Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 08:43 UTC
lensesio / lenses-go
Lenses.io CLI (command-line interface)
lensesio/lenses-go holds a health index of 55 out of 100, placing it in the Moderate band. It scores highest on Sustainability & Governance (74/100) and lowest on Vitality (42/100). It was last updated 12 days ago. 2 contributors account for most of its recent work.
55
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
55
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Lenses.ioOrganization
127 followers80 public repossince Mar 2015
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/lensesio/lenses-go/v5 | v5.5.6 | - | 22 | 12 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
42
Development activity
34At risk
How it's scored
| 28.8/36 | Push recency — last push 12 days ago |
| 1.4/36 | Commit cadence — 2/52 weeks with commits |
| 4.3/18 | Commit volume — 2 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 2 |
| human_commit_share | 0.96 |
| days_since_last_push | 12 |
| active_weeks_last_year | 2 |
Release discipline
54Moderate
How it's scored
| 27/27 | Ships releases — 28 releases published |
| 0/36 | Release recency — latest release 2,308 days ago |
| 27/27 | Release cadence — a release every ~18.3 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 28 |
| latest_release_tag | 3.1.0 |
| releases_from_tags | no |
| days_since_latest_release | 2,308 |
| mean_days_between_releases | 18.3 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
60
Popularity & adoption
38At risk
How it's scored
| 25.6/60 | Stars — 39 stars |
| 6.5/25 | Forks — 7 forks |
| 6/15 | Watchers — 13 watchers |
Inputs used
| forks | 7 |
| stars | 39 |
| watchers | 13 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
85Excellent
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 18/18 | CONTRIBUTING guide |
| 13.5/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | yes |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
74
Maintainer resilience (bus factor)
64Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 14.8/22.5 | Commit distribution — top contributor authored 34% of commits |
| 13.5/13.5 | Contributor breadth — 20 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 12 contributing companies or organizations |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 20 |
| top_contributor_share | 0.342 |
Issue & PR responsiveness
69Moderate
How it's scored
| 36.4/46.8 | Issue resolution — 78% of issues closed |
| 32.9/38.3 | PR acceptance — 67/78 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 1/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 67 |
| open_issues | 2 |
| closed_issues | 7 |
| issue_closed_ratio | 0.778 |
| closed_unmerged_prs | 11 |
Ownership & stewardship
70Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 15.1/25 | Owner reach — 127 followers of lensesio |
| 25/25 | Track record — 80 public repos, account ~11 yr old |
Inputs used
| followers | 127 |
| owner_type | Organization |
| is_verified | — |
| owner_login | lensesio |
| public_repos | 80 |
| account_age_days | 4,135 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 12 days ago |
| 20/20 | Version history — 22 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/lensesio/lenses-go/v5 |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 12 |
Engineering Quality
Are baseline engineering and documentation practices in place?
44
Engineering practices
24Critical
How it's scored
| 0/24 | CI workflows |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
Inputs used
| has_ci | no |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
75Good
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://docs.lenses.io |
| 10/10 | Repository description |
| 10/10 | Topics — 6 topics |
| 10/10 | Wiki |
Inputs used
| topics | kafka, go, golang, cli, lenses, dataops |
| has_wiki | yes |
| homepage | https://docs.lenses.io |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
50
Security posture
38At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 0/2.5 | CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 1/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 12 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — no data |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — no data |
| 1.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — no data |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 14 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 4 |
| scorecard_aggregate | 3.8 |
Excluded from scoring (no data or not applicable): branch_protection, dangerous_workflow, packaging, token_permissions. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 1 |
| affected_packages | 1 |
| assessed_packages | 94 |
| unassessed_packages | 0 |
| affected_by_severity | unknown 1 |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 94 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
59
Agent context & guidance
28Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 27.8/40 | Legible commit history — 50 of 96 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.521 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — Makefile, _cicd/Makefile |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 2/10 | Demonstrated agent practice — 1 of the last 100 commits agent-authored or agent-credited |
| 8/8 | Automated maintenance — 4 of the last 100 commits are automated dependency updates |
| 3/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | Makefile, _cicd/Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0.01 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.04 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 54.7/55 | Manageable file sizes — 1/165 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 133,803 |
| source_files_sampled | 165 |
| oversized_source_files | 1 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — example |
Inputs used
| example_dirs | example |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
39GitHub stars
20contributors
2commits, last 12 months
12days since last push
28releases
2bus factor
2open issues
Gopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 7 ⇿
0Stars
7Forks
27Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 1Minor 3Patch 23
Each point covers 5 days.
OpenSSF Scorecard 3.8 / 10
3.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 0 | CI-Tests | 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 1/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 12 contributing companies or organizations |
| n/a | Dangerous-Workflow | no workflows found |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| n/a | Packaging | packaging workflow not detected |
| 3 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 3 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| n/a | Token-Permissions | No tokens found |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Direct dependencies 25
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/AlecAivazis/survey/v2 | v2.3.7 | go.mod |
| Go | github.com/Azure/azure-sdk-for-go | v68.0.0+incompatible | go.mod |
| Go | github.com/Azure/go-autorest/autorest | v0.11.29 | go.mod |
| Go | github.com/Azure/go-autorest/autorest/azure/auth | v0.5.13 | go.mod |
| Go | github.com/MakeNowJust/heredoc | v1.0.0 | go.mod |
| Go | github.com/c-bata/go-prompt | v0.2.6 | go.mod |
| Go | github.com/go-git/go-git/v5 | v5.19.1 | go.mod |
| Go | github.com/google/go-cmp | v0.7.0 | go.mod |
| Go | github.com/google/uuid | v1.6.0 | go.mod |
| Go | github.com/gorilla/websocket | v1.5.3 | go.mod |
| Go | github.com/hashicorp/vault/api | v1.15.0 | go.mod |
| Go | github.com/joho/godotenv | v1.5.1 | go.mod |
| Go | github.com/kataras/golog | v0.1.12 | go.mod |
| Go | github.com/lensesio/bite | v0.0.0-20201125135013-f88b399f1cad | go.mod |
| Go | github.com/lensesio/tableprinter | v0.0.0-20201125135848-89e81fc956e7 | go.mod |
| Go | github.com/matryer/try | v0.0.0-20161228173917-9ac251b645a2 | go.mod |
| Go | github.com/mgutz/ansi | v0.0.0-20200706080929-d51e80ef957d | go.mod |
| Go | github.com/mitchellh/mapstructure | v1.5.0 | go.mod |
| Go | github.com/pkg/errors | v0.9.1 | go.mod |
| Go | github.com/spf13/cobra | v1.8.1 | go.mod |
| Go | github.com/spf13/pflag | v1.0.5 | go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | go.mod |
| Go | gopkg.in/jcmturner/gokrb5.v5 | v5.3.0 | go.mod |
| Go | gopkg.in/yaml.v2 | v2.4.0 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
All dependencies 94
Full resolved dependency set from the GitHub dependency graph: 25 direct and 69 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/alecaivazis/survey/v2 | v2.3.7 | direct |
| Go | github.com/azure/azure-sdk-for-go | v68.0.0+incompatible | direct |
| Go | github.com/azure/go-autorest/autorest | v0.11.29 | direct |
| Go | github.com/azure/go-autorest/autorest/azure/auth | v0.5.13 | direct |
| Go | github.com/c-bata/go-prompt | v0.2.6 | direct |
| Go | github.com/go-git/go-git/v5 | v5.19.1 | direct |
| Go | github.com/google/go-cmp | v0.7.0 | direct |
| Go | github.com/google/uuid | v1.6.0 | direct |
| Go | github.com/gorilla/websocket | v1.5.3 | direct |
| Go | github.com/hashicorp/vault/api | v1.15.0 | direct |
| Go | github.com/joho/godotenv | v1.5.1 | direct |
| Go | github.com/kataras/golog | v0.1.12 | direct |
| Go | github.com/lensesio/bite | v0.0.0-20201125135013-f88b399f1cad | direct |
| Go | github.com/lensesio/tableprinter | v0.0.0-20201125135848-89e81fc956e7 | direct |
| Go | github.com/makenowjust/heredoc | v1.0.0 | direct |
| Go | github.com/matryer/try | v0.0.0-20161228173917-9ac251b645a2 | direct |
| Go | github.com/mgutz/ansi | v0.0.0-20200706080929-d51e80ef957d | direct |
| Go | github.com/mitchellh/mapstructure | v1.5.0 | direct |
| Go | github.com/pkg/errors | v0.9.1 | direct |
| Go | github.com/spf13/cobra | v1.8.1 | direct |
| Go | github.com/spf13/pflag | v1.0.5 | direct |
| Go | github.com/stretchr/testify | v1.11.1 | direct |
| Go | gopkg.in/jcmturner/gokrb5.v5 | v5.3.0 | direct |
| Go | gopkg.in/yaml.v2 | v2.4.0 | direct |
| Go | gopkg.in/yaml.v3 | v3.0.1 | direct |
| Go | dario.cat/mergo | v1.0.0 | indirect |
| Go | github.com/azure/go-autorest | v14.2.0+incompatible | indirect |
| Go | github.com/azure/go-autorest/autorest/adal | v0.9.22 | indirect |
| Go | github.com/azure/go-autorest/autorest/azure/cli | v0.4.6 | indirect |
| Go | github.com/azure/go-autorest/autorest/date | v0.3.0 | indirect |
| Go | github.com/azure/go-autorest/autorest/to | v0.4.0 | indirect |
| Go | github.com/azure/go-autorest/autorest/validation | v0.3.1 | indirect |
| Go | github.com/azure/go-autorest/logger | v0.2.1 | indirect |
| Go | github.com/azure/go-autorest/tracing | v0.6.0 | indirect |
| Go | github.com/briandowns/spinner | v1.12.0 | indirect |
| Go | github.com/cenkalti/backoff/v4 | v4.3.0 | indirect |
| Go | github.com/cheekybits/is | v0.0.0-20150225183255-68e9c0620927 | indirect |
| Go | github.com/cloudflare/circl | v1.6.4 | indirect |
| Go | github.com/cyphar/filepath-securejoin | v0.6.1 | indirect |
| Go | github.com/davecgh/go-spew | v1.1.1 | indirect |
| Go | github.com/dimchansky/utfbom | v1.1.1 | indirect |
| Go | github.com/dustin/go-humanize | v1.0.0 | indirect |
| Go | github.com/emirpasic/gods | v1.18.1 | indirect |
| Go | github.com/fatih/color | v1.16.0 | indirect |
| Go | github.com/go-git/gcfg | v1.5.1-0.20230307220236-3a3c6141e376 | indirect |
| Go | github.com/go-git/go-billy/v5 | v5.9.0 | indirect |
| Go | github.com/go-jose/go-jose/v4 | v4.1.4 | indirect |
| Go | github.com/golang-jwt/jwt/v4 | v4.5.2 | indirect |
| Go | github.com/golang/groupcache | v0.0.0-20241129210726-2c02b8208cf8 | indirect |
| Go | github.com/hashicorp/errwrap | v1.1.0 | indirect |
| Go | github.com/hashicorp/go-cleanhttp | v0.5.2 | indirect |
| Go | github.com/hashicorp/go-multierror | v1.1.1 | indirect |
| Go | github.com/hashicorp/go-retryablehttp | v0.7.7 | indirect |
| Go | github.com/hashicorp/go-rootcerts | v1.0.2 | indirect |
| Go | github.com/hashicorp/go-secure-stdlib/parseutil | v0.1.6 | indirect |
| Go | github.com/hashicorp/go-secure-stdlib/strutil | v0.1.2 | indirect |
| Go | github.com/hashicorp/go-sockaddr | v1.0.2 | indirect |
| Go | github.com/hashicorp/go-uuid | v1.0.2 | indirect |
| Go | github.com/hashicorp/hcl | v1.0.0 | indirect |
| Go | github.com/inconshreveable/mousetrap | v1.1.0 | indirect |
| Go | github.com/jbenet/go-context | v0.0.0-20150711004518-d14ea06fba99 | indirect |
| Go | github.com/jcmturner/gofork | v1.0.0 | indirect |
| Go | github.com/jmespath/go-jmespath | v0.4.0 | indirect |
| Go | github.com/kataras/pio | v0.0.13 | indirect |
| Go | github.com/kataras/tablewriter | v0.0.0-20180708051242-e063d29b7c23 | indirect |
| Go | github.com/kballard/go-shellquote | v0.0.0-20180428030007-95032a82bc51 | indirect |
| Go | github.com/kevinburke/ssh_config | v1.2.0 | indirect |
| Go | github.com/klauspost/cpuid/v2 | v2.3.0 | indirect |
| Go | github.com/mattn/go-colorable | v0.1.13 | indirect |
| Go | github.com/mattn/go-isatty | v0.0.20 | indirect |
| Go | github.com/mattn/go-runewidth | v0.0.12 | indirect |
| Go | github.com/mattn/go-tty | v0.0.3 | indirect |
| Go | github.com/microsoft/go-winio | v0.6.2 | indirect |
| Go | github.com/mitchellh/go-homedir | v1.1.0 | indirect |
| Go | github.com/pjbgf/sha1cd | v0.6.0 | indirect |
| Go | github.com/pkg/term | v1.2.0-beta.2 | indirect |
| Go | github.com/pmezard/go-difflib | v1.0.0 | indirect |
| Go | github.com/protonmail/go-crypto | v1.1.6 | indirect |
| Go | github.com/rivo/uniseg | v0.2.0 | indirect |
| Go | github.com/ryanuber/go-glob | v1.0.0 | indirect |
| Go | github.com/sergi/go-diff | v1.3.2-0.20230802210424-5b0b94c5c0d3 | indirect |
| Go | github.com/skeema/knownhosts | v1.3.1 | indirect |
| Go | github.com/xanzy/ssh-agent | v0.3.3 | indirect |
| Go | golang.org/x/crypto | v0.54.0 | indirect |
| Go | golang.org/x/net | v0.57.0 | indirect |
| Go | golang.org/x/sys | v0.47.0 | indirect |
| Go | golang.org/x/term | v0.45.0 | indirect |
| Go | golang.org/x/text | v0.40.0 | indirect |
| Go | golang.org/x/time | v0.0.0-20210220033141-f8bda1e9f3ba | indirect |
| Go | gopkg.in/jcmturner/aescts.v1 | v1.0.1 | indirect |
| Go | gopkg.in/jcmturner/dnsutils.v1 | v1.0.1 | indirect |
| Go | gopkg.in/jcmturner/goidentity.v2 | v2.0.0 | indirect |
| Go | gopkg.in/jcmturner/rpc.v0 | v0.0.2 | indirect |
| Go | gopkg.in/warnings.v0 | v0.1.2 | indirect |
Dependency advisories 1
This repository publishes no package the index resolves, so its own dependency graph was assessed — 94 packages, which also include development and test pins that never ship: 1 carry known advisories, of which 0 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| golang.org/x/crypto | v0.54.0 | indirect | unknown | 1 | — |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"kafka",
"go",
"golang",
"cli",
"lenses",
"dataops"
],
"is_fork": false,
"size_kb": 14413,
"has_wiki": true,
"homepage": "https://docs.lenses.io",
"languages": {
"Go": 996657,
"Shell": 7866,
"Makefile": 5149,
"Dockerfile": 308
},
"pushed_at": "2026-07-13T15:51:57Z",
"created_at": "2018-04-20T13:02:44Z",
"owner_type": "Organization",
"updated_at": "2026-07-13T20:15:12Z",
"description": "Lenses.io CLI (command-line interface)",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "release/5.5",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://lenses.io",
"name": "Lenses.io",
"type": "Organization",
"login": "lensesio",
"company": null,
"location": "UK (London) USA (New York) - Athens/Amsterdam",
"followers": 127,
"avatar_url": "https://avatars.githubusercontent.com/u/11728472?v=4",
"created_at": "2015-03-30T23:27:22Z",
"is_verified": null,
"public_repos": 80,
"account_age_days": 4135
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "3.1.0",
"kind": "minor",
"published_at": "2020-03-31T07:02:32Z"
},
{
"tag": "3.0.10",
"kind": "patch",
"published_at": "2020-03-10T13:28:37Z"
},
{
"tag": "3.0.9",
"kind": "patch",
"published_at": "2020-02-18T17:02:01Z"
},
{
"tag": "3.0.8",
"kind": "patch",
"published_at": "2020-02-06T01:37:23Z"
},
{
"tag": "3.0.7",
"kind": "patch",
"published_at": "2019-11-26T20:33:47Z"
},
{
"tag": "3.0.6",
"kind": "patch",
"published_at": "2019-11-11T11:41:36Z"
},
{
"tag": "3.0.5",
"kind": "patch",
"published_at": "2019-10-24T17:16:41Z"
},
{
"tag": "3.0.4",
"kind": "patch",
"published_at": "2019-10-21T16:20:00Z"
},
{
"tag": "3.0.3",
"kind": "patch",
"published_at": "2019-10-21T09:10:37Z"
},
{
"tag": "3.0.2",
"kind": "patch",
"published_at": "2019-10-18T11:38:36Z"
},
{
"tag": "3.0.1",
"kind": "patch",
"published_at": "2019-10-08T13:46:24Z"
},
{
"tag": "3.0.0",
"kind": "major",
"published_at": "2019-09-20T13:10:00Z"
},
{
"tag": "2.3.5",
"kind": "patch",
"published_at": "2019-07-19T09:30:05Z"
},
{
"tag": "2.3.4",
"kind": "patch",
"published_at": "2019-07-12T08:34:39Z"
},
{
"tag": "2.3.3",
"kind": "patch",
"published_at": "2019-06-05T11:23:41Z"
},
{
"tag": "2.3.2",
"kind": "patch",
"published_at": "2019-04-22T11:47:33Z"
},
{
"tag": "2.3.1",
"kind": "patch",
"published_at": "2019-03-26T15:49:37Z"
},
{
"tag": "2.3.0",
"kind": "minor",
"published_at": "2019-03-18T11:23:31Z"
},
{
"tag": "2.2.9",
"kind": "patch",
"published_at": "2019-03-14T10:34:35Z"
},
{
"tag": "2.2.8",
"kind": "patch",
"published_at": "2019-02-22T09:33:55Z"
},
{
"tag": "2.2.7",
"kind": "patch",
"published_at": "2019-02-12T22:41:42Z"
},
{
"tag": "2.2.6",
"kind": "patch",
"published_at": "2019-02-12T17:55:05Z"
},
{
"tag": "2.2.5",
"kind": "patch",
"published_at": "2019-02-12T09:50:08Z"
},
{
"tag": "2.2.4",
"kind": "patch",
"published_at": "2019-02-06T15:38:10Z"
},
{
"tag": "2.2.3",
"kind": "patch",
"published_at": "2019-01-23T22:57:10Z"
},
{
"tag": "2.2.2",
"kind": "patch",
"published_at": "2019-01-14T13:12:00Z"
},
{
"tag": "2.1.0",
"kind": "minor",
"published_at": "2018-08-01T16:49:36Z"
},
{
"tag": "2.0.1",
"kind": "patch",
"published_at": "2018-05-02T14:31:18Z"
}
],
"recent_commits": [
{
"oid": "3540bec397cfe1900f08019c5b59802d874a6d17",
"body": "Brings the lenses-cli image CVE count from 286 (30 Critical, 111 High,\n124 Medium, 19 Low) down to 5 non-actionable findings (no upstream fix\npublished yet: busybox CVE-2025-60876, nghttp2 CVE-2026-58055, and the\ninformational x/crypto/openpgp GO-2026-5932 deprecation advisory).\n\nGo toolchain / stdl\n[…]\no fix non-constant format strings that Go 1.24+ vet now rejects\n(fmt.Errorf/errors.Wrapf/t.Fatalf) surfaced by the toolchain bump.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[OPS-2375] Update Go to 1.26 and bump libraries to clear 3rd-party CVEs",
"author_name": "Marios Andreopoulos",
"author_login": "andmarios",
"committed_at": "2026-07-13T13:14:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bd270db085b17f9301bd7fbbbd83480a2e624dea",
"body": "**Issue:**\nWhen importing policies via CLI, the first import works correctly but subsequent\nimports of the same policy configuration cause the 'datasets' field to be\nreplaced with \"*\" instead of preserving the original values from the YAML file.\n\n**Root Cause:**\nIn pkg/import/policy_commands.go, the\n[…]\neserveDatasets: Verifies datasets are preserved during updates\n- TestImportPoliciesCreateNew: Ensures new policy creation works correctly\n\nSigned-off-by: Marios Andreopoulos <opensource@andmarios.com>",
"is_bot": false,
"headline": "Fix policy import datasets field being lost on subsequent imports",
"author_name": "Marios Andreopoulos",
"author_login": "andmarios",
"committed_at": "2025-08-22T13:19:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "409d51359e4578432a3b5900b136b42c0b62f40f",
"body": "Signed-off-by: Marios Andreopoulos <opensource@andmarios.com>",
"is_bot": false,
"headline": "[OPS-2375] Update one more library with open CVE",
"author_name": "Marios Andreopoulos",
"author_login": "andmarios",
"committed_at": "2024-11-27T22:26:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f28296474e1a99ff027690005392df60e3b351ce",
"body": "Signed-off-by: Marios Andreopoulos <opensource@andmarios.com>",
"is_bot": false,
"headline": "[OPS-2375] Update Go to 1.23 and update some libraries with open CVEs",
"author_name": "Marios Andreopoulos",
"author_login": "andmarios",
"committed_at": "2024-11-27T22:07:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "742b8f5e3116d9c6a94e3a603e1d4b0f98bfaeba",
"body": "* Add group mapping flag to users create\r\n\r\n* Add group mapping flag to users create\r\n\r\n* Add group mapping flag to users create\r\n\r\n* handle basic user types\r\n\r\n* don't send groups if sso or ldap\r\n\r\n* don't send groups if sso or ldap\r\n\r\n* Gofmt\r\n\r\nSigned-off-by: Marios Andreopoulos <opensource@andma\n[…]\nned-off-by: Marios Andreopoulos <opensource@andmarios.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Marios Andreopoulos <opensource@andmarios.com>\r\nCo-authored-by: Marios Andreopoulos <opensource@andmarios.com>",
"is_bot": false,
"headline": "Add group mapping flag to users create (#229)",
"author_name": "Andrew Stevenson",
"author_login": "andrewstevenson",
"committed_at": "2024-08-23T12:08:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e018de1df69421e723e66873d11670f119111cbc",
"body": "Pause sidecar by waiting for a signal instead of select",
"is_bot": false,
"headline": "Merge pull request #228 from lensesio-dev/fix/no-select",
"author_name": "Andrew Stevenson",
"author_login": "andrewstevenson",
"committed_at": "2024-08-19T14:51:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0e606fa4022c461bd0e84ba3efad7236ff70a3f",
"body": "Previously, the CLI was halting using an empty select. If all goroutines\nare blocking, the Go scheduler would terminate with: fatal error: all\ngoroutines are asleep - deadlock!\n\nDue to sheer luck, some leftover goroutines from previous http requests\nwere running, allowing the empty select. In some cases though, without\nleftover goroutines, the CLI would crash.\n\nThis commit aims to resolve it.",
"is_bot": false,
"headline": "Pause sidecar by waiting for a signal instead of select",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2024-08-09T13:40:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d6fc23ffa630dea1cf384828aa8b0767a026ca3",
"body": "Older Go's stdlib had a critical CVE.\n\n[OPS-2320]\n\nSigned-off-by: Marios Andreopoulos <opensource@andmarios.com>",
"is_bot": false,
"headline": "Update Go (stdlib) to 1.22 and google cloud docker",
"author_name": "Marios Andreopoulos",
"author_login": "andmarios",
"committed_at": "2024-07-01T13:20:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8fb3fd5912cff735ba43634fb0261c289825859",
"body": "* RB-450 Adds support for the new provisoning endpoint, enabling exporting connections with the new format\r\n\r\n* RB-450 addresses review comments\r\n\r\n* RB-450 Updates go-git module\r\n\r\n* RB-450 Addresses review comments - round 2\r\n\r\n---------\r\n\r\nCo-authored-by: Fran Perez <FPerezP@users.noreply.github.com>",
"is_bot": false,
"headline": "RB-450 Adds support for the new provisoning endpoint (#224)",
"author_name": "Fran Perez",
"author_login": "FPerezP",
"committed_at": "2024-05-16T13:22:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "690557be1b9e08f6e14e726eb2e1d31b5ff65995",
"body": "Signed-off-by: Marios Andreopoulos <opensource@andmarios.com>",
"is_bot": false,
"headline": "Update cross-build targets to something more modern",
"author_name": "Marios Andreopoulos",
"author_login": "andmarios",
"committed_at": "2024-03-28T18:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d69755c258cc8f091573f7f9379a36c116e5ccfb",
"body": null,
"is_bot": false,
"headline": "Handle errors and resource cleanup",
"author_name": "stheppi",
"author_login": null,
"committed_at": "2024-03-28T17:45:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95a9d7fc921d870aa83c2f78c57f4a55bb5f56ae",
"body": null,
"is_bot": false,
"headline": "file.walk already handles nested content.",
"author_name": "stheppi",
"author_login": null,
"committed_at": "2024-03-28T17:45:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8d2330738eb7a109945e021a4be2e884096ac51",
"body": null,
"is_bot": false,
"headline": "Addressing the PR comments",
"author_name": "stheppi",
"author_login": null,
"committed_at": "2024-03-28T17:45:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d63b27865458b353863ba4762d3cce462f59f6db",
"body": "… spec.",
"is_bot": false,
"headline": "Add support for exporting the new format as well as importing the new…",
"author_name": "stheppi",
"author_login": null,
"committed_at": "2024-03-28T17:45:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d4ef6c47a3e2c4506c9e66194ac4e0644b5ea15",
"body": "Co-authored-by: Rollulus <rollulus@xs4all.nl>",
"is_bot": false,
"headline": "Fix yaml struct tags (#221)",
"author_name": "Stefan Bocutiu",
"author_login": "stheppi",
"committed_at": "2024-03-28T17:45:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dac510efa9c426611dbb2672834d68574777f990",
"body": null,
"is_bot": false,
"headline": "Address the PR comments",
"author_name": "stheppi",
"author_login": null,
"committed_at": "2024-03-28T17:45:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b675dccc48a80b4a9c8dd781ab055cc0e53937a",
"body": "…he resource name.",
"is_bot": false,
"headline": "Avoids the file name clashing in the export because of lower casing t…",
"author_name": "stheppi",
"author_login": null,
"committed_at": "2024-03-28T17:45:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea5f44ae16ec29957e937d3918062c24e58e7d7f",
"body": "- Closes HTTP response bodies\n- Improves error handlings\n- Improves error messages",
"is_bot": false,
"headline": "RB-681 Addresses review comments",
"author_name": "Fran Perez",
"author_login": "FPerezP",
"committed_at": "2024-03-28T17:45:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a67e022c4359f11605f2c3455065638080d169d",
"body": null,
"is_bot": false,
"headline": "RB-681 Adds and fixes unit tests",
"author_name": "Fran Perez",
"author_login": "FPerezP",
"committed_at": "2024-03-28T17:45:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d6f979040f081a82ef8a2739837715d60064f47",
"body": null,
"is_bot": false,
"headline": "RB-681 Adds support for managing consumer groups and offsets",
"author_name": "Fran Perez",
"author_login": "FPerezP",
"committed_at": "2024-03-28T17:45:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbed4fb9f792ff6dafd5bc520db18a0e7e5e8f91",
"body": "In Lenses 5.2, a breaking change was introduced, disabling the existing\nGET /api/v1/alert/settings and introducing an incompatible v2.\n\nFortunately, the PUT /api/v1/alert/settings/{alert_setting_id} endpoint\nstill seems to work, reducing the affected CLI logic.\n\nThis commit aims to make the export t\n[…]\ns.\n\nThe logic of existing code has been kept as much intact as possible; the\n\"why\" of certain approaches has been lost over time.\n\nRB-704\n\nSigned-off-by: Marios Andreopoulos <opensource@andmarios.com>",
"is_bot": false,
"headline": "Support alert settings v2 endpoint in alert and export commands",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2024-03-28T17:45:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c51c15bdf32ed13728a0b775a026cbf159d4bde9",
"body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.7.0 to 0.17.0.\n- [Commits](https://github.com/golang/crypto/compare/v0.7.0...v0.17.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump golang.org/x/crypto from 0.7.0 to 0.17.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-03-28T17:45:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91e373bb3f4154c7d60ff40b93761c44b5f346a9",
"body": "Signed-off-by: Marios Andreopoulos <opensource@andmarios.com>",
"is_bot": false,
"headline": "[OPS-000] Fix typo in schema-registry command example",
"author_name": "Marios Andreopoulos",
"author_login": "andmarios",
"committed_at": "2024-03-28T17:45:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49283fa8b41572d9f8af8f2ebb782dac8c14feb2",
"body": null,
"is_bot": false,
"headline": "Remove nonexistent --landscape flag from examples",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2024-01-22T14:00:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b99603de0898bd923e4afa8a9c70a321e43d8731",
"body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.8.0 to 0.17.0.\n- [Commits](https://github.com/golang/net/compare/v0.8.0...v0.17.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump golang.org/x/net from 0.8.0 to 0.17.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-01-15T15:50:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3975010544d122dd85111dad969fbdb326ced91",
"body": null,
"is_bot": false,
"headline": "update Group namespace API",
"author_name": "Oleksander Moria",
"author_login": "amorya",
"committed_at": "2023-12-06T02:15:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f67e7519aaab34a1fecab8c91f415812c31fcb4",
"body": "- Remove the _ prefix so that broken example code won't go unnoticed;\n- Fix the import path which has been changed for a while;\n- Use .example instead of a real resolving domain name in the example\n so that we'll never hit a real system.",
"is_bot": false,
"headline": "Un-ignore example code and fix import path in it",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2023-11-01T10:45:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf8386eef82f4e89d8dd6a15b599f8422e936ae5",
"body": null,
"is_bot": false,
"headline": "Replace null slices with empty slices for create group",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2023-10-09T14:08:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f076eccb181f777494b54247128e52aef0abbe93",
"body": "This field went from int in v4 to string in v5.",
"is_bot": false,
"headline": "Fix API change in schema registry dataset object",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2023-07-21T07:04:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "189218693fbba60b31f3fb026af39d4966b34975",
"body": null,
"is_bot": false,
"headline": "Remove accidental left-over log line",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2023-05-01T11:41:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f0841eab5357aceed88239105c0f7220a1cc61f",
"body": null,
"is_bot": false,
"headline": "Reintroduce case-insensitivity in provision.yaml fileRefs",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2023-03-31T15:14:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "491aa9211c7aa5ed194a2d403857d7023346f89c",
"body": null,
"is_bot": false,
"headline": "Add command to manage Glue connections",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2023-03-24T16:20:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72faa705dc78a9efa909f4cea60755e11d083c33",
"body": null,
"is_bot": false,
"headline": "Add command to manage AWS connections",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2023-03-24T16:20:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f90f93d03f618e119335353971f28325b32dcd9e",
"body": null,
"is_bot": false,
"headline": "Support Glue connection in provision logic",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2023-03-24T15:48:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d46b26bd825983e9bb7f4f3224b2a5dde7a7c137",
"body": "Signed-off-by: Marios Andreopoulos <opensource@andmarios.com>",
"is_bot": false,
"headline": "[OPS-1261][OPS-1268] Add arm64 support for artifacts and docker",
"author_name": "Marios Andreopoulos",
"author_login": "andmarios",
"committed_at": "2023-03-16T15:11:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab5166097a161f8acb5f18c643bf2d7dee1b984c",
"body": "The semver Git tags have gone well beyond v1 but the module was not\nupdated with the corresponding major version suffix. This commit\naims to fix this, so that a \"go install\" hopefully works again.",
"is_bot": false,
"headline": "Sync module path major version with version Git tags",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2023-03-16T15:11:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c3b5c742bd816998dea40d36681a1c27a919ce3",
"body": null,
"is_bot": false,
"headline": "Update deps b/o vulns",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2023-03-14T09:34:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4556076309701c6a7b44e289f1f22d422a1ae856",
"body": "Rather no linter than an irritating linter. Replace with golangci-lint some day.",
"is_bot": false,
"headline": "Disable linting",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2023-03-14T09:29:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ab40d2c99b85fdadf7ffc50a9793639dee75258",
"body": "Currently, the connection command is generic. A user is supposed to\nprovide a JSON blob for a particular connection type and the CLI\nwill pass it through to the API. The format of the JSON blob is\nto be obtained from the API docs.\n\nThis commit introduces for every connection type a specific set\nof c\n[…]\nia flags. The\n\"requiredness\" and types (string, string list, bool, etc.) of the\nflags corresponds to that of the attributes.\n\nThis makes this part of the CLI less prone to errors and\nself-documenting.",
"is_bot": false,
"headline": "Introduce tailored connection management commands",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2023-03-14T09:29:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8f2bb32023181dd86df76f9b7fb4b794d99bb8f4",
"body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20210805182204-aaa1db679c0d to 0.7.0.\n- [Release notes](https://github.com/golang/net/releases)\n- [Commits](https://github.com/golang/net/commits/v0.7.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump golang.org/x/net from 0.0.0-20210805182204-aaa1db679c0d to 0.7.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2023-03-14T08:29:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8c8a05ea71912a180d307c0e91c1d40847061c1",
"body": "Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.0.0-20211004093028-2c5d950f24ef to 0.1.0.\n- [Release notes](https://github.com/golang/sys/releases)\n- [Commits](https://github.com/golang/sys/commits/v0.1.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/sys\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump golang.org/x/sys from 0.0.0-20211004093028-2c5d950f24ef to 0.1.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2023-03-14T08:29:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4235f9e586c2622622ee934898571d53088d167",
"body": "Honestly I have no idea what the correct type is, the backend emits\r\nan rfc3339 string but the backend doesn't have the track record of\r\nbeing an authority on schema correctness.",
"is_bot": false,
"headline": "Fix timestamp unmarshal error in query cmd (#203)",
"author_name": "Rollulus Rouloul",
"author_login": "rollulus",
"committed_at": "2023-03-14T08:29:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17027c1177b96f13b6d51497af675a365e2b5c3c",
"body": " - Fixed early-stage/bootstrapping connectivity check bug\n\nSigned-off-by: Darren Bishop <darren.bishop.ext@lenses.io>\nSigned-off-by: Marios Andreopoulos <opensource@andmarios.com>",
"is_bot": false,
"headline": "[OPS-2148] Fix --wait-for-lenses functionality for secure connections",
"author_name": "Darren Bishop",
"author_login": "DarrenBishop",
"committed_at": "2023-03-14T08:29:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e38b196d2ac315f684a23d5a766e140af843546a",
"body": " - Fixed bug where the client-wrapper is not configured in the non _wait-for-lenses_ case\n\nSigned-off-by: Darren Bishop <darren.bishop.ext@lenses.io>",
"is_bot": false,
"headline": "[OPS-2148] Fix --wait-for-lenses functionality for secure connections",
"author_name": "Darren Bishop",
"author_login": null,
"committed_at": "2023-02-14T11:36:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1effb8f707a5f8687173bddbda28054dc131890a",
"body": null,
"is_bot": false,
"headline": "Support optional-boolean dataset list filter flags",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2022-12-06T07:18:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8cfdcef419a10cda8a41a1723ddfd374699272e7",
"body": "Some hacks were needed to mitigiate the package global Client\nand make it dependency injectable.",
"is_bot": false,
"headline": "Add tests to list datasets endpoint",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2022-12-06T07:18:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90b6e6ed5dfda5abf7053e2d3b5361cb5cda14c0",
"body": null,
"is_bot": false,
"headline": "Specify topics to be deleted via args",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2022-12-06T07:18:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2dacef7938f07c7378dcfd48cff0348c5bc1e09",
"body": null,
"is_bot": false,
"headline": "Log to stderr, do not corrupt stdout with logs",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2022-12-06T07:18:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b0b359e06fdd12ad7ea70b8128c41e7385d5b56",
"body": null,
"is_bot": false,
"headline": "Add \"plain\" listing mode to list datasets",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2022-12-06T07:18:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15284372f5700d7078cc96cc7932e33b0a5707f2",
"body": null,
"is_bot": false,
"headline": "Support connection names in list datasets",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2022-12-06T07:18:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf094b8926afbaad4c94b99ef9c53f1c3608f4f4",
"body": "Add datasets listing command",
"is_bot": false,
"headline": "Merge pull request #190 from lensesio-dev/feat/list-datasets",
"author_name": "Rollulus Rouloul",
"author_login": "rollulus",
"committed_at": "2022-11-17T08:43:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fc503b80595705d51a61109434ae620556be79e",
"body": null,
"is_bot": false,
"headline": "Update go formatting",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2022-11-15T15:14:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "810eb9ae0b355d33e3db735f12c0c9a0e5e9b560",
"body": null,
"is_bot": false,
"headline": "Add datasets listing command",
"author_name": "Rollulus",
"author_login": "rollulus",
"committed_at": "2022-11-15T15:05:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "811751890439608fd3089a388754f1ca8804a8e4",
"body": "AC-2098 fix `connectors` command for Lenses 5.0",
"is_bot": false,
"headline": "Merge pull request #189 from lensesio-dev/fix/AC-2098",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-06-24T10:56:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae8dce992871a97808269109c112086e744b9b00",
"body": null,
"is_bot": false,
"headline": "AC-2098 lint",
"author_name": "Marcin Piątek",
"author_login": null,
"committed_at": "2022-06-24T09:25:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c4688ca8e68cf935467d0b5673bdfb076706719",
"body": null,
"is_bot": false,
"headline": "AC-2098 fix `export connectors` command",
"author_name": "Marcin Piątek",
"author_login": null,
"committed_at": "2022-06-21T13:29:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98201a656f635db206dde4c008ab7616f97a1ea3",
"body": "… config API",
"is_bot": false,
"headline": "AC-2098 fix `connectors` commands by using connections API instead of…",
"author_name": "Marcin Piątek",
"author_login": null,
"committed_at": "2022-06-21T13:14:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9717e0f19b6f60bea191811e91584eeb512fc70",
"body": "Fix issues on schema registry commands",
"is_bot": false,
"headline": "Merge pull request #187 from lensesio-dev/fix/sr-cmds",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-05-12T08:21:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6190cd70b1b9501309b117441e2c084df1a35fbb",
"body": null,
"is_bot": false,
"headline": "Remove cache for all builds (temp fix)",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-05-12T07:59:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f183d66950cf32bcd6e0b9296de7b1b4f3fba7e",
"body": "- remove debug prints\n- remove colored output\n- add minor refactor with err handling\n- add missing function comments",
"is_bot": false,
"headline": "Add minor refactoring at console output",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-05-12T07:57:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ab9ad75e9c6008bb2676b27a877dde6cc914f3b",
"body": "This fix adds the ability to export all schemas in addition to\nindividual ones when used with flag '--name'",
"is_bot": false,
"headline": "Fix 'export schemas'",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-05-12T07:55:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b17a166b6296b5168455b2ad687e827953765e1c",
"body": "Introduce a new command 'schema-registry subjects' which presents an\noverview of registerd subjects.",
"is_bot": false,
"headline": "Add schema registry subjects listing",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-05-12T07:48:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e404b65eace3853be81d4e0117e6e7725d7770d",
"body": "Improve wording on provisioning logs",
"is_bot": false,
"headline": "Merge pull request #183 from lensesio-dev/feat/improve-provision-logging",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-02-03T08:07:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cf4511576854806fd8f6070d3a62a6d1aada650",
"body": null,
"is_bot": false,
"headline": "Improve wording on provisioning logs",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-02-03T07:12:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f92870af882c9bc2e1b3e0720fd3741df8efd4b",
"body": "Sync point between master and release/5.0",
"is_bot": false,
"headline": "Merge pull request #179 from lensesio-dev/master",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-02-02T10:35:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95d78e0bfea039583cdbeb1b7fac65768ac1f50c",
"body": "Add improvements to `provision` command",
"is_bot": false,
"headline": "Merge pull request #182 from lensesio-dev/feat/OPS-2085-master",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-02-02T07:34:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad613a7ef1af67b471481e3f3840ec44b5f3f909",
"body": null,
"is_bot": false,
"headline": "Improve logging for `provision` command",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-02-01T16:16:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc45652b9fb0cf0a2a89846b2216086eaeb2ee6b",
"body": "Issue: https://landoop.atlassian.net/browse/OPS-2085",
"is_bot": false,
"headline": "Make license an optional field in provisioning",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-02-01T15:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6541b8b7219f20324fdee5aff385a65e498e194",
"body": "The addition of this flag creates an extra condition (setup is\nincomplete) before continuing with provisioning. This is requested so\nthat CLI does not overwrite values which a human can alter from UI.\n\nIssue: https://landoop.atlassian.net/browse/OPS-2085",
"is_bot": false,
"headline": "Add '--setup-mode flag to provision cmd",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-02-01T15:39:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d3360b087dcc8467ef9b57fed2f49cfd2bcaafc",
"body": "This flag will keep retrying indefinitely to establish a Lenses connection with\na 15 sec timeout and 5 sec interval.\n\nIssue: https://landoop.atlassian.net/browse/OPS-2085",
"is_bot": false,
"headline": "Add '--wait-for-lenses' flag at root cmd",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-02-01T15:39:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd6d40125774e812a330a619b6f99eccee62494f",
"body": "Sync downstream fixes from release 4.3",
"is_bot": false,
"headline": "Merge pull request #177 from lensesio-dev/sync/upstream",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-01-18T14:19:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e95957324cdd25b0abf1795c9bb36310803643a2",
"body": null,
"is_bot": false,
"headline": "Fix handling of missing file for provision",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-01-18T13:52:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f34f83c590e8f564c0855c51549b7fd33f00429",
"body": null,
"is_bot": false,
"headline": "Remove `beta` cmd and promote `provision`",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-01-18T13:40:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "555eef33c9bfe326f4bd11b82487f1c469c2844c",
"body": null,
"is_bot": false,
"headline": "Fix reported issues by static analysis",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-01-18T13:08:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e50f939e15f333292c09d2dd81f6346c6fd16990",
"body": null,
"is_bot": false,
"headline": "Fix file's name",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-01-18T10:04:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9246f50b7ae241851af8dc90f8853bdbddc24e08",
"body": null,
"is_bot": false,
"headline": "Capture error from updated function call",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-01-18T10:03:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c17027977daf064a792e9dafae9fa9ea8463e5b",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/release/4.3' into sync/upstream",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-01-18T09:26:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75818c0f338b016288247c656e254a01e9d49122",
"body": "Fix create/update policy bug (flags vs. file)",
"is_bot": false,
"headline": "Merge pull request #174 from lensesio-dev/fix/OPS-2078-re",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-01-18T08:40:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4adb056be83829a5074e447022c3af7efe83f4eb",
"body": null,
"is_bot": false,
"headline": "Fix capitalized error message",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-01-17T15:25:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "859ab3dc8722ea967cdc4ee3f76b23dd5f4148db",
"body": "When creating or updating a policy you can either pass the values as\nflags or as a file. In the case of flags, for \"fields\" and \"datasets\" we\nneed to map their string value to slice of strings when ',' has been\nused a delimiter. It was found that this was not consistent between the\ncreate and update command causing paylod disrepancies.\n\nSigned-off-by: Konstantinos 'Dean' Linaras <linaras@pm.me>",
"is_bot": false,
"headline": "Fix create/update policy bug (flags vs. file)",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-01-17T15:05:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f8dff6c0feed10de17fbbe3440b979ad6e65178",
"body": "Fix issue when updating policy with file",
"is_bot": false,
"headline": "Merge pull request #173 from lensesio-dev/fix/OPS-2078",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-01-17T13:03:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52a49acfca5f561f53277a35d014376ac7544441",
"body": "Wrong yaml tags for the update policy payload resulted in partial\nloading of yaml contents to memory.",
"is_bot": false,
"headline": "Fix issue when updating policy with file",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2022-01-17T12:51:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75f342aa608bafc5156e0185e96ab2a02816b9ea",
"body": "Add misc. fixes",
"is_bot": false,
"headline": "Merge pull request #172 from lensesio-dev/zen/1048",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2021-12-22T10:04:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26b8149ef2a9dcd208eb2346601cb9fb5bbd663d",
"body": "Command `processors` was lacking common key names when used with output\nflag `json` and `yaml`.",
"is_bot": false,
"headline": "Add explicit YAML tags to processor payload",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2021-12-22T09:50:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc5f07d33a0ddb3e4e6fb71199c1617c06048236",
"body": "Both the commands `groups` and `group get --name` should return the same\npayload but a legacy implementation of pretty printing for table view\nused different key names. With this fix we enable the same use of struct\nfor output parity between the two commands.",
"is_bot": false,
"headline": "Fix `groups get` key names",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2021-12-22T08:55:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "492c49c1f2d5207ed9c18d92931a24c528f97e25",
"body": "Fix bugs",
"is_bot": false,
"headline": "Merge pull request #171 from lensesio-dev/zen/1028",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2021-12-20T14:03:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f95c181057632fde4a09e88dd874c4c5b2a9da1",
"body": "When the '--token' flag was used the debug flag was never set\naccordingly.",
"is_bot": false,
"headline": "Fix '--debug' flag when using '--token'",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2021-12-20T13:12:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac7dab277819cbee40429a4559c2a6f432181173",
"body": "This bug was causing 'found' never to be reset when iterating list from\nthe start.",
"is_bot": false,
"headline": "Fix 'import acls' bug",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2021-12-20T13:06:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dbda2ecf4a2c177471b2228abc8e458dfc06bcf",
"body": "feat(CLI): DAT-344/ Remove SR-Proxy CLI Commands, introduce new API SR Commands",
"is_bot": false,
"headline": "Merge pull request #166 from lensesio-dev/feat/DAT-344",
"author_name": "Efstathiadis Dimitris",
"author_login": "EfstathiadisD",
"committed_at": "2021-12-15T13:24:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a845eea3318d28d21b952dac9a63f957914ed4e0",
"body": null,
"is_bot": false,
"headline": "feat(CLI): DAT-344/ Introduce import and export, fix small issues",
"author_name": "EfstathiadisD",
"author_login": null,
"committed_at": "2021-12-15T11:02:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1760d28764146d03dac5a49dce09e6c8535762f6",
"body": "* provision: use map keys as connection names",
"is_bot": false,
"headline": "provision: use map keys as connection names (#168)",
"author_name": "Marcin Piątek",
"author_login": null,
"committed_at": "2021-12-08T15:37:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf1b77264d56a426964cadb7c083b64d25aed5cc",
"body": "provision: test for checking config validity, a valid sample",
"is_bot": false,
"headline": "Merge pull request #169 from lensesio-dev/other/fix-provision-tests",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2021-12-08T09:48:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6343d07062fe2c2099da2989db7631a3736bb0d2",
"body": null,
"is_bot": false,
"headline": "Handle unmarshalling error",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2021-12-08T09:40:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "530c22b870411af0c793459a569f51d9debb49ac",
"body": "- Increases test coverage by testing whether\n'Connections' value has the expected high level map format (previously a\nlist).\n- Test explicitly for the type of error returned.",
"is_bot": false,
"headline": "Add test for 'Connections' value format",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2021-12-08T08:52:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64c121cbc855bcca51d0ff7381d08ffe3c66b64b",
"body": null,
"is_bot": false,
"headline": "provision: test for checking config validity, a valid sample",
"author_name": "Marcin Piątek",
"author_login": null,
"committed_at": "2021-12-07T16:25:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dac6a3188cc0e482ed27f17fb1e91a2735ab25c2",
"body": "As per internal request and to accomodate better usage of YAML, this\nsmall fix changes expected type of Connections from list to map.",
"is_bot": false,
"headline": "Switch from list to map",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2021-12-03T13:09:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "119578eeff9d0b25392766ec62a89ece47aa4417",
"body": null,
"is_bot": false,
"headline": "feat(CLI): DAT-344/ Fix comments and remove import/export of SR-Proxy",
"author_name": "EfstathiadisD",
"author_login": null,
"committed_at": "2021-11-29T09:21:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6001c2e5d83875aea6cf5c87e4d26d9ec5ec467",
"body": null,
"is_bot": false,
"headline": "feat(CLI): DAT-344/ Fix schema-registr documentation in commands",
"author_name": "EfstathiadisD",
"author_login": null,
"committed_at": "2021-11-29T08:54:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50e9b76d310c240026ae802d6798ed10cc7806ef",
"body": "…R Commands",
"is_bot": false,
"headline": "feat(CLI): DAT-344/ Remove SR-Proxy CLI Commands, introduce new API S…",
"author_name": "EfstathiadisD",
"author_login": null,
"committed_at": "2021-11-29T08:47:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6560761a8299c1fbc8d05bc19cc4a81afca1e27",
"body": "Switch from POST to PUT for connections endpoint",
"is_bot": false,
"headline": "Merge pull request #165 from lensesio-dev/feat/improve-provision",
"author_name": "Konstantinos 'Dean' Linaras",
"author_login": "deanlinaras",
"committed_at": "2021-11-09T16:26:48Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 28,
"commits_last_year": 2,
"latest_release_at": "2020-03-31T07:02:32Z",
"latest_release_tag": "3.1.0",
"releases_from_tags": false,
"days_since_last_push": 12,
"active_weeks_last_year": 2,
"days_since_latest_release": 2308,
"mean_days_between_releases": 18.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/lensesio/lenses-go/v5",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/lensesio/lenses-go/v5",
"is_deprecated": false,
"latest_version": "v5.5.6",
"repository_url": "https://github.com/lensesio/lenses-go",
"versions_count": 22,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-13T13:14:35Z",
"latest_version_yanked": null,
"days_since_latest_publish": 12
}
]
},
"popularity": {
"forks": 7,
"stars": 39,
"watchers": 13,
"fork_history": {
"days": [
{
"date": "2018-07-01",
"count": 1
},
{
"date": "2019-09-23",
"count": 1
},
{
"date": "2020-07-13",
"count": 1
},
{
"date": "2020-08-13",
"count": 1
},
{
"date": "2021-04-09",
"count": 1
},
{
"date": "2021-05-25",
"count": 1
},
{
"date": "2023-12-06",
"count": 1
}
],
"complete": true,
"collected": 7,
"total_forks": 7
},
"star_history": null,
"open_issues_and_prs": 5
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"_cicd/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 133803,
"source_files_sampled": 165,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.54.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5932"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 18
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 94,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/AlecAivazis/survey/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.3.7"
},
{
"name": "github.com/Azure/azure-sdk-for-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v68.0.0+incompatible"
},
{
"name": "github.com/Azure/go-autorest/autorest",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.11.29"
},
{
"name": "github.com/Azure/go-autorest/autorest/azure/auth",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.13"
},
{
"name": "github.com/MakeNowJust/heredoc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/c-bata/go-prompt",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.6"
},
{
"name": "github.com/go-git/go-git/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.19.1"
},
{
"name": "github.com/google/go-cmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.0"
},
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.3"
},
{
"name": "github.com/hashicorp/vault/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.15.0"
},
{
"name": "github.com/joho/godotenv",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.1"
},
{
"name": "github.com/kataras/golog",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.12"
},
{
"name": "github.com/lensesio/bite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20201125135013-f88b399f1cad"
},
{
"name": "github.com/lensesio/tableprinter",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20201125135848-89e81fc956e7"
},
{
"name": "github.com/matryer/try",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20161228173917-9ac251b645a2"
},
{
"name": "github.com/mgutz/ansi",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20200706080929-d51e80ef957d"
},
{
"name": "github.com/mitchellh/mapstructure",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/pkg/errors",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.1"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.1"
},
{
"name": "github.com/spf13/pflag",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.5"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "gopkg.in/jcmturner/gokrb5.v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.3.0"
},
{
"name": "gopkg.in/yaml.v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.4.0"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/alecaivazis/survey/v2",
"direct": true,
"version": "v2.3.7",
"ecosystem": "go"
},
{
"name": "github.com/azure/azure-sdk-for-go",
"direct": true,
"version": "v68.0.0+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/autorest",
"direct": true,
"version": "v0.11.29",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/autorest/azure/auth",
"direct": true,
"version": "v0.5.13",
"ecosystem": "go"
},
{
"name": "github.com/c-bata/go-prompt",
"direct": true,
"version": "v0.2.6",
"ecosystem": "go"
},
{
"name": "github.com/go-git/go-git/v5",
"direct": true,
"version": "v5.19.1",
"ecosystem": "go"
},
{
"name": "github.com/google/go-cmp",
"direct": true,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/gorilla/websocket",
"direct": true,
"version": "v1.5.3",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/vault/api",
"direct": true,
"version": "v1.15.0",
"ecosystem": "go"
},
{
"name": "github.com/joho/godotenv",
"direct": true,
"version": "v1.5.1",
"ecosystem": "go"
},
{
"name": "github.com/kataras/golog",
"direct": true,
"version": "v0.1.12",
"ecosystem": "go"
},
{
"name": "github.com/lensesio/bite",
"direct": true,
"version": "v0.0.0-20201125135013-f88b399f1cad",
"ecosystem": "go"
},
{
"name": "github.com/lensesio/tableprinter",
"direct": true,
"version": "v0.0.0-20201125135848-89e81fc956e7",
"ecosystem": "go"
},
{
"name": "github.com/makenowjust/heredoc",
"direct": true,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/matryer/try",
"direct": true,
"version": "v0.0.0-20161228173917-9ac251b645a2",
"ecosystem": "go"
},
{
"name": "github.com/mgutz/ansi",
"direct": true,
"version": "v0.0.0-20200706080929-d51e80ef957d",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/mapstructure",
"direct": true,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": true,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": true,
"version": "v1.8.1",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": true,
"version": "v1.0.5",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/jcmturner/gokrb5.v5",
"direct": true,
"version": "v5.3.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v2",
"direct": true,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": true,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "dario.cat/mergo",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest",
"direct": false,
"version": "v14.2.0+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/autorest/adal",
"direct": false,
"version": "v0.9.22",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/autorest/azure/cli",
"direct": false,
"version": "v0.4.6",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/autorest/date",
"direct": false,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/autorest/to",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/autorest/validation",
"direct": false,
"version": "v0.3.1",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/logger",
"direct": false,
"version": "v0.2.1",
"ecosystem": "go"
},
{
"name": "github.com/azure/go-autorest/tracing",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/briandowns/spinner",
"direct": false,
"version": "v1.12.0",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v4",
"direct": false,
"version": "v4.3.0",
"ecosystem": "go"
},
{
"name": "github.com/cheekybits/is",
"direct": false,
"version": "v0.0.0-20150225183255-68e9c0620927",
"ecosystem": "go"
},
{
"name": "github.com/cloudflare/circl",
"direct": false,
"version": "v1.6.4",
"ecosystem": "go"
},
{
"name": "github.com/cyphar/filepath-securejoin",
"direct": false,
"version": "v0.6.1",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/dimchansky/utfbom",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/dustin/go-humanize",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/emirpasic/gods",
"direct": false,
"version": "v1.18.1",
"ecosystem": "go"
},
{
"name": "github.com/fatih/color",
"direct": false,
"version": "v1.16.0",
"ecosystem": "go"
},
{
"name": "github.com/go-git/gcfg",
"direct": false,
"version": "v1.5.1-0.20230307220236-3a3c6141e376",
"ecosystem": "go"
},
{
"name": "github.com/go-git/go-billy/v5",
"direct": false,
"version": "v5.9.0",
"ecosystem": "go"
},
{
"name": "github.com/go-jose/go-jose/v4",
"direct": false,
"version": "v4.1.4",
"ecosystem": "go"
},
{
"name": "github.com/golang-jwt/jwt/v4",
"direct": false,
"version": "v4.5.2",
"ecosystem": "go"
},
{
"name": "github.com/golang/groupcache",
"direct": false,
"version": "v0.0.0-20241129210726-2c02b8208cf8",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/errwrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-cleanhttp",
"direct": false,
"version": "v0.5.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-multierror",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-retryablehttp",
"direct": false,
"version": "v0.7.7",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-rootcerts",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-secure-stdlib/parseutil",
"direct": false,
"version": "v0.1.6",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-secure-stdlib/strutil",
"direct": false,
"version": "v0.1.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-sockaddr",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-uuid",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/hcl",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/jbenet/go-context",
"direct": false,
"version": "v0.0.0-20150711004518-d14ea06fba99",
"ecosystem": "go"
},
{
"name": "github.com/jcmturner/gofork",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/jmespath/go-jmespath",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/kataras/pio",
"direct": false,
"version": "v0.0.13",
"ecosystem": "go"
},
{
"name": "github.com/kataras/tablewriter",
"direct": false,
"version": "v0.0.0-20180708051242-e063d29b7c23",
"ecosystem": "go"
},
{
"name": "github.com/kballard/go-shellquote",
"direct": false,
"version": "v0.0.0-20180428030007-95032a82bc51",
"ecosystem": "go"
},
{
"name": "github.com/kevinburke/ssh_config",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/cpuid/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.13",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.12",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-tty",
"direct": false,
"version": "v0.0.3",
"ecosystem": "go"
},
{
"name": "github.com/microsoft/go-winio",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/go-homedir",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/pjbgf/sha1cd",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/pkg/term",
"direct": false,
"version": "v1.2.0-beta.2",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/protonmail/go-crypto",
"direct": false,
"version": "v1.1.6",
"ecosystem": "go"
},
{
"name": "github.com/rivo/uniseg",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/ryanuber/go-glob",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/sergi/go-diff",
"direct": false,
"version": "v1.3.2-0.20230802210424-5b0b94c5c0d3",
"ecosystem": "go"
},
{
"name": "github.com/skeema/knownhosts",
"direct": false,
"version": "v1.3.1",
"ecosystem": "go"
},
{
"name": "github.com/xanzy/ssh-agent",
"direct": false,
"version": "v0.3.3",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.54.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.57.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": false,
"version": "v0.45.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.40.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.0.0-20210220033141-f8bda1e9f3ba",
"ecosystem": "go"
},
{
"name": "gopkg.in/jcmturner/aescts.v1",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/jcmturner/dnsutils.v1",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/jcmturner/goidentity.v2",
"direct": false,
"version": "v2.0.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/jcmturner/rpc.v0",
"direct": false,
"version": "v0.0.2",
"ecosystem": "go"
},
{
"name": "gopkg.in/warnings.v0",
"direct": false,
"version": "v0.1.2",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 94,
"direct_count": 25,
"indirect_count": 69
}
},
"maintainership": {
"issues": {
"open_prs": 3,
"merged_prs": 67,
"open_issues": 2,
"closed_ratio": 0.778,
"closed_issues": 7,
"closed_unmerged_prs": 11
},
"bus_factor": 2,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "kataras",
"commits": 203,
"avatar_url": "https://avatars.githubusercontent.com/u/22900943?v=4"
},
{
"type": "User",
"login": "deanlinaras",
"commits": 189,
"avatar_url": "https://avatars.githubusercontent.com/u/51319499?v=4"
},
{
"type": "User",
"login": "spirosoik",
"commits": 58,
"avatar_url": "https://avatars.githubusercontent.com/u/812075?v=4"
},
{
"type": "User",
"login": "andmarios",
"commits": 41,
"avatar_url": "https://avatars.githubusercontent.com/u/1239679?v=4"
},
{
"type": "User",
"login": "rollulus",
"commits": 27,
"avatar_url": "https://avatars.githubusercontent.com/u/10527826?v=4"
},
{
"type": "User",
"login": "EfstathiadisD",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/48406873?v=4"
},
{
"type": "User",
"login": "Antwnis",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/3376244?v=4"
},
{
"type": "User",
"login": "FPerezP",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/479485?v=4"
},
{
"type": "User",
"login": "afiore",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/63361?v=4"
},
{
"type": "User",
"login": "stheppi",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/2507367?v=4"
}
],
"contributors_sampled": 20,
"top_contributor_share": 0.342
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 12 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 3,
"reason": "dependency not pinned by hash detected -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "3540bec397cfe1900f08019c5b59802d874a6d17",
"ran_at": "2026-07-26T08:42:53Z",
"aggregate_score": 3.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-13T15:51:19Z",
"oldest_open_prs": [
{
"number": 82,
"created_at": "2021-05-25T17:33:03Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 87,
"created_at": "2023-10-11T21:19:35Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 90,
"created_at": "2023-12-19T00:14:05Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2023-12-06T15:49:33Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 52,
"created_at": "2019-09-24T20:15:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 88,
"created_at": "2023-12-06T09:51:30Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/lensesio/lenses-go",
"host": "github.com",
"name": "lenses-go",
"owner": "lensesio"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"security": 50,
"vitality": 42,
"community": 60,
"governance": 74,
"engineering": 44
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 42,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"commits_last_year": 2,
"human_commit_share": 0.96,
"days_since_last_push": 12,
"active_weeks_last_year": 2
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 12 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 12
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "2/52 weeks with commits",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 2
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "2 commits in the last year",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 2
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "moderate",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"releases_count": 28,
"latest_release_tag": "3.1.0",
"releases_from_tags": false,
"days_since_latest_release": 2308,
"mean_days_between_releases": 18.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "28 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 28
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2308 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 2308
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~18.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 18.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 12,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 12 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 12
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 60,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"forks": 7,
"stars": 39,
"watchers": 13,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "39 stars",
"points": 25.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 39
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "7 forks",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 7
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "13 watchers",
"points": 6,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 13
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 74,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 20,
"top_contributor_share": 0.342
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 34% of commits",
"points": 14.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 34
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "20 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 20
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 12 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"merged_prs": 67,
"open_issues": 2,
"closed_issues": 7,
"issue_closed_ratio": 0.778,
"closed_unmerged_prs": 11
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "78% of issues closed",
"points": 36.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 78
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "67/78 decided PRs merged",
"points": 32.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 67,
"decided": 78
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"followers": 127,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "lensesio",
"public_repos": 80,
"account_age_days": 4135
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "127 followers of lensesio",
"points": 15.1,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 127,
"login": "lensesio"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "80 public repos, account ~11 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 80
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/lensesio/lenses-go/v5"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 12
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 12 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 12
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "22 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 22
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 44,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "critical",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [
"kafka",
"go",
"golang",
"cli",
"lenses",
"dataops"
],
"has_wiki": true,
"homepage": "https://docs.lenses.io",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://docs.lenses.io",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 50,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Dangerous-Workflow, Packaging, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"dangerous_workflow",
"packaging",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 38,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 14,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 4,
"scorecard_aggregate": 3.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 12 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 94 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 94
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 94,
"unassessed_packages": 0,
"affected_by_severity": "unknown 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 94,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 14
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 59,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 28,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.521,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "50 of 96 human commits state their intent (structured subject or explanatory body)",
"points": 27.8,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 50,
"sampled": 96
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"_cicd/Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.04
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, _cicd/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, _cicd/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "4 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 4,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 133803,
"source_files_sampled": 165,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/165 source files over 60KB",
"points": 54.7,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 165,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"example"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-26T08:43:07.491006Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/l/lensesio/lenses-go.svg",
"full_name": "lensesio/lenses-go",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.