mhenrixon / pgbus

Full resolved dependency set from the GitHub dependency graph: 4 direct and 145 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 118 packages, which also include development and test pins that never ship: 2 carry known advisories, of which 0 are direct. 31 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 4029,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "CSS": 1894,
        "HTML": 180726,
        "Ruby": 2962268,
        "Shell": 131,
        "PLpgSQL": 194498,
        "JavaScript": 26629
      },
      "pushed_at": "2026-07-24T19:20:42Z",
      "created_at": "2026-03-29T23:15:16Z",
      "owner_type": "User",
      "updated_at": "2026-07-24T19:17:20Z",
      "description": "PostgreSQL-native job processing and event bus for Rails, built on PGMQ",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Ruby",
      "significant_languages": [
        "Ruby"
      ]
    },
    "owner": {
      "blog": "https://mhenrixon.com/",
      "name": "Mikael Henriksson",
      "type": "User",
      "login": "mhenrixon",
      "company": "Code Father @getzazu",
      "location": "Europe, World",
      "followers": 97,
      "avatar_url": "https://avatars.githubusercontent.com/u/106795?v=4",
      "created_at": "2009-07-20T10:07:26Z",
      "is_verified": null,
      "public_repos": 114,
      "account_age_days": 6213
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.12.4",
          "kind": "patch",
          "published_at": "2026-07-24T19:17:17Z"
        },
        {
          "tag": "v0.12.3",
          "kind": "patch",
          "published_at": "2026-07-18T05:59:00Z"
        },
        {
          "tag": "v0.12.2",
          "kind": "patch",
          "published_at": "2026-07-17T11:34:32Z"
        },
        {
          "tag": "v0.12.1",
          "kind": "patch",
          "published_at": "2026-07-15T17:21:23Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2026-07-15T12:12:58Z"
        },
        {
          "tag": "v0.11.4",
          "kind": "patch",
          "published_at": "2026-07-15T10:50:29Z"
        },
        {
          "tag": "v0.11.3",
          "kind": "patch",
          "published_at": "2026-07-11T15:02:59Z"
        },
        {
          "tag": "v0.11.2",
          "kind": "patch",
          "published_at": "2026-07-07T21:28:14Z"
        },
        {
          "tag": "v0.11.1",
          "kind": "patch",
          "published_at": "2026-07-07T20:00:55Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2026-07-07T09:58:08Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2026-07-07T04:24:11Z"
        },
        {
          "tag": "v0.9.11",
          "kind": "patch",
          "published_at": "2026-07-06T19:48:36Z"
        },
        {
          "tag": "v0.9.10",
          "kind": "patch",
          "published_at": "2026-07-05T12:06:59Z"
        },
        {
          "tag": "v0.9.9",
          "kind": "patch",
          "published_at": "2026-07-04T19:43:49Z"
        },
        {
          "tag": "v0.9.8",
          "kind": "patch",
          "published_at": "2026-07-04T11:32:57Z"
        },
        {
          "tag": "v0.9.7",
          "kind": "patch",
          "published_at": "2026-06-29T19:49:02Z"
        },
        {
          "tag": "v0.9.6",
          "kind": "patch",
          "published_at": "2026-06-28T16:19:34Z"
        },
        {
          "tag": "v0.9.5",
          "kind": "patch",
          "published_at": "2026-06-27T23:24:14Z"
        },
        {
          "tag": "v0.9.4",
          "kind": "patch",
          "published_at": "2026-06-24T09:05:53Z"
        },
        {
          "tag": "v0.9.3",
          "kind": "patch",
          "published_at": "2026-06-22T20:39:33Z"
        },
        {
          "tag": "v0.9.2",
          "kind": "patch",
          "published_at": "2026-06-22T14:00:01Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-06-19T15:13:20Z"
        },
        {
          "tag": "v0.8.4",
          "kind": "patch",
          "published_at": "2026-05-21T08:07:15Z"
        },
        {
          "tag": "v0.8.3",
          "kind": "patch",
          "published_at": "2026-05-20T12:59:06Z"
        },
        {
          "tag": "v0.8.2",
          "kind": "patch",
          "published_at": "2026-05-14T16:26:10Z"
        },
        {
          "tag": "v0.8.1",
          "kind": "patch",
          "published_at": "2026-05-08T15:37:37Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-05-08T15:15:14Z"
        },
        {
          "tag": "v0.7.9",
          "kind": "patch",
          "published_at": "2026-05-06T18:55:03Z"
        },
        {
          "tag": "v0.7.8",
          "kind": "patch",
          "published_at": "2026-04-29T06:35:07Z"
        },
        {
          "tag": "v0.7.7",
          "kind": "patch",
          "published_at": "2026-04-25T19:36:41Z"
        },
        {
          "tag": "v0.7.6",
          "kind": "patch",
          "published_at": "2026-04-23T08:51:11Z"
        },
        {
          "tag": "v0.7.5",
          "kind": "patch",
          "published_at": "2026-04-19T08:45:59Z"
        },
        {
          "tag": "v0.7.4",
          "kind": "patch",
          "published_at": "2026-04-14T06:42:41Z"
        },
        {
          "tag": "v0.7.3",
          "kind": "patch",
          "published_at": "2026-04-12T10:38:56Z"
        },
        {
          "tag": "v0.7.2",
          "kind": "patch",
          "published_at": "2026-04-11T17:27:43Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2026-04-11T16:05:07Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-04-11T14:33:36Z"
        },
        {
          "tag": "v0.6.9",
          "kind": "patch",
          "published_at": "2026-04-11T07:06:13Z"
        },
        {
          "tag": "v0.6.8",
          "kind": "patch",
          "published_at": "2026-04-11T04:40:16Z"
        },
        {
          "tag": "v0.6.7",
          "kind": "patch",
          "published_at": "2026-04-11T04:14:38Z"
        },
        {
          "tag": "v0.6.6",
          "kind": "patch",
          "published_at": "2026-04-10T19:43:20Z"
        },
        {
          "tag": "v0.6.5",
          "kind": "patch",
          "published_at": "2026-04-10T14:15:36Z"
        },
        {
          "tag": "v0.6.4",
          "kind": "patch",
          "published_at": "2026-04-10T06:38:03Z"
        },
        {
          "tag": "v0.6.3",
          "kind": "patch",
          "published_at": "2026-04-10T06:03:36Z"
        },
        {
          "tag": "v0.6.2",
          "kind": "patch",
          "published_at": "2026-04-09T17:12:50Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2026-04-09T11:33:33Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-04-09T08:21:00Z"
        },
        {
          "tag": "v0.5.1",
          "kind": "patch",
          "published_at": "2026-04-08T14:16:39Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-04-08T06:25:19Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-04-07T04:20:20Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-04-06T18:30:33Z"
        },
        {
          "tag": "v0.3.9",
          "kind": "patch",
          "published_at": "2026-04-06T17:55:08Z"
        },
        {
          "tag": "v0.3.8",
          "kind": "patch",
          "published_at": "2026-04-06T15:43:04Z"
        },
        {
          "tag": "v0.3.7",
          "kind": "patch",
          "published_at": "2026-04-06T06:44:34Z"
        },
        {
          "tag": "v0.3.6",
          "kind": "patch",
          "published_at": "2026-04-06T05:55:58Z"
        },
        {
          "tag": "v0.3.5",
          "kind": "patch",
          "published_at": "2026-04-05T04:43:06Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-04-04T09:32:06Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-04-04T04:49:07Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-04-03T10:35:54Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-04-03T09:56:18Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-04-03T07:30:02Z"
        },
        {
          "tag": "v0.2.9",
          "kind": "patch",
          "published_at": "2026-04-03T06:21:39Z"
        },
        {
          "tag": "v0.2.8",
          "kind": "patch",
          "published_at": "2026-04-03T05:50:11Z"
        },
        {
          "tag": "v0.2.7",
          "kind": "patch",
          "published_at": "2026-04-03T05:19:48Z"
        },
        {
          "tag": "v0.2.6",
          "kind": "patch",
          "published_at": "2026-04-03T04:59:07Z"
        },
        {
          "tag": "v0.2.5",
          "kind": "patch",
          "published_at": "2026-04-03T04:23:35Z"
        },
        {
          "tag": "v0.2.4",
          "kind": "patch",
          "published_at": "2026-04-02T20:14:01Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2026-04-02T18:08:53Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-04-02T17:21:16Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-04-02T07:47:22Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-04-02T05:38:06Z"
        },
        {
          "tag": "v0.1.9",
          "kind": "patch",
          "published_at": "2026-04-01T18:02:49Z"
        },
        {
          "tag": "v0.1.8",
          "kind": "patch",
          "published_at": "2026-04-01T17:28:49Z"
        },
        {
          "tag": "v0.1.7",
          "kind": "patch",
          "published_at": "2026-04-01T16:20:11Z"
        },
        {
          "tag": "v0.1.6",
          "kind": "patch",
          "published_at": "2026-04-01T16:06:48Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2026-04-01T10:16:00Z"
        },
        {
          "tag": "v0.1.4",
          "kind": "patch",
          "published_at": "2026-04-01T07:37:11Z"
        },
        {
          "tag": "v0.1.3",
          "kind": "patch",
          "published_at": "2026-04-01T04:45:29Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2026-03-31T19:04:15Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-03-31T16:51:48Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "9a73bd5180f43a02083a63fa3db0eff8cd74b195",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.12.4",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-24T19:17:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "273ada5a2cbae54a0d70dcacb6bc1b24c5485380",
          "body": "…read (SEGV on every deploy) (#377)\n\n* fix(process): stop closing the LISTEN connection from the stopping thread\n\n## Summary\n\n`NotifyListener#stop` (supervisor thread, on SIGTERM) closed the listener's\ndedicated `PG::Connection` to interrupt the blocking `wait_for_notify`, but left\n`@conn` pointing \n[…]\n against real PostgreSQL — 184\n      examples, 0 failures\n- [x] Real-PG stress: 40 start/stop cycles, zero leaked LISTEN backends\n- [x] notify_listener_spec stable across 6 randomized seeds\n\nRefs #375",
          "is_bot": false,
          "headline": "fix(process): stop closing the LISTEN connection from the stopping th…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-24T19:16:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "818b3835f1ef2a695e182285d6211a2131fbab62",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.12.3",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-18T05:58:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "381673afeeb899bc5d25cb910cf7367af4b388b1",
          "body": "* docs: sync README doctor table and config reference with shipped surface\n\n## Summary\nDoctor section claimed six checks; Doctor::CHECKS has 10. Config reference\nomitted ~20 shipped options (orphan sweep, GlobalID allowlist, doctor_on_boot,\npooler/connection overrides, streams retention/presence/bro\n[…]\nor_checks_spec.rb\n\nRefs #369\n\n* test: scope README doctor drift guard to the doctor section\n\nSearch only the #### pgbus doctor slice so a matching row elsewhere\ncannot false-pass a stale doctor table.",
          "is_bot": false,
          "headline": "docs: sync README doctor table and config reference (#373)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-18T05:58:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "73577adf4712977ae0340f65c14cfd8804a0c81c",
          "body": "…ueues (#372)\n\n* fix(mcp): populate wedge signal and scope health verdict to drained queues\n\n## Summary\n\nTwo correctness defects in `Pgbus::MCP::HealthAnalyzer` (issue #367) caused\nfalse STALLED verdicts from `pgbus doctor` / `pgbus_health` / the MCP health\ntool.\n\n1. `all_unread?` read `:max_read_ct\n[…]\n, and an age/progress gate is\ndeliberately NOT added — a live-idle drainer + never-claimed visible backlog is\nthe exact silent-wedge signature the analyzer must catch conservatively (#180).\n(thread 1)",
          "is_bot": false,
          "headline": "fix(mcp): populate wedge signal and scope health verdict to drained q…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-18T05:49:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "64f5b07bef87dda14b92d0ed084454e90f4a329f",
          "body": null,
          "is_bot": false,
          "headline": "fix(security): enforce allowed_global_id_models on ActiveJob path (#371)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-17T21:22:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "249dc71aea94d0ec7cbcc468d757d6af3c876c93",
          "body": "* fix(streams): backfill dormant pre-registry stream queues\n\n## Summary\nStream queues created before the `pgbus_stream_queues` migration never\nre-register if they never broadcast again, so doctor false-STALLed on\ntheir permanent read_ct=0 backlog and the orphan sweep could not see\nthem. Discover the\n[…]\nssful upserts\n- Generator post-install clarifies known_names vs backfill roles\n- Rake abort message is database-aware (migrate vs migrate:pgbus)\n- Rake \"already registered\" count is matched ∩ registry",
          "is_bot": false,
          "headline": "fix(streams): backfill dormant pre-registry stream queues (#370)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-17T20:56:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "342e5614e4024815738599b418b1c0b4e8942d95",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.12.2",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-17T11:34:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8526685e50bf6da3eeaa75221fcb025c38b64cb7",
          "body": "… (#365)\n\n* fix(streams): recreate stream queues when process-local memo is stale\n\nensure_stream_queue memoizes queue creation in @queues_created. Orphan\nstream sweep (and other drop_queue callers) only clear that memo in the\nprocess that drops the queue. Peer processes then skip pgmq.create and\nfai\n[…]\nonError, forget the local queue\nand archive-index memo and retry create/notify once. Unrelated\nconnection errors still raise immediately.\n\n* style: fix trailing blank lines in ensure_stream_queue_spec",
          "is_bot": false,
          "headline": "fix(streams): recreate stream queues when process-local memo is stale…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-17T11:34:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4f5475f3c307b8227e18fa904cdbd12a996db1e0",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.12.1",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-15T17:21:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a1ec94541b0e5cecccc6713bf8b235712f2cf03",
          "body": "…scades away (#360) (#364)\n\nThe upgrade_pgmq migration drops every pgmq function WITH CASCADE — which\nalso drops trigger_notify_queue_insert_listeners from every existing queue\ntable — and install_sql re-creates the functions but never the per-queue\ntriggers. After every PGMQ schema upgrade, NOTIFY-\n[…]\nreplays it per recorded row, and\nthe migration template runs it after install_sql — restoring every trigger\nat its original interval. No-op on vendored versions without the notify\nfeature.\n\nRefs #360.",
          "is_bot": false,
          "headline": "fix(pgmq): re-install NOTIFY insert triggers the upgrade migration ca…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-15T17:21:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "db2ef0cb345abf466d6855be8fcc9ff75cb18e26",
          "body": "… (#361)\n\n* fix(uniqueness,concurrency): base-class declarations reach subclasses (#357)\n\nBoth macros stored config in a class-level ivar and looked it up via\nactive_job.class without walking ancestors — class ivars don't inherit,\nso a declaration on an abstract base (the natural way to protect a\nfl\n[…]\nch 136ns vs 160ns old inline (~17% faster),\n   class-name default 23ns vs 86ns old stored-proc (3.7x faster),\n   inherited-config ancestor walk +15ns. No regression; numbers in the\n   CHANGELOG entry.",
          "is_bot": false,
          "headline": "fix(uniqueness,concurrency): base-class declarations reach subclasses…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-15T17:17:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6f14769a29b65dc94d82ce089b3c7ce12165abb8",
          "body": "…ct (#359) (#363)\n\nThe Process-liveness wedge signal keys on visible messages with read_ct=0\nwhile workers are alive — but durable stream delivery is a non-consuming\npeek, so every stream queue matches that signature permanently by design.\nOn a streams-heavy install the verdict reported a STALLED fl\n[…]\ns (fresh per verdict so long-lived\nprocesses pick up newly-registered streams; degrades to an empty set when\nthe registry table is absent). Same bug class as #308/#309, same registry\ncure.\n\nRefs #359.",
          "is_bot": false,
          "headline": "fix(health): exclude registered stream queues from the liveness verdi…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-15T17:17:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "74023382c3921bacf2fc557a0a643cf77e8fcc5d",
          "body": "…ection (#358) (#362)\n\n0.12.0 builds the dedicated streams pool from streams_connection_options —\nright for a separate streams database, wrong for the pooler-bypass pattern\nwhere streams_port pins the LISTEN connection to the direct Postgres port:\nthe pool followed the pin, putting streams_pool_size\n[…]\ns exactly like the streams_*\nand worker_notify_* override groups. Default nil = follows\nstreams_connection_options, byte-identical to 0.12.0, so separate-streams-DB\ninstalls are unchanged.\n\nRefs #358.",
          "is_bot": false,
          "headline": "fix(streams): route the streams pool independently of the LISTEN conn…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-15T16:47:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e24bfbb95110674e107470309b047a9464206cd2",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.12.0",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-15T12:12:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb0739ac7364c64b7e0ee49ee60e9be002281c2e",
          "body": "* feat(pgmq): vendor PGMQ v1.12.0\n\nVendor upstream PGMQ v1.12.0 (2026-07-14) alongside v1.11.0/v1.11.1 as an\nexact byte copy of pgmq-extension/sql/pgmq.sql at the v1.12.0 tag (sha256\nfb58c48626f068d170f37fa012ffbe5aee59ad209e9d3ac742d9dce2f3bb2993). The\nloader is version-agnostic (globs pgmq_v*.sql,\n[…]\ntall, where rails db:migrate:pgbus is the command\nthat runs it — the CHANGELOG entry and the new docs section only showed\nrails db:migrate. Mirrors step 4 of the standard upgrade procedure.\n\nRefs #351",
          "is_bot": false,
          "headline": "feat(pgmq): vendor PGMQ v1.12.0 (#356)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-15T12:12:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b41424e4f3d7278d9763d08a30d14956c5c4e4a3",
          "body": "…ECTION_OK sockets (#354) (#355)\n\n* feat(client): adopt pgmq-ruby 0.7.1 pool reload — recover wedged CONNECTION_OK sockets (#354)\n\n## Summary\nWhen the Ruby Timeout read fallback fires on a hung socket (dedicated\nconnection, non-Linux hosts or libpq < 12), Thread#raise interrupts the read\nmid-flight \n[…]\nd yet, but the stale lock would break the next docs PR)\n\nVerified: frozen_lockfile_sync_spec green; the new reload specs pass\nunder BUNDLE_GEMFILE=gemfiles/rails_7_1.gemfile (31 examples, 0 failures).",
          "is_bot": false,
          "headline": "feat(client): adopt pgmq-ruby 0.7.1 pool reload — recover wedged CONN…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-15T12:05:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7b658fda144765c4679562e5bc7aaee7dd6a7420",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.11.4",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-15T10:50:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db498372829f740e4160fd5baeda32d16112719c",
          "body": "…_mode = :session (#353)\n\n* fix(connections): dedicated LISTEN connections survive connection_guc_mode = :session\n\n## Summary\nIn :session GUC mode, forward_connection_variables leaves the database.yml\n`variables:` hash on the connection options for the CALLER to strip and apply\nvia post-connect SET.\n[…]\nowaway stub and leaves PG undefined-but-marked-loaded\nfor the rest of the process (order-dependent NameError).\n\n* style: drop extra blank line at describe body start (Layout/EmptyLinesAroundBlockBody)",
          "is_bot": false,
          "headline": "fix(connections): dedicated LISTEN connections survive connection_guc…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-15T10:49:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2908571b5e0e1b7837a3a14888e4f7c858e75446",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.11.3",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-11T15:02:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16900b8f66503e732ffc5c016fdcb35caf7e39e1",
          "body": "* feat(cli): pgbus dashboard prints import-ready AppSignal JSON\n\nThe gem ships four AppSignal dashboard definitions (the main one\nsubmitted to appsignal/public_config#80 plus the health/streams/\nthroughput extras), but they're stored in AppSignal's automated-dashboard\nformat — a metric_keys trigger \n[…]\n\"*\"; a literal or empty value would keep the keys yet leave %job_class% /\n%routing_key% unresolved. Assert the complete {key, value} hashes so the\ntest actually guards the property the fix depends on.",
          "is_bot": false,
          "headline": "feat(cli): pgbus dashboard prints import-ready AppSignal JSON (#350)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-11T14:56:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "818f7a45b66f1740ebf28a64f586c880af5a8868",
          "body": "…failures (#349)\n\n* chore: review workflow supports merge conflicts — Phase A0 before CI failures\n\nBackport of mhenrixon/phlex-reactive#220 adapted to pgbus.\n\n/github-review-pr gains Phase A0: detect conflicts via gh pr view\n--json mergeable with a local git-merge-tree fallback against the\nPR's actu\n[…]\nke one side of the\ncompiled file whole — and name the exact ad-hoc regeneration command\n(version-pinned bunx) for the both-sides-changed case, adding\nBash(bunx:*) to allowed-tools so it is executable.",
          "is_bot": false,
          "headline": "chore: review workflow supports merge conflicts — Phase A0 before CI …",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-09T09:05:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "73afdcb2023c77b7e0de78d2f1f5ff0aa7603fbf",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.11.2",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T21:28:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aba295cc084ddf0cc706a4127e16efa3700ce0fd",
          "body": "…) (#347) (#348)\n\n## Summary\nThe recommended deploy preflight `bin/pgbus doctor || true` before `bin/pgbus\nstart` boots Rails TWICE per deploy, and running doctor pre-supervisor makes the\nProcess-liveness check false-fail (no workers yet) — which is why the exit code\nhas to be swallowed with `|| tru\n[…]\n[x] bundle exec rubocop — clean (lib + spec + docs)\n- [x] bundle exec rspec — full suite, no new failures (2 pre-existing i18n)\n- [x] docs config-reference drift spec green (doctor_on_boot registered)",
          "is_bot": false,
          "headline": "feat(supervisor): single-boot doctor preflight (config.doctor_on_boot…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T21:27:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b77737ba7da566c3252291297a619c60d01aa58",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.11.1",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T20:00:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56d08d2fbfa108daf1a2e3c8a5714349db2fb23a",
          "body": "… (#344) (#346)\n\n* fix(generators): route migrations to pgbus db when connects_to is set (#344)\n\n`Generators::MigrationPath` keyed the separate-database decision purely on the\n`--database` flag. An app that had already set\n`config.connects_to = { database: { writing: :pgbus } }` still got a bare\n`ra\n[…]\n_events, which are the runtime job-failure\npath and inappropriate at generate time.\n\n- Add three migrations_path_for specs: configured path, silent-nil fallback,\n  and say-surfaced unexpected failure.",
          "is_bot": false,
          "headline": "fix(generators): route migrations to pgbus db when connects_to is set…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T19:59:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d9a4d668d6e654950e942f5a60651510cb50ec46",
          "body": "…(#343) (#345)\n\n## Summary\n`extract_ar_connection_hash` defaulted an absent `host`/`port` from\ndatabase.yml to TCP `localhost:5432`. A host-less config is a Unix-socket\nconnection — ActiveRecord connects via libpq's default socket, but pgbus's\nextracted connection pointed pgmq's dedicated raw connec\n[…]\n when the configuration_hash has neither\n\n## Verification\n- [x] bundle exec rubocop passes (configuration.rb + spec)\n- [x] bundle exec rspec spec/pgbus/configuration_spec.rb — 364 examples, 0 failures",
          "is_bot": false,
          "headline": "fix(config): don't force host:localhost on socket-based database.yml …",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T19:41:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ad4add5f21323b2b28c9d442535877a939318c3f",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.11.0",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T09:58:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6994b48df72d9b40a85463f9be90e622b3dced9",
          "body": "The #341 fix (drop --local) was incomplete: `rake release` still aborted\nat the docs lockfile with\n\n    Could not find gems matching 'thruster' valid for all resolution\n    platforms\n\nThe real cause is NOT --local — it's that any `bundle lock` re-resolves\nthe WHOLE lockfile, and docs/Gemfile.lock ca\n[…]\nimal 2-line-per-lock diff, and — proven\n— both frozen installs still succeed with the edited locks.\n\nUpdates the frozen-lockfile-sync spec's guidance to the in-place edit and\nto NOT run `bundle lock`.",
          "is_bot": false,
          "headline": "fix(release): bump the pgbus pin in place instead of re-locking (#342)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T09:57:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8f63f205c5cb5bbf2c1b334248bbc09501570549",
          "body": "…release) (#341)\n\n`rake release` aborted at the lockfile step with two bugs, both from\n`bundle lock --local`:\n\n1. For the appraisal gemfile, `--local` ignored the BUNDLE_GEMFILE-derived\n   lockfile path and wrote the ROOT Gemfile.lock instead of\n   gemfiles/rails_7_1.gemfile.lock — so the \"regenerat\n[…]\nurrent Pgbus::VERSION, so this class of drift\nfails in the normal rspec run instead of only when a frozen CI leg\nhappens to fail. Verified it goes RED on a 0.10.0-pinned lock against a\n0.10.1 gemspec.",
          "is_bot": false,
          "headline": "fix(release): drop --local from frozen-lockfile regen (it broke rake …",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T09:50:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d577ad04e4d96df7f9bd2c5e8bc3a703d0dcffac",
          "body": "* feat: DX helpers + TaggedLogging/web_auth/registry fixes (#334)\n\nStop consuming apps reimplementing the same pgbus glue:\n\n- TaggedLogging-safe log formatter: log_format= re-extends the pgbus\n  formatter with ActiveSupport::TaggedLogging::Formatter when the previous\n  one carried it, so logger.tagg\n[…]\nthe default (don't wrongly\n  suppress the open-dashboard warning).\n- Add specs: non-connection PG::Error propagates under safe:; the warning\n  still fires for the unprefixed default controller string.",
          "is_bot": false,
          "headline": "feat: DX helpers + TaggedLogging/web_auth/registry fixes (#334) (#340)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T08:23:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3cf99fa8d23f2f54734a67c5f7483ff390b479a2",
          "body": null,
          "is_bot": false,
          "headline": "feat(config)!: pre-1.0 surface-freeze hygiene (#335) (#339)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T05:51:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b8980aa6f2ea38af9c108c157302b0972e989a7",
          "body": "* chore(release): regenerate frozen lockfiles during rake release\n\nThe version bump only touched lib/pgbus/version.rb, leaving\ngemfiles/rails_7_1.gemfile.lock and docs/Gemfile.lock pinned to the OLD\npgbus version. Both install with --frozen/deployment in CI, so on the next\nPR they instant-fail (the \n[…]\n\nthe wrong lockfile. Set an absolute BUNDLE_GEMFILE per entry and drop\nchdir entirely; verified the docs regen targets docs/Gemfile even with\nBUNDLE_GEMFILE inherited to the root. (CodeRabbit review.)",
          "is_bot": false,
          "headline": "chore(release): regenerate frozen lockfiles during rake release (#338)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T05:23:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a9748e64f064f833a1088f2b7a946148eacb97bc",
          "body": "* fix(ci): sync frozen lockfiles to pgbus 0.10.0\n\ngemfiles/rails_7_1.gemfile.lock and docs/Gemfile.lock still pinned 0.9.11\nafter main bumped to 0.10.0 — the same recurring post-release drift that\ninstant-fails the frozen Rails 7.1 leg (exit 16) and docs-CI on any docs\nchange. Version pin only.\n\n* f\n[…]\nueues and DLQ-moves the events: resolve_wildcard_queues now excludes\n  registered event queues (new EventBus::Registry#event_queue_names),\n  mirroring the existing stream-queue exclusion.\n\nCloses #333",
          "is_bot": false,
          "headline": "feat(uniqueness): close three silent-correctness traps (#333) (#337)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T05:11:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "82a4af6e6adba3313854dc7536723b0c694b4760",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.10.0",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T04:24:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "146319681503a0b291a36e6456b07ee99d3264b1",
          "body": "…Y poll-floor fix (#332) (#336)",
          "is_bot": false,
          "headline": "feat(client): pooler safety — primary affinity, GUC forwarding, NOTIF…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-07T04:20:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "713977f101789b4174375fa810d8dceff934bc8f",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.9.11",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-06T19:48:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12a8b93854be6d1822f7983e8df12efa1e48bb03",
          "body": "…astic (#323 phase 1) (#330)\n\n* perf(streams): writer-burst gate bench + static-knob guidance; don't make the writer pool elastic (#323 phase 1)\n\nIssue #323 phase 1 gates the elastic-writer rewrite on \"only if writer throughput\nis the confirmed bottleneck.\" benchmarks/writer_burst_bench.rb drives a \n[…]\nthe :fast profile's\nscaling. Compute the 2→16 scaling for each profile and print them all (e.g.\n'5.1x (fast), 5.1x (typical)'), so the 'every profile' statement is backed by\neach profile's own number.",
          "is_bot": false,
          "headline": "perf(streams): writer-burst gate bench; don't make the writer pool el…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-06T19:40:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dc37f6a73def3362c315aeb44de3ac87b60a3fef",
          "body": "…toscale the job pool (#323 phase 3) (#329)\n\nIssue #323 phase 3 mandates measuring which pool a job burst starves before\nbuilding elastic job pools. benchmarks/job_burst_bench.rb (rake bench:job_burst)\nsweeps worker thread count under a fixed burst in two connection regimes and\nmeasures throughput +\n[…]\nce & tuning page; bench added to the runbook + CHANGELOG. The streams\npool autoscaling stays elastic where it genuinely pays off (its connection cost\nscales with its size). No production code changed.",
          "is_bot": false,
          "headline": "perf(jobs): job-burst gate bench + static-headroom guidance; don't au…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-06T16:23:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "28f39d26cfb2f105b87b4722e972742929ea6c6e",
          "body": "…er gap (#323) (#328)\n\n* refactor(streams): move PoolAutoscaler to Streams namespace (#323)\n\nPoolAutoscaler is a streams-pool controller, not web-specific — it was\nmis-namespaced under Web::Streamer in #327. Move it to Pgbus::Streams so the\nClient (Layer 1) can drive it from the publisher path witho\n[…]\ntrigger).\n- DB-gated publisher spec: skip a nil pool size sample (streams_pool_stats\n  returns {} on a transient read hiccup during the swap storm) instead of\n  raising NoMethodError on `size > peak`.",
          "is_bot": false,
          "headline": "feat(streams): publisher-triggered autoscale — close the pure-publish…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-06T15:30:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5dd5409fa20ab8c171e14dd8dc3e3dde693e2878",
          "body": "…327)\n\n* feat(streams): autoscale config + P1/P2 prerequisites (#323)\n\nGroundwork for self-tuning streams-pool autoscaling:\n\n- Config (opt-in, default off): streams_pool_autoscale (bool),\n  streams_pool_max (optional hard cap, nil = dynamic fair-share ceiling),\n  streams_pool_autoscale_interval (1.0\n[…]\nncy shrink is the one case\n  where visibility matters most. Adds a covering unit test.\n- pool_autoscale_bench: capture streams_pool_stats[:size] once per loop iteration\n  instead of querying it twice.",
          "is_bot": false,
          "headline": "feat(streams): self-tuning elastic streams-pool autoscaling (#323) (#…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-06T11:56:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "74a569a8462c29b0ac5a629ef6bb6e1c549984a6",
          "body": "… WARN (#326)",
          "is_bot": false,
          "headline": "fix(dispatcher): recover terminated idle DB connections and quiet the…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-06T06:54:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31a5fb1968fd5bad3f84d706556c686c3d397e7c",
          "body": "… (#323 spike) (#325)\n\n## Summary\n\nA SPIKE proving that the dedicated streams DB pool can be resized under live load\nby hot-swapping the PGMQ::Client — the feasibility gate before building any\nelastic control loop. The #324 benchmark showed async workers collapse ~3.4x\nunder a DB-bound burst on a sm\n[…]\nw-up.\n\n## Verification\n\n- [x] bundle exec rubocop passes (7 files)\n- [x] bundle exec rspec spec/pgbus — 3058 examples, 0 failures\n- [x] DB-gated swap spec + bench pass against real Postgres\n\nRefs #323",
          "is_bot": false,
          "headline": "feat(client): streams-pool hot-swap primitive — de-risk elastic pools…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-06T06:33:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8cc9fe2067755851d830756922937a496a07bdd9",
          "body": "…dance (#323) (#324)\n\n* feat(bench): execution-mode connection benchmark + DB-pool sizing guidance (#323)\n\n## Summary\n\nThe \"measure first\" gate of #323 (elastic pools): a fair, reusable harness that\nanswers \"for the same offered concurrency, how many real Postgres connections\ndoes threads mode vs as\n[…]\nhe gem.\n\n## Verification\n- [x] bundle exec rubocop passes\n- [x] bundle exec rspec spec/pgbus — 3037 examples, 0 failures\n- [x] DB-gated harness specs pass; rake bench:execution_modes numbers unchanged",
          "is_bot": false,
          "headline": "feat(bench): execution-mode connection benchmark + DB-pool sizing gui…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-06T05:21:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ec347a8052a03064deb954c9ae4cdc9d27aeb19d",
          "body": "* feat(streams): off-thread durable fanout writer (#321)\n\n## Summary\n\nThe #315 deadline only BOUNDED each slow-client fanout stall (K×250ms); the\nsingle dispatcher thread still writes to every SSE client serially. This moves\nthe durable fanout socket write OFF the dispatcher into an opt-in writer po\n[…]\nses #alive? /\n  #worker_threads so the test asserts on the pump's OWN threads directly.\n\n## Verification\n- [x] bundle exec rubocop passes\n- [x] bundle exec rspec spec/pgbus — 3020 examples, 0 failures",
          "is_bot": false,
          "headline": "feat(streams): off-thread durable fanout writer (#321) (#322)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-05T20:20:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f8e7db41827d539381a6ac6ba74ec04f28c96aed",
          "body": "…em 3) (#320)\n\n## Summary\n\nOne dispatcher thread per web-server process fans out every broadcast to\nevery connected SSE client SERIALLY, writing to each socket in turn. A slow\nclient's write blocked that thread up to the full streams_write_deadline_ms\n(5s) before the client was marked dead — and eve\n[…]\n44 examples, 0 failures\n- [x] docs rake lint + config-drift spec — clean\n- [x] before/after fanout bench captured (happy path no regression)\n\nRefs #315 (item 3; writer-offload deferred to a follow-up)",
          "is_bot": false,
          "headline": "feat(streams): bound dispatcher fanout head-of-line blocking (#315 it…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-05T18:55:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "69cd40c17fc1bd66910e1a670b5ffabf7185a8c0",
          "body": "…m the job pool (#315) (#319)\n\n* feat(streams): dedicated DB pool isolates stream publish + replay from the job pool\n\n## Summary\n\nBoth durable-stream hot paths rode on the single job connection pool\n(sized for worker threads), so job-pool pressure leaked into the browser:\n\n- `Client#send_stream_mess\n[…]\nl, so sizing max_connections off\n  resolved_pool_size alone under-provisions. Document the\n  resolved_pool_size + streams_pool_size budget in the resolved_pool_size\n  comment and the performance docs.",
          "is_bot": false,
          "headline": "feat(streams): dedicated DB pool isolates stream publish + replay fro…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-05T18:03:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bdc6a389de2d77164d77cc65d006f26876509f07",
          "body": "…gbus.yml surface for 1.0 (#317) (#318)\n\n* feat(generators): pgbus:install generates a Ruby initializer, not config/pgbus.yml (#317)\n\n## Summary\nPre-1.0 cleanup: `rails generate pgbus:install` now writes\n`config/initializers/pgbus.rb` with a documented `Pgbus.configure` block\ninstead of the legacy `\n[…]\nworker entry\nsurvives.\n\n## Verification\n- [x] rubocop: no offenses\n- [x] rspec spec/pgbus/ spec/generators/ — 3118 examples, 0 failures\n- [x] coverage line 90.1% / branch 76.07% (above the 89/75 gate)",
          "is_bot": false,
          "headline": "feat(config)!: install generates a Ruby initializer + remove config/p…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-05T17:56:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "555bbf055e9c125875e8f3f01228ece8c71d78da",
          "body": "…s (#311) (#316)\n\n* feat(streams): streams_broadcast_queue to isolate Turbo broadcast jobs (#311)\n\n## Summary\n\nThe default broadcasts_to/broadcasts_refreshes macros enqueue turbo-rails'\nrender+broadcast as ActiveJobs (Turbo::Streams::ActionBroadcastJob and\nsiblings), which ship with no queue_as and \n[…]\n strengthened warning.\n\nCode default streams_broadcast_queue stays nil; making \"realtime\" the\ngenerated default ships with the install→Ruby-initializer conversion tracked\nseparately (pre-1.0 cleanup).",
          "is_bot": false,
          "headline": "feat(streams): streams_broadcast_queue to isolate Turbo broadcast job…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-05T17:07:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b7a453d6ff091efa1617514076a6f3181e0b5c71",
          "body": "…#310) (#314)",
          "is_bot": false,
          "headline": "fix(streams): durable broadcasts bypass the priority strategy (issue …",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-05T15:05:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b8c8bc656f7e2da262af191189a4549ee8bcb72",
          "body": "…efix (#313)",
          "is_bot": false,
          "headline": "fix(streams): identify stream queues via a registry, not a phantom pr…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-05T13:36:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "655fc204a2a2a027b45b64d967ddf18afc383854",
          "body": "/plan gains a \"Surface the unknowns\" phase: a blindspot pass plus a\none-question-at-a-time AskUserQuestion interview before design, with\nanswers recorded as \"Settled in interview\" constraints in the plan.\n\n/lfg gains a deviation log (implementation-notes.md, folded into a\nmandatory \"Deviations & jud\n[…]\nody section) and a\ncomprehension close-out (key decisions + three merge-gate questions).\n\nRationale: catch unknowns before execution in discovery loops, instead\nof after execution in review-fix loops.",
          "is_bot": false,
          "headline": "chore(claude): add unknowns-discovery phases to /plan and /lfg (#312)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-05T12:59:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "03185f554a488b5d20ca9404b2c3828aa97624df",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.9.10",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-05T12:06:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8f78156a95a26e142316c7bb688400814d5f809",
          "body": "…es (#307)\n\n## Summary\n\nA durable stream's live `pgmq.q_<name>` table is never drained by normal\ndelivery — the streamer peeks (`read_after` UNIONs `q_`+`a_` without claiming\nrows), so `queue_length` stays `> 0` for any durable stream ever broadcast to,\nand retention only prunes `a_` (which stays em\n[…]\n [x] bundle exec rubocop passes (changed files clean)\n- [x] bundle exec rspec spec/pgbus/ spec/generators/ — 3115 examples, 0 failures\n- [x] coverage above floor (line 90.4%, branch 76.22%)\n\nRefs #306",
          "is_bot": false,
          "headline": "fix(streams): age-based orphan sweep drops leaked durable stream queu…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-05T12:06:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "486415281ad1bc8108dcc61c48f70c9d6329ee9c",
          "body": "…zenError → 500) (#305)\n\n* fix(mcp): return a fresh, mutable 401 instead of a frozen response triple\n\n## Summary\n`Pgbus::MCP::RackApp` returned a frozen `UNAUTHORIZED` response array on every\nauth failure. Mounted in Rails, downstream response-mutating middleware\n(`Rack::TempfileReaper` assigns `res\n[…]\nady used by stream_app.rb and\nprometheus_exporter.rb. Rack::Headers looks keys up case-insensitively, so the\nexisting \"WWW-Authenticate\" assertion stays green.\n\nAddresses CodeRabbit review on PR #305.",
          "is_bot": false,
          "headline": "fix(mcp): return a clean 401 instead of a frozen response triple (Fro…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-05T10:55:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "597a0f5c5cccce3ee274fb9d7422489dbb89459a",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.9.9",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T19:43:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23bf0ad94dd07496539dc8eac459f46a9fcf4a3c",
          "body": "…y annotations (#283) (#303)\n\n* feat(uniqueness)!: remove inert lock_ttl: keyword from ensures_uniqueness\n\nlock_ttl was validated and written into message metadata (TTL_KEY) but read\nby nothing — the uniqueness lock lives until the job completes or is\ndead-lettered, not until a TTL expires. Passing \n[…]\nring/dashboard_filter_* pattern.\n- Upgrade guide: doctor blurb says seven checks (adds the GlobalID allowlist\n  warning), and the 1.0 freeze table gains the reconnect_via_reset removal row.\n\nRefs #283",
          "is_bot": false,
          "headline": "feat: 1.0 API freeze — config renames, dead-surface removal, stabilit…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T19:43:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fd24a03e156ad903f740c1256521927180726c04",
          "body": "…#302)\n\n## Summary\n\nAt 1.0 the error hierarchy becomes a public contract, but ~45% of raises\nbypassed `Pgbus::Error`, so `rescue Pgbus::Error` missed config failures,\npool errors, batch-enqueue mismatches, and GlobalID rejections. This unifies\noperational errors under the base while deliberately kee\n[…]\nng raises in lib/ (excl. generators) — zero\n- [x] cd docs && bundle exec rspec — 69 examples, 0 failures\n\nCloses #282\nRefs #273\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "feat(errors)!: unify the error hierarchy under Pgbus::Error for 1.0 (…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T18:26:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c4d7b206d023c9218375af36cd248ccbc6f62ee4",
          "body": "CHANGELOG had only [Unreleased], [0.5.1], [0.1.0] while ~32 tags shipped\nthrough v0.9.7 — a user on 0.6.x could not see what changed. Reconstructs a\ndated section per released tag from v0.6.0 to v0.9.7, terse [0.5.1]-style\ndensity with Keep-a-Changelog category headers and Refs #NNN links.\n\nBuilt fr\n[…]\nirst-parent history (squash-merged PRs map ~1:1 to bullets),\neach bullet verified against its commit diff; pure chore/test/docs-infra\ncommits excluded per the user-facing-only convention.\n\nCloses #285",
          "is_bot": false,
          "headline": "docs(changelog): reconstruct [0.6.0]-[0.9.7] version sections (#300)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T17:45:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "240d24304d5f6f1eaf0a4054d9f019d1e8e36df8",
          "body": "…) (#299)\n\n* chore(gem): move RuboCop cop out of the published gem, add documentation_uri\n\nMove lib/rubocop/** to repo-root rubocop/ so the repo-lint-only cop\n(Pgbus/NoRubyTimeout) falls outside every spec.files glob and no longer\nships in the built gem. Update .rubocop.yml's require to ./rubocop/pg\n[…]\n the Rails 7.1 endpoint lockfile pinning the\nold 0.9.8 path-gem, so the frozen bundle install on the Rails 7.1 CI legs\nfailed. Same drift class as docs/Gemfile.lock — bump the pin to match version.rb.",
          "is_bot": false,
          "headline": "chore(release): 0.9.8.1 release hygiene (stage roll + gem/cop cleanup…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T17:37:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "07f238bdb7aa89b4648391a471311b280fe5f31c",
          "body": "Nothing watches the two hand-tracked upstreams pgbus vendors/pins: the\nPGMQ SQL schema and the pgmq-ruby gem. A nightly Action now compares\nvendored/locked versions against upstream releases and opens a\ndeduplicated GitHub issue plus optional Slack notification on drift.\nNotification only -- no auto-vendoring or auto-bumping.\n\nRefs #287",
          "is_bot": false,
          "headline": "ci(deps): nightly dependency watch for PGMQ + pgmq-ruby upstreams (#298)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T16:48:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "474d3f7d6a121c8c0d6e5026f99576c323e59a69",
          "body": "…point leg (#301)\n\nThe gemspec promises `railties >= 7.1, < 9.0`, but every CI job resolved a\nsingle Gemfile.lock pinned to the latest 8.x, so Rails 7.1 -- the lower bound\nof that claim -- was never exercised. Shipping 1.0 with an untested support\nclaim is a semver-integrity risk.\n\nAdd gemfiles/rail\n[…]\n -- no full Rails x Ruby x PG cube.\n- new lint_floor job runs rubocop + `rake build` on Ruby 3.3 (the gemspec's\n  required_ruby_version floor).\n- rubocop path extended to include gemfiles/.\n\nRefs #284",
          "is_bot": false,
          "headline": "ci(rails): prove the 7.1-8.x support matrix with a BUNDLE_GEMFILE end…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T16:36:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "553f39ef45e17e995bb07a02c9cd1617de3df0f4",
          "body": "* docs: add \"Upgrading pgbus\" guide (0.9.7 → 0.9.8 → 1.0.0 path)\n\nNo version-to-version upgrade narrative existed — the Migrate group\ncovered switching from other gems only. Adds one evergreen page with\nthe standard upgrade procedure (update → pgbus:update → migrate →\npgmq:status/upgrade_pgmq → depl\n[…]\n\n\n* docs: fix upgrade-guide step count (five → six)\n\nThe overview said \"five-step procedure\" but the numbered list has six steps\n(review and apply are distinct). Match the count and name both actions.",
          "is_bot": false,
          "headline": "docs: add \"Upgrading pgbus\" guide (0.9.7 → 0.9.8 → 1.0.0 path) (#295)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T14:37:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7eae22f9e2cc24f8272b0a6ae03d23e942fd2eb4",
          "body": "…s, timeouts) (#294)\n\nOperationally important features shipped since 0.9.7 were undocumented on\nthe docs site and missing from README parity: pgbus doctor/rake pgbus:doctor,\npgbus dlq subcommands, health endpoints (mount line, /livez /readyz,\nstandalone health_port/health_bind), eager configuration \n[…]\n with the per-queue CircuitBreaker), libpq-native\nread timeouts, Client#pool_stats, the supervisor boot diagnostics banner, and\nper-worker throughput rates on the dashboard Processes panel.\n\nRefs #279",
          "is_bot": false,
          "headline": "docs: backfill operations & DX features (doctor, dlq, health, breaker…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T14:22:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cbc404d8172c610111a405a39a0c2c8b07c3b22e",
          "body": "… presence, keys, reconciliation) (#293)\n\n* docs: backfill streams features (exclude, broadcast_render, coalesce, presence, keys, reconciliation)\n\nSeven streams features shipped since v0.9.7 (#165-#171) were name-dropped\nor missing from the docs site and README. Backfill as additive prose on\nthe exi\n[…]\nem.\n\nNo runtime code changed.\n\nRefs #280\n\n* fix(docs): pin docs/Gemfile.lock to pgbus 0.9.8\n\nAfter the 0.9.8 release bump the frozen docs bundle install failed because\nthe lockfile still pinned 0.9.7.",
          "is_bot": false,
          "headline": "docs: backfill streams features (exclude, broadcast_render, coalesce,…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T14:17:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "47fbf7c148724e32d4f249503ebd227c3b91fa8d",
          "body": "…ks onboarding (#289)",
          "is_bot": false,
          "headline": "fix(generators): add pgbus:add_uniqueness_keys, deprecate add_job_loc…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T13:50:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f08cd104ca16edea726ed9bcc6019fe35d50080c",
          "body": "…(#288)\n\n* fix(metrics): subscribe pgbus.client.pool and pgbus.consumer.recycle\n\nBoth events have shipped since v0.9.7 (#200, #205) but neither\nMetrics::Subscriber nor the AppSignal subscriber consumed them —\nPrometheus/StatsD users had zero pool visibility, and consumer\nrecycling was invisible to e\n[…]\n the event catalog instead of a brittle hardcoded count.\n- README metrics event list relabeled \\\"Metrics-relevant events emitted\\\" so the\n  curated subset is not mistaken for the full pgbus.* catalog.",
          "is_bot": false,
          "headline": "fix(metrics): subscribe pgbus.client.pool and pgbus.consumer.recycle …",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T13:34:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3f4b448e779b4238490f802812b478cce195ff02",
          "body": "…ed PRs (#296)\n\n* chore(commands): add /finish-prs — ordered merge-ready loop for stacked PRs\n\nDrives a set of open PRs to merge-ready one at a time in a fixed order,\nauto-resolving the two recurring mechanical conflicts on this repo\n(CHANGELOG [Unreleased] union-merge and the docs/Gemfile.lock froz\n[…]\n guidance: during a rebase\n  --ours is the base (main) side, so main-side is --ours, not --theirs.\n- Fixed the dangling \\\"Phase 4-lockfile-on-main\\\" reference to name the real\n  optional Phase 4 step.",
          "is_bot": false,
          "headline": "chore(commands): add /finish-prs — ordered merge-ready loop for stack…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T13:16:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cc22da3c29a62b10bea1259e9b4e85416719ffa9",
          "body": "…rdering flake (#297)\n\nconfig_loader_spec had only an `after { Pgbus.reset! }` hook. Under a random\nseed, the first example to run in the file inherits config state another spec\nfile left dirty (queue_prefix = \\\"pgbus_test\\\"), so the example asserting a\nsectioned file with no matching env applies no\n[…]\nexpected \\\"pgbus\\\" got \\\"pgbus_test\\\". Reproduced deterministically on main with\n`--seed 6154`; a `before { Pgbus.reset! }` makes the full unit suite green under\nthat seed (3051 examples, 0 failures).",
          "is_bot": false,
          "headline": "fix(test): reset config before each ConfigLoader example to kill an o…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T13:15:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6666a4dd7be5f0b0940e842f99bed436b747b24e",
          "body": "…, StatBuffer, pool heartbeat (#292)\n\nonly. Four operational safety nets were never carried over, leaving a\nconsumer fork invisible to the watchdog, the poison-queue breaker, the\nstats pipeline, and pool observability. Mirror Worker's mechanisms directly\nin Consumer (no shared module — three similar\n[…]\nstats per message and flushes at drain entry, recycle,\n  and stop.\n- Pool heartbeat: on_beat emits pgbus.client.pool once per beat.\n\nWorker, Dispatcher, and Scheduler behavior is unchanged.\n\nRefs #274",
          "is_bot": false,
          "headline": "feat(consumer): operational parity — stall detection, circuit breaker…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T12:53:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "db8a4a44d0ab596980a06819312524e788d1d37a",
          "body": "…ath (#291)\n\nVendor upstream PGMQ v1.11.1 (2026-04-19) alongside v1.11.0 (keeping both)\nso the schema-upgrade machinery finally has a genuine second version to\ntarget. Dropping pgmq_v1.11.1.sql into the schema dir makes\nPgmqSchema.available_versions list both and latest_version return \"1.11.1\"\nwith \n[…]\n without it) proves the round-trip: install v1.11.0 -> run the\ngenerated upgrade_pgmq migration's SQL -> v1.11.1 with existing queues\nand messages surviving and read_grouped_head available.\n\nRefs #286",
          "is_bot": false,
          "headline": "feat(pgmq): vendor PGMQ v1.11.1 and prove the multi-version upgrade p…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T12:36:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4772d5195ffadc61ae60469d27672ad341f47932",
          "body": "…ool_size in converter (#290)\n\nConfiguration#validate! never checked statsd_host/statsd_port/health_bind,\nso a typo'd host or negative port passed boot and only failed later when\nthe UDP socket opened. ConfigLoader.sectioned? misclassified a legitimate\nflat pgbus.yml whose every top-level setting ha\n[…]\ning nothing. The YAML->initializer converter dropped the\nlive pool_size accessor as if it were deprecated, silently discarding an\noperator's deliberate pool-size override on `pgbus:update`.\n\nRefs #276",
          "is_bot": false,
          "headline": "fix(config): validate statsd/health_bind, fix flat-YAML no-op, keep p…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T12:35:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2b827421ac8f7e551b6aadd971d0f7af57fc1c3c",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version to 0.9.8",
          "author_name": "mhenrixon",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T11:32:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c738404d699b9f13aacde712407e8b6cb4c5b6f9",
          "body": null,
          "is_bot": false,
          "headline": "chore(docs): docs-kit 1.0.4 + rouge 5 + dependency refresh (#272)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T10:26:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac74e83d68f09bd4499236ca1d7fd08cf866524e",
          "body": "…slimming (#271)",
          "is_bot": false,
          "headline": "chore(docs): upgrade to docs-kit 1.0.3 — Thruster CMD + Docker image …",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T08:39:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f48a02e2def9a90a5094bccf0fdd136497050d14",
          "body": "…ath (#270)\n\n## Summary\n`TurboBroadcastable#broadcast_stream_to` resolved durability from the\nthread-local override or `streams_default_broadcast_mode` only, then always\npassed an explicit `durable:` to `Pgbus.stream` — short-circuiting the\nresolver there (`durable.nil? ? stream_durable?(name) : dur\n[…]\nspec spec/pgbus/ spec/generators/ — 2979 examples, 0 failures, 1 pending\n- [x] coverage floors met (line 90.24%, branch 75.91%)\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "fix(streams): honor streams_durable_patterns on the Turbo broadcast p…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T07:47:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "635d881002b4ca35b5f3b7709bfa09e439f604b8",
          "body": "…, llms.txt + MCP (#269)\n\n* feat(docs-site): scaffold docs-kit site — config, registry, CI, specs\n\nPhase 1 of the pgbus.zoolutions.llc docs site (#266). A nested, stateless\ndocs-kit Rails app at docs/ — the same monorepo pattern as docs-kit's own\ndogfood site and phlex-reactive.\n\n- Scaffold via `doc\n[…]\nits lead, so it\n  confirms the tool returns THIS page. (comment #15)\n\n67 specs green; rubocop clean; all 5 diagram pages boot with the inner svg\naria-hidden and the outer role=\"img\" intact.\n\nRefs #266",
          "is_bot": false,
          "headline": "docs: pgbus.zoolutions.llc — docs-kit site with guides, flow diagrams…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T07:44:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "85ce8187b6befda73a8926d808d8ad608a39d300",
          "body": "… errors) (#268)\n\n* test(specs): exercise the real PGMQ::Errors::ConnectionError, not a fake\n\nThe 11 `stub_const(\"PGMQ::Errors::ConnectionError\", Class.new(StandardError))`\nsites created a fake error class, so every rescue in lib/ (client stale-retry,\nexecutor archive-retry, connection-health breake\n[…]\nness_probe_spec green; CI unit command\n(rspec spec/pgbus/ spec/generators/) 2976 examples, 0 failures. rubocop clean.\n\nRefs #229\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "test: de-brittle process & client specs (ivar poking, allow_any, fake…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T07:32:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2abfd95043cefdec82fa7a73bf2c7a31c7db24f1",
          "body": "…tches (#265)\n\n## Summary\nThree core subsystems were only ever exercised with mocks: the outbox\npoller stubbed the client, batches stubbed `BatchEntry` with a message\nchain, and the event bus was unit-level only. The real transactional\nwrite -> poll -> PGMQ publish -> consume -> idempotency claim ->\n[…]\npotency\n\n## Verification\n- [x] 10 new examples pass with PGBUS_DATABASE_URL, all pending (skip) without it\n- [x] Full integration suite green: 151 examples, 0 failures\n- [x] bundle exec rubocop passes",
          "is_bot": false,
          "headline": "test(integration): add end-to-end specs for outbox, event bus, and ba…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T05:31:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dd4f0aac48e9929ee607a5860da4b237ae54a706",
          "body": "… (#264)\n\n## Summary\nAdds `spec/requests/pgbus/` coverage for the 13 dashboard controllers\n(batches, dashboard, dead_letter, events, frontends, insights, jobs,\nlocale, locks, outbox, processes, queues, recurring_tasks) and the 3\nAPI controllers (api/insights, api/metrics, api/stats), plus a dedicate\n[…]\nle exec rubocop` passes (480 files, 0 offenses)\n- [x] System specs still load (require_relative of extracted stub)\n\nCloses #230\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "test(web): add request specs for all 16 dashboard and API controllers…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T05:26:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f06e80feaf44f891e20e07242be05aceceb417b5",
          "body": "…tgres (#263)\n\n## Summary\nConnection-failure recovery was only exercised with fake error classes\n(`stub_const(\"PGMQ::Errors::ConnectionError\", ...)` in client_spec.rb), and\n`pg_terminate_backend` appeared nowhere in the suite. This adds\n`spec/integration/connection_failure_spec.rb` that kills real b\n[…]\nc.rb` — 6 examples, 0 failures (stable across 5 runs)\n- [x] Skips cleanly without `PGBUS_DATABASE_URL` (6 pending)\n\nCloses #227\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "test(integration): prove connection-failure recovery against real Pos…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T04:56:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "97320eaba6a28c34f1cf50b2228494f273b04bac",
          "body": "## Summary\nAdds `spec/pgbus/engine_spec.rb` covering `lib/pgbus/engine.rb`'s\ninitializers, which previously had zero spec coverage. Two layers:\n\n1. Post-boot assertions against the already-booted `spec/dummy` app:\n   watermark middleware installed, i18n locale files on the load path,\n   `Pgbus::Web:\n[…]\nll `spec/pgbus/` green across seeds 12345/1/999/42 (2830 ex, 0 fail)\n- [x] `spec/pgbus/ spec/generators/` -> 2853 ex, 0 fail; line 89.88%, branch 75.82%\n- [x] `bundle exec rubocop` passes\n\nCloses #226",
          "is_bot": false,
          "headline": "test(engine): add initializer specs via dummy-app harness (#262)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T04:55:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6b51bd20c84565d50e8102b086c1ea6de335c01a",
          "body": "…260)\n\n* test(generators): cover the 13 untested generators + MigrationPath\n\n## Summary\n`lib/generators/pgbus/` shipped 15 generators but only install, update,\nand upgrade_pgmq had specs. A typo in a migration template or a broken\n`--database` route would ship to users with nothing to catch it. This\n[…]\nt.\n\nCoverage unchanged and still clears the floor: line 90.17%, branch\n75.61%. All 146 generator examples green, rubocop clean.\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "test(generators): cover the 13 untested generators + MigrationPath (#…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T04:48:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ece5ea2c27e0b1a83df41b2dd29ddaebf97f000d",
          "body": "…CI artifact (#261)\n\n## Summary\nCoverage was never measured — `simplecov` appeared nowhere in the Gemfile,\nspec_helper, or CI, so the 80%/100% targets in .claude/rules/testing.md were\nunverifiable. This wires up SimpleCov with a measured baseline floor and\nuploads the report from CI.\n\n- Add `simplec\n[…]\npec/generators/ passes (2837 examples, 0 failures)\n- [x] Coverage report written; groups render in coverage/index.html\n- [x] Enforcement proven: min=100 exits non-zero (\"SimpleCov failed with exit 2\")",
          "is_bot": false,
          "headline": "test(coverage): add SimpleCov measurement with measured baseline and …",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T04:27:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "75a7d0549e0c5274f40cef3097c8dc1cf6177e25",
          "body": "… metadata (#258)\n\n* feat(observability): persist per-worker throughput rates in heartbeat metadata\n\n## Summary\nWorker throughput (RateCounter rates + job counters) was in-process only:\nHeartbeat#beat persisted just last_heartbeat_at and loop_tick_at, so the\ndashboard Processes page could show only \n[…]\nhe metadata minus the\nthroughput/health keys already rendered specially. The view now iterates the\npre-filtered hash with no inline literal.\n\nVerified with `bun run lint:herb` (31/31 clean) and rspec.",
          "is_bot": false,
          "headline": "feat(observability): persist per-worker throughput rates in heartbeat…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T04:14:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1e9b90c2d344bd723c293fc8ffc30053b4fad434",
          "body": "…eduler (#259)\n\n## Summary\nThe processes page reported a wedged dispatcher or scheduler as `:healthy`\nforever. `Web::DataSource#derive_process_status` evaluated the loop beacon only\nfor workers, and neither the dispatcher nor scheduler heartbeat carried one.\nBecause heartbeats run on an independent \n[…]\n\n- [x] bundle exec rspec passes (100 examples, 0 failures on target specs;\n      968 across web/process/recurring)\n\nCloses #222\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "feat(observability): add loop progress beacons for dispatcher and sch…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-04T04:14:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9e3a5fd0770349f7c1ea7c0676f9878f791e28e5",
          "body": "…lds configurable (#257)\n\n## Summary\nBuffered job stats (up to 100 entries / 5s) were silently lost when the\nsupervisor watchdog SIGKILLs a stalled worker — SIGKILL cannot be trapped, and\nthe drain phase's up-to-30s wait widened the exposure window. This flushes the\nStatBuffer the moment a worker en\n[…]\nundle exec rubocop passes (5 files)\n- [x] bundle exec rspec passes (385 relevant + 2277 unit examples, 0 failures)\n\nCloses #220\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "feat(observability): flush StatBuffer on drain entry and make thresho…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T22:15:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eb9ceda5016d207742d6390ea7f690e6f46810a8",
          "body": "…StatsD backends (#256)\n\npgbus emits ~16 `pgbus.*` ActiveSupport::Notifications events but shipped only\none consumer (AppSignal), so teams on Prometheus, Datadog, or StatsD got no\nmetrics without hand-writing subscribers. This adds a vendor-neutral second\nconsumer under a new `Pgbus::Metrics` namesp\n[…]\ntion\n\n- [x] bundle exec rubocop passes (14 files)\n- [x] bundle exec rspec (metrics + config + integrations): 331 examples, 0 failures\n- [x] AppSignal integration specs unchanged and green\n\nCloses #219",
          "is_bot": false,
          "headline": "feat(observability): add generic metrics adapter with Prometheus and …",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T21:54:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6ecf11fd8946f9ef1f9bc78a1e6ff6aa8998763b",
          "body": "## Summary\nPgbus had no HTTP health surface for orchestrators. The OK/DEGRADED/STALLED\nverdict in `Pgbus::MCP::HealthAnalyzer` was reachable only through the MCP\nJSON-RPC tool or the auth-gated dashboard, and the supervisor process had no\nHTTP surface at all — so a Kubernetes kubelet could not disti\n[…]\n rubocop passes (8 files, no offenses)\n- [x] bundle exec rspec passes (web 441, mcp 92, config + supervisor green)\n\nCloses #218\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "feat(observability): add HTTP liveness and readiness endpoints (#255)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T21:34:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5eb794c7b5a17a20403dcacebe146012be3b1e80",
          "body": "## Summary\nDead-letter inspect/drain operations existed only behind the mounted web\ndashboard, so headless deployments and incident runbooks had no way to\ninspect or drain a DLQ without ad-hoc SQL (which project rules forbid).\n\nNew `Pgbus::CLI::DLQ` (`lib/pgbus/cli/dlq.rb`), dispatched from `CLI.sta\n[…]\nrification\n- [x] bundle exec rubocop passes (changed files, no offenses)\n- [x] bundle exec rspec passes (cli/web/doctor/mcp: 587 examples, 0 failures)\n- [x] zero raw SQL in lib/pgbus/cli*\n\nCloses #216",
          "is_bot": false,
          "headline": "feat(cli): add dlq management subcommands (#254)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T21:21:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b5c952b636505f4183f434fc37a58cca6755cb84",
          "body": "`Configuration#validate!` had no call site in `lib/` — `Pgbus.configure`\njust yielded and `ConfigLoader.apply` just assigned keys, so an invalid\nvalue (e.g. `visibility_timeout = 0`) sat dormant until a worker code path\nconsumed it, failing at runtime far from the misconfiguration.\n\nNow:\n- `Pgbus.co\n[…]\nnown-key warnings unchanged.\n\n- [x] bundle exec rubocop passes\n- [x] bundle exec rspec passes (2651 unit examples)\n\nCloses #215\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "feat(config): validate configuration eagerly at boot (#253)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T21:16:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9790385539980196bf415a44db4c14f1b95d7718",
          "body": "* feat(process): log boot diagnostics banner at supervisor start\n\n## Summary\n`Supervisor#run` logged only \"[Pgbus] Supervisor starting pid=…\", so the\nsettings that decide whether a deployment works — connected database,\nLISTEN/NOTIFY vs polling, resolved pool size, which roles and capsules\nboot — we\n[…]\neturn (PGMQ reachable but nothing tracked\n  yet) branch of installed_pgmq_version, distinct from the existing\n  raising-case test, locking in the `|| \"unknown\"` path separately from\n  the rescue path.",
          "is_bot": false,
          "headline": "feat(process): log boot diagnostics banner at supervisor start (#251)",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T21:06:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b47bee197c0b656af85ef2590d3a92f1fbf0420d",
          "body": "…onfiguration (#252)\n\n## Summary\nWorker/consumer config hashes arrived with symbol keys (Ruby DSL, capsule)\nor string keys (YAML via ConfigLoader), forcing every read site into a dual\n`w[:x] || w[\"x\"]` lookup. Any new option read without the string fallback\nsilently ignored a YAML-provided value — a\n[…]\ntouching the change (522 examples, 0 failures)\n- [x] acceptance grep: no dual-lookup fallbacks outside generators/\n\nCloses #214\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "refactor(config): normalize worker and consumer config keys once in C…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T20:58:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9ffc4beb1f9727aaebf979ca23a203c3d7207f86",
          "body": "…diagnostics (#250)\n\n* feat(dx): add pgbus doctor CLI command and rake task for environment diagnostics\n\n## Summary\nAdds `Pgbus::Doctor` — a single preflight command that answers \"is this\npgbus environment healthy enough to run?\" — wired into both `pgbus doctor`\nand `rake pgbus:doctor`. Exits 1 on a\n[…]\ned match(/literal/) with include('literal') in doctor_spec to\nsatisfy the newer rubocop-rspec MatchWithSimpleRegex cop CI runs.\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "feat(dx): add pgbus doctor CLI command and rake task for environment …",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T20:27:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a6a042ec9e9bfb21ac380d0ec42b24afaec49232",
          "body": "…le (#248)\n\n## Summary\n\nWhen every queue a worker owned had been evicted (queue table permanently\ndeleted), restore_evicted_queues reinstated the initial queue set immediately —\nboth from evict_missing_queues and again at the top of every fetch_messages. The\nworker oscillated forever: fetch → undefi\n[…]\n regression test for the new gated behavior\n\n## Verification\n\n- [x] bundle exec rubocop passes (lib + spec)\n- [x] bundle exec rspec spec/pgbus/process/worker_spec.rb passes (103 examples)\n\nCloses #209",
          "is_bot": false,
          "headline": "feat(process): exponential cooldown on worker queue evict/restore cyc…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T19:40:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "16a74714ca5eb9bc36f64cbae4e16fc3aaa27320",
          "body": "…(#249)\n\n## Summary\n`Supervisor#bootstrap_queues` swallowed every `StandardError`, so when the\nPGMQ schema was genuinely missing (database absent, migrations not run) the\nforked children booted anyway and drowned every fetch in the confusing\ndownstream `relation \"pgmq.q_...\" does not exist` error — \n[…]\n rubocop passes (supervisor.rb, supervisor_spec.rb)\n- [x] bundle exec rspec passes (supervisor_spec 37/37, client_spec 173/173)\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "feat(process): fail fast in children when the PGMQ schema is missing …",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T19:16:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f97b5a2fb828c05764c1d51572434d4c28f72d79",
          "body": "…IFY wake-up (#247)\n\n* feat(process): bring Consumer to parity with Worker — recycling + NOTIFY wake-up\n\n## Summary\nConsumer had neither worker recycling nor NOTIFY wake-up, so long-lived\nconsumer forks grew memory unboundedly (the solid_queue problem recycling\nexists to fix) and idle consumers alwa\n[…]\nfied: `bundle exec rspec spec/pgbus/ --seed 25009` (the exact CI unit-test\ncommand + failing seed) → 2548 examples, 0 failures.\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "feat(process): bring Consumer to parity with Worker — recycling + NOT…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T19:09:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f4ab6c4d0b3b9892db6dbacf0147c6569677566b",
          "body": "…#246)\n\nThe supervisor watchdog (check_stalled_workers) detected wedged workers\nsolely by reading loop_tick_at from the pgbus_processes table, written by\nthe worker Heartbeat. During a database outage the heartbeat write fails\n(dropped) and the watchdog read raises (swallowed), so stall detection\nfa\n[…]\nc.rb (142 examples, 0 failures)\n- [x] bundle exec rubocop on all changed files (clean)\n- [x] non-system suite: same pre-existing failure count as main (+19 new passing); zero new failures\n\nCloses #202",
          "is_bot": false,
          "headline": "feat(process): DB-independent pipe liveness for supervisor watchdog (…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T18:26:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "959f056cefc15c096a5db70108621470cb5ffa00",
          "body": "…rs (#245)\n\n* feat(connections): expose pool utilization and enrich exhaustion errors\n\n## Summary\nThe PGMQ connection pool was invisible. pgmq-ruby exposes size/available\ncounters, but pgbus never surfaced them, so the first sign of an undersized\nor leaking pool was an opaque `Connection pool timeou\n[…]\n`not_to match(/worker threads/)`; switch to\n  `not_to include(\"worker threads\")`.\n\nNo production code change — assertions only.\n\nClaude-Session: https://claude.ai/code/session_019UyWsPP7veHzzB8Z1zGr6W",
          "is_bot": false,
          "headline": "feat(connections): expose pool utilization and enrich exhaustion erro…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T18:07:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d6f642c8f7d2eaa5e90f447f0ee7e21bb761b9f",
          "body": "…244)\n\n`notify_trigger_current?` opened a brand-new `PG.connect` (full TCP/TLS/auth\nsetup) per queue on the String/Hash config path via `with_raw_connection`.\n`ensure_all_queues` therefore did N connection setups for N queues at every\nsupervisor boot — and again in each forked child — churning short\n[…]\neckout deadlock\n\n## Verification\n- [x] bundle exec rspec spec/pgbus/client_spec.rb (237 examples, 0 failures)\n- [x] bundle exec rubocop lib/pgbus/client.rb spec/pgbus/client_spec.rb clean\n\nCloses #199",
          "is_bot": false,
          "headline": "perf(client): reuse pooled connection for bootstrap trigger checks (#…",
          "author_name": "Mikael Henriksson",
          "author_login": "mhenrixon",
          "committed_at": "2026-07-03T17:51:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 80,
      "commits_last_year": 352,
      "latest_release_at": "2026-07-24T19:17:17Z",
      "latest_release_tag": "v0.12.4",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 14,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 1.9
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "pgbus",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "rubygems",
          "matches_repo": true,
          "registry_url": "https://rubygems.org/gems/pgbus",
          "is_deprecated": false,
          "latest_version": "0.12.4",
          "repository_url": "https://github.com/mhenrixon/pgbus/tree/main",
          "versions_count": 81,
          "total_downloads": 25289,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2026-03-30T18:43:41.832000Z",
          "latest_published_at": "2026-07-24T19:19:51.969000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 40,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 90093,
      "source_files_sampled": 585,
      "oversized_source_files": 4,
      "agent_instruction_files": [
        ".claude/rules/agents.md",
        "CLAUDE.md",
        "docs/AGENTS.md"
      ],
      "agent_instruction_max_bytes": 7884
    },
    "dependencies": {
      "manifests": [
        "Gemfile",
        "docs/Gemfile",
        "docs/package.json",
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "loofah",
            "direct": false,
            "version": "2.25.1",
            "severity": "moderate",
            "ecosystem": "rubygems",
            "cvss_score": 4.7,
            "advisory_ids": [
              "GHSA-5qhf-9phg-95m2",
              "GHSA-8whx-365g-h9vv",
              "GHSA-9wjq-cp2p-hrgf"
            ],
            "fixed_version": "2.25.2",
            "advisory_count": 3,
            "oldest_advisory_days": 3
          },
          {
            "name": "rails-html-sanitizer",
            "direct": false,
            "version": "1.7.0",
            "severity": "low",
            "ecosystem": "rubygems",
            "cvss_score": 0,
            "advisory_ids": [
              "GHSA-cj75-f6xr-r4g7"
            ],
            "fixed_version": "1.7.1",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 1,
          "moderate": 1
        },
        "advisory_count": 4,
        "affected_count": 2,
        "assessed_count": 118,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 31,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm",
        "rubygems"
      ],
      "dependencies": [
        {
          "name": "irb",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": null
        },
        {
          "name": "rake",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 13.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "irb",
            "direct": true,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "irb",
            "direct": true,
            "version": "1.18.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "rake",
            "direct": true,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rake",
            "direct": true,
            "version": "13.4.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "@herb-tools/linter",
            "direct": false,
            "version": "^0.9.5",
            "ecosystem": "npm"
          },
          {
            "name": "@tailwindcss/cli",
            "direct": false,
            "version": "^4.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "daisyui",
            "direct": false,
            "version": "^5.6.13",
            "ecosystem": "npm"
          },
          {
            "name": "playwright",
            "direct": false,
            "version": "^1.50.0",
            "ecosystem": "npm"
          },
          {
            "name": "tailwindcss",
            "direct": false,
            "version": "^4.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "action_text-trix",
            "direct": false,
            "version": "2.1.19",
            "ecosystem": "rubygems"
          },
          {
            "name": "actioncable",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "actionmailbox",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "actionmailer",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "actionpack",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "actiontext",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "actionview",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "activejob",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "activemodel",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "activerecord",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "activestorage",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "activesupport",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "ast",
            "direct": false,
            "version": "2.4.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "base64",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "benchmark-ips",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "bigdecimal",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "bindex",
            "direct": false,
            "version": "0.8.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "brakeman",
            "direct": false,
            "version": "8.0.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "builder",
            "direct": false,
            "version": "3.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "bundler-audit",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "bundler-audit",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "capybara",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "capybara-playwright-driver",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "commonmarker",
            "direct": false,
            "version": "2.8.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "concurrent-ruby",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "concurrent-ruby",
            "direct": false,
            "version": "1.3.7",
            "ecosystem": "rubygems"
          },
          {
            "name": "connection_pool",
            "direct": false,
            "version": "2.5.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "crass",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "rubygems"
          },
          {
            "name": "daisyui",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "date",
            "direct": false,
            "version": "3.5.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "diff-lcs",
            "direct": false,
            "version": "1.6.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "docs-kit",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "drb",
            "direct": false,
            "version": "2.2.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "erb",
            "direct": false,
            "version": "6.0.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "erubi",
            "direct": false,
            "version": "1.13.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "et-orbi",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "falcon",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "fugit",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "fugit",
            "direct": false,
            "version": "1.12.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "globalid",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "globalid",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "hana",
            "direct": false,
            "version": "1.3.7",
            "ecosystem": "rubygems"
          },
          {
            "name": "i18n",
            "direct": false,
            "version": "1.15.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "i18n-tasks",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "icons",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "importmap-rails",
            "direct": false,
            "version": "2.2.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "io-console",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "json",
            "direct": false,
            "version": "2.20.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "json_schemer",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "language_server-protocol",
            "direct": false,
            "version": "3.17.0.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "lint_roller",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "logger",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "loofah",
            "direct": false,
            "version": "2.25.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "mail",
            "direct": false,
            "version": "2.9.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "marcel",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "mcp",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "mcp",
            "direct": false,
            "version": "0.22.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "memory_profiler",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "mini_mime",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "minitest",
            "direct": false,
            "version": "6.0.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "net-imap",
            "direct": false,
            "version": "0.6.4.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "net-pop",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "net-protocol",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "net-smtp",
            "direct": false,
            "version": "0.5.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "nio4r",
            "direct": false,
            "version": "2.7.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "nokogiri",
            "direct": false,
            "version": "1.19.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "parallel",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "parser",
            "direct": false,
            "version": "3.3.11.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "pg",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "pg",
            "direct": false,
            "version": "1.6.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "pgmq-ruby",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "pgmq-ruby",
            "direct": false,
            "version": "0.7.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "phlex",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "phlex-rails",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "phlex-rails",
            "direct": false,
            "version": "2.4.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "pp",
            "direct": false,
            "version": "0.6.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "prettyprint",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "prism",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "propshaft",
            "direct": false,
            "version": "1.3.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "puma",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "puma",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "raabro",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "racc",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rack",
            "direct": false,
            "version": "3.2.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "rack-attack",
            "direct": false,
            "version": "6.8.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "rack-session",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "rack-test",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "rackup",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rails",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "rails-dom-testing",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "rails-html-sanitizer",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "rails_icons",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "railties",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "railties",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "rainbow",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rbs",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "rdoc",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "refract",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "regexp_parser",
            "direct": false,
            "version": "2.12.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "reline",
            "direct": false,
            "version": "0.6.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "rouge",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-core",
            "direct": false,
            "version": "3.13.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-expectations",
            "direct": false,
            "version": "3.13.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-mocks",
            "direct": false,
            "version": "3.13.8",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-rails",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-rails",
            "direct": false,
            "version": "8.0.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-support",
            "direct": false,
            "version": "3.13.7",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop",
            "direct": false,
            "version": "1.88.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-ast",
            "direct": false,
            "version": "1.49.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-performance",
            "direct": false,
            "version": "1.26.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-rails",
            "direct": false,
            "version": "2.35.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-rails-omakase",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-rspec",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-rspec",
            "direct": false,
            "version": "3.10.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "ruby-openai",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "ruby-progressbar",
            "direct": false,
            "version": "1.13.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "securerandom",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "simplecov",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "simpleidn",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "sqlite3",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "stimulus-rails",
            "direct": false,
            "version": "1.3.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "strscan",
            "direct": false,
            "version": "3.1.8",
            "ecosystem": "rubygems"
          },
          {
            "name": "thor",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "thruster",
            "direct": false,
            "version": "0.1.22",
            "ecosystem": "rubygems"
          },
          {
            "name": "timeout",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "tsort",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "turbo-rails",
            "direct": false,
            "version": "2.0.23",
            "ecosystem": "rubygems"
          },
          {
            "name": "tzinfo",
            "direct": false,
            "version": "2.0.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "unicode-display_width",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "unicode-emoji",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "uri",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "useragent",
            "direct": false,
            "version": "0.16.11",
            "ecosystem": "rubygems"
          },
          {
            "name": "web-console",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "websocket-driver",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "websocket-extensions",
            "direct": false,
            "version": "0.1.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "zeitwerk",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "zeitwerk",
            "direct": false,
            "version": "2.8.2",
            "ecosystem": "rubygems"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 149,
        "direct_count": 4,
        "indirect_count": 145
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 256,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 116,
        "closed_unmerged_prs": 4
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "mhenrixon",
          "commits": 354,
          "avatar_url": "https://avatars.githubusercontent.com/u/106795?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "dependency-watch.yml",
        "deploy-docs.yml",
        "docs-ci.yml",
        "main.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".rubocop.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Gemfile.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 9,
            "reason": "19 out of 20 merged PRs checked by a CI test -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 5,
            "reason": "Found 15/30 approved changesets -- score normalized to 5",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 7,
            "reason": "3 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "9a73bd5180f43a02083a63fa3db0eff8cd74b195",
        "ran_at": "2026-07-24T19:21:48Z",
        "aggregate_score": 5.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T19:17:54Z",
      "oldest_open_prs": [
        {
          "number": 374,
          "created_at": "2026-07-23T09:20:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-24T19:16:39Z",
      "ci_last_conclusion": "FAILURE",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/mhenrixon/pgbus",
    "host": "github.com",
    "name": "pgbus",
    "owner": "mhenrixon"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 67,
      "inputs": {
        "security": 61,
        "vitality": 84,
        "community": 47,
        "governance": 63,
        "engineering": 75
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 84,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "commits_last_year": 352,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 14
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "14/52 weeks with commits",
                "points": 9.7,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 14
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "352 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 352
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 80,
              "latest_release_tag": "v0.12.4",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 1.9
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "80 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 80
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~1.9 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 1.9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 47,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 26,
            "inputs": {
              "forks": 0,
              "stars": 40,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "40 stars",
                "points": 25.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 40
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 57,
            "inputs": {
              "packages": [
                "pgbus"
              ],
              "dependents": null,
              "ecosystems": "rubygems",
              "total_downloads": 25289,
              "monthly_downloads": null
            },
            "components": [
              {
                "key": "total_downloads",
                "name": "Total downloads",
                "detail": "25,289 downloads all-time across rubygems",
                "points": 45.8,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_total",
                    "params": {
                      "count": 25289,
                      "ecosystems": "rubygems"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 63,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 16,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "merged_prs": 256,
              "open_issues": 0,
              "closed_issues": 116,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 4
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "256/260 decided PRs merged",
                "points": 37.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 256,
                      "decided": 260
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 15/30 approved changesets -- score normalized to 5",
                "points": 7.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "followers": 97,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "mhenrixon",
              "public_repos": 114,
              "account_age_days": 6213
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "97 followers of mhenrixon",
                "points": 14.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 97,
                      "login": "mhenrixon"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "114 public repos, account ~17 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 114
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 17
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "pgbus"
              ],
              "ecosystems": "rubygems",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on rubygems",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "rubygems"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "81 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 81
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 75,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".rubocop.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".rubocop.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "19 out of 20 merged PRs checked by a CI test -- score normalized to 9",
                "points": 18,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 61,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 51,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 5.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "19 out of 20 merged PRs checked by a CI test -- score normalized to 9",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 15/30 approved changesets -- score normalized to 5",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "3 existing vulnerabilities detected",
                "points": 5.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 118 resolved dependencies against OSV; 31 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 118
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 31
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 4,
              "affected_packages": 2,
              "assessed_packages": 118,
              "unassessed_packages": 31,
              "affected_by_severity": "moderate 1, low 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 118,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 60,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                ".claude/rules/agents.md",
                "CLAUDE.md",
                "docs/AGENTS.md"
              ],
              "agent_instruction_max_bytes": 7884
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".claude/rules/agents.md, CLAUDE.md, docs/AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".claude/rules/agents.md, CLAUDE.md, docs/AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "at_risk",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 43,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Gemfile.lock"
              ],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".rubocop.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".rubocop.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "Ruby",
              "largest_source_bytes": 90093,
              "source_files_sampled": 585,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Ruby without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Ruby"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/585 source files over 60KB",
                "points": 54.6,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 585,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T19:22:04.111432Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/mhenrixon/pgbus.svg",
  "full_name": "mhenrixon/pgbus",
  "license_state": "standard",
  "license_spdx": "MIT"
}