapps/proto/ito.proto, kapps/proto/kda.proto, kapps/proto/market.proto, kapps/proto/proposal.proto, kapps/proto/staking.proto, kapps/proto/systemAccount.proto, kapps/proto/userKapps.proto, network/p2p/data/proto/authMessage.proto, network/p2p/data/proto/topicMessage.proto, node/heartbeat/data/proto/heartbeat.proto, protobuf/google/protobuf/api.proto, protobuf/google/protobuf/compiler/plugin.proto, protobuf/google/protobuf/descriptor.proto, protobuf/google/protobuf/duration.proto, protobuf/google/protobuf/empty.proto, protobuf/google/protobuf/field_mask.proto, protobuf/google/protobuf/source_context.proto, protobuf/google/protobuf/struct.proto, protobuf/google/protobuf/timestamp.proto, protobuf/google/protobuf/type.proto, protobuf/google/protobuf/wrappers.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T09:44:42.525508Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/k/klever-io/klever-go.svg",
  "full_name": "klever-io/klever-go",
  "license_state": "standard",
  "license_spdx": "GPL-3.0"
}