Public recordAt risk
Software health reportschema 0.26.0 · metrics 1.13.0 · 2026-07-22 03:30 UTC
mirastacklabs-ai / mirastack-agents-sdk-go
mirastacklabs-ai/mirastack-agents-sdk-go holds a health index of 46 out of 100, placing it in the At risk band. It scores highest on Vitality (80/100) and lowest on Community & Adoption (24/100). It was last updated 2 days ago. A single contributor accounts for most of its recent work.
46
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
46
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
MIRASTACK LABS PRIVATE LIMITEDOrganization
8 followers14 public repossince Feb 2026
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/mirastacklabs-ai/mirastack-agents-sdk-go | v1.14.2 | - | 21 | 2 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
80
Development activity
66Moderate
How it's scored
| 36/36 | Push recency — last push 2 days ago |
| 6.9/36 | Commit cadence — 10/52 weeks with commits |
| 13.4/18 | Commit volume — 30 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 30 |
| human_commit_share | 1 |
| days_since_last_push | 2 |
| active_weeks_last_year | 10 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 15 releases published |
| 36/36 | Release recency — latest release 2 days ago |
| 27/27 | Release cadence — a release every ~7.9 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 15 |
| latest_release_tag | v1.14.2 |
| releases_from_tags | no |
| days_since_latest_release | 2 |
| mean_days_between_releases | 7.9 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
24
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (AGPL-3.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
36
Maintainer resilience (bus factor)
13Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
46At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 6.9/25 | Owner reach — 8 followers of mirastacklabs-ai |
| 9.4/25 | Track record — 14 public repos, account ~0 yr old |
Inputs used
| followers | 8 |
| owner_type | Organization |
| is_verified | — |
| owner_login | mirastacklabs-ai |
| public_repos | 14 |
| account_age_days | 149 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 2 days ago |
| 20/20 | Version history — 21 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/mirastacklabs-ai/mirastack-agents-sdk-go |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 2 |
Engineering Quality
Are baseline engineering and documentation practices in place?
52
Engineering practices
60Moderate
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
40At risk
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
31
Security posture
31At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 11 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 3.1 |
Excluded from scoring (no data or not applicable): ci_tests, packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
63
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 28 of 30 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.933 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
66Moderate
How it's scored
| 12.6/18 | One-command bootstrap — go.mod (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 7 of the last 30 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0.233 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/44 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 21,629 |
| source_files_sampled | 44 |
| oversized_source_files | 0 |
Key facts
0GitHub stars
1contributors
30commits, last 12 months
2days since last push
15releases
1bus factor
0open issues
Gopackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 3.1 / 10
3.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 11 existing vulnerabilities detected |
Direct dependencies 11
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/google/uuid | v1.6.0 | go.mod |
| Go | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | v0.60.0 | go.mod |
| Go | go.opentelemetry.io/otel | v1.43.0 | go.mod |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc | v1.43.0 | go.mod |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.34.0 | go.mod |
| Go | go.opentelemetry.io/otel/metric | v1.43.0 | go.mod |
| Go | go.opentelemetry.io/otel/sdk | v1.43.0 | go.mod |
| Go | go.opentelemetry.io/otel/sdk/metric | v1.43.0 | go.mod |
| Go | go.opentelemetry.io/otel/trace | v1.43.0 | go.mod |
| Go | go.uber.org/zap | v1.27.0 | go.mod |
| Go | google.golang.org/grpc | v1.80.0 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 121,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 227627
},
"pushed_at": "2026-07-19T08:30:21Z",
"created_at": "2026-04-01T08:06:09Z",
"owner_type": "Organization",
"updated_at": "2026-07-19T08:30:31Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "AGPL-3.0",
"default_branch": "main",
"license_spdx_raw": "AGPL-3.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "MIRASTACK LABS PRIVATE LIMITED",
"type": "Organization",
"login": "mirastacklabs-ai",
"company": null,
"location": "India",
"followers": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/263104162?v=4",
"created_at": "2026-02-22T04:07:39Z",
"is_verified": null,
"public_repos": 14,
"account_age_days": 149
},
"license": {
"state": "standard",
"spdx_id": "AGPL-3.0",
"raw_spdx": "AGPL-3.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.14.2",
"kind": "patch",
"published_at": "2026-07-19T08:31:47Z"
},
{
"tag": "v1.14.1",
"kind": "patch",
"published_at": "2026-07-18T16:43:24Z"
},
{
"tag": "v1.14.0",
"kind": "minor",
"published_at": "2026-07-18T13:32:30Z"
},
{
"tag": "v1.13.1",
"kind": "patch",
"published_at": "2026-07-18T08:00:52Z"
},
{
"tag": "v1.13.0",
"kind": "minor",
"published_at": "2026-07-17T15:55:40Z"
},
{
"tag": "v1.12.0",
"kind": "minor",
"published_at": "2026-07-12T08:34:27Z"
},
{
"tag": "v1.11.0",
"kind": "minor",
"published_at": "2026-06-02T02:22:12Z"
},
{
"tag": "v1.10.1",
"kind": "patch",
"published_at": "2026-05-21T04:57:38Z"
},
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2026-05-19T06:35:55Z"
},
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2026-05-09T15:05:09Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2026-05-01T08:08:58Z"
},
{
"tag": "v1.7.1",
"kind": "patch",
"published_at": "2026-04-30T05:24:08Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2026-04-29T17:29:45Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2026-04-29T03:09:05Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-04-15T06:18:51Z"
}
],
"recent_commits": [
{
"oid": "d764c63a39fbb06f69a15744d29341ddb6665d8f",
"body": "Add structured routing semantics to action definitions with strict validation and wire serialization so engine and agents can enforce fail-closed semantic routing.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "add routing semantics metadata contract to agent SDK",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-07-19T08:30:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "940983924e718694b2c92220de85ebdc787495eb",
"body": "Reject colon-qualified target plugin names at the SDK boundary and add regression coverage for native JSON forwarding and validation failures.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "Harden plugin target validation in Agent SDK.",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-07-18T16:42:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2a5cd99cf33c470b69f2b14f9613312bdef0339e",
"body": "Expose JSON-first plugin call helpers while preserving legacy map[string]string behavior for existing agents.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(context): add native JSON CallPlugin helpers",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-07-18T13:31:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8e4b1ccdee9212ec6bd714e1f53975899ee96bd1",
"body": "Preserve valid LogsQL quotes and semicolons while still trimming wrapper artifacts, and route log cache helpers through LogsQL-specific sanitization to avoid query corruption.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(cache): sanitize LogsQL safely in cache paths",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-07-18T07:59:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "411d67da54acdbb81232e4810e0e5e4b542062ad",
"body": "Extend approval requests with structured context + blast radius fields, add WRITE enum handling in SDK/proto mappings, and expose Embed RPC types in generated service bindings.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(sdk): add approval context and WRITE permission support",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-07-17T15:54:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "78a2a1f514e4c301d8eee70fa4d847e6b9961c11",
"body": "Introduce shared telemetry caching, retry, and parsing utilities in the Go agent SDK and document the v1.12.0 release notes for tag-based publication.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(cache): add telemetrycache package for agents",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-07-12T08:33:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "242c6b077dcaee907b821fe09905d6478d86ce50",
"body": "The engine needs to know the side-effect class of the action being\ngated so it can pick the right minimum approver role (engineer for\nMODIFY, admin for ADMIN), surface the right label on the approval\ncard, and run the approval-mode policy check.\n\nPlugins MUST now pass a Permission when calling Reque\n[…]\n0,\nREAD=1, MODIFY=2, ADMIN=3); we never cast across the off-by-one.\n\nBREAKING CHANGE: EngineContext.RequestApproval signature now takes\na 4th argument 'permission Permission'. All callers must update.",
"is_bot": false,
"headline": "feat(context): add required Permission arg to RequestApproval",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-06-02T02:21:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "749aea334d29c620b1dad2c1d904687ee8dbd083",
"body": "The upstream OTLP gRPC exporter feeds OTEL_EXPORTER_OTLP_ENDPOINT through\nnet/url.Parse, which silently produces an empty Host for bare host:port\ninputs (parses as scheme=host / opaque=port) and surfaces as\n\n traces export: failed to exit idle mode: dns resolver: missing address\n\nWire otlptracegrpc\n[…]\nrpcs://, unix:// schemes as well as bare host:port. The helper\nalso reads the trace-/metrics-specific env overrides ahead of the global\none and supports the standard insecure flag truthy/falsy values.",
"is_bot": false,
"headline": "fix(otlp): normalise OTEL endpoint URL to bare host:port",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-05-21T04:56:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3cc22b2ee2bd01acb923a3a786565d43778c68e4",
"body": "…rovider\n\n- New EngineContext.ListKPIs/GetKPI typed engine callbacks reading the\n tenant's KPI definitions from the engine's Kine-backed KPI store\n (/mirastack/{tenant_id}/kpis/). Tenant-scoped server-side via the\n SDK's auto-stamped tenant_id.\n- New KPIView typed struct + ListKPIs/GetKPI gRPC me\n[…]\nequisite: internal/grpcserver.EngineService.ListKPIs+GetKPI\nmust be implemented before plugins relying on these APIs are deployed.\n\nRelease v1.10.0 — lockstep with mirastack-agents-sdk-python v1.10.0.",
"is_bot": false,
"headline": "feat(kpi,metrics): add ListKPIs/GetKPI engine callbacks + OTel MeterP…",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-05-19T06:34:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ef00eea6ce3485d840b52214208857ce4a787103",
"body": "Add ChatStreamRequest and ChatTokenResponse types to support\nserver-streaming LLM responses from provider plugins.\n\n- ChatStreamRequest carries prompt params as JSON\n- ChatTokenResponse streams tokens with IsFinal marker\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(chat): add ChatStream RPC for LLM streaming support",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-05-09T15:04:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "50af812e0986d685f045cc71cc459d918f1f375c",
"body": "Records the v1.5.0 → v1.8.0 release history and codifies that this SDK\nships at matching MAJOR.MINOR tags with mirastack-agents-sdk-python.\nPatch versions remain independent.\n\nAll MIRASTACK agents — Go and Python — track the latest paired SDK\nminor before the engine cuts a release.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "docs: add CHANGELOG and lockstep release policy with Python SDK",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-05-01T08:35:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90f049f3321c12ba4bf6dbc874e2babb1712fc65",
"body": "The engine renamed the license cap on distinct operational backend\nkinds from `max_data_source_types` to `max_integration_types` as part\nof the wider Data Sources → Integrations rebrand. The SDK's\nLicenseQuotas struct (consumed by plugins via the EngineContext\nLicenseContext handshake) must follow t\n[…]\nelease where they bump to v1.8.0; plugins that don't read\nthis field continue to compile against v1.7.x without any change and\ncan stay pinned until they need other v1.8.0 features.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "feat(license)!: rename MaxDataSourceTypes → MaxIntegrationTypes",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-05-01T08:07:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a6245bd2bceae899d7577435881f5b4db7f382ed",
"body": "Keep tenant binding strict while allowing plugins to wait for engine bootstrap or tenant creation before registering.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "feat: add lazy tenant-bound registration",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-30T05:23:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c6401ff6b714dbd7260b8d0f6c26769ab6334f5",
"body": "…dshake\n\nAdds LicenseContext + LicenseQuotas types to gen/pluginv1 and embeds an\noptional License *LicenseContext field on RegisterPluginResponse and\nHeartbeatResponse. SDK consumers can now read the engine's licensing\nposture (active flag, effective tier, grace mode, expiry, org/site/region\nidentit\n[…]\n meters.\n- All fields are JSON-omitempty so older engines that don't populate\n License continue to interoperate.\n\nBackward compatible: additive field on existing response messages.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "feat(license): expose engine LicenseContext on register/heartbeat han…",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-29T17:28:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "657d4bc21cc9d3e0f99032b8d8db1269f804ccca",
"body": "- Add tenantid helper module\n- Pass tenant_id through plugin context, serve, and gRPC protocol\n- Regenerate protobuf stubs to include tenant fields\n- Update README with multi-tenant usage notes\n\nRelease v1.6.0",
"is_bot": false,
"headline": "feat(multi-tenant): tenant_id propagation across plugin protocol",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-29T03:07:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbf6c06f8d3eee2a104705a2712a2ed88ac28ed3",
"body": null,
"is_bot": false,
"headline": "feat: add CacheGetBatch (MGET) — batch cache lookup for plugins",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-20T16:53:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "927758cc55facc6fb3afc4716877e01afd3c5ef0",
"body": "- CallPlugin now delegates to CallPluginWithTimeRange(ctx, target, params, nil)\n- New CallPluginWithTimeRange method propagates TimeRange through agent-to-agent calls\n- Prevents time drift in multi-hop dispatch chains by threading absolute time boundaries\n- GetConfig returns defensive copy on cache miss path",
"is_bot": false,
"headline": "feat: add CallPluginWithTimeRange for ingress anchor time propagation",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-15T06:17:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "893c68012b56af5265536401da98725f6520b14f",
"body": "Replace RegisterPlugin-as-heartbeat with a dedicated Heartbeat RPC.\nSDK Phase 2 loop now calls Heartbeat instead of full RegisterPlugin.\nIf engine responds with re_register_required, SDK falls back to full\nRegisterPlugin. Engine-recommended heartbeat interval is adopted unless\nMIRASTACK_PLUGIN_HEARTBEAT_INTERVAL env var overrides.\n\nNew types: HeartbeatRequest, HeartbeatResponse\nNew method: EngineContext.Heartbeat()\nUpdated: maintainRegistration() Phase 2 in serve.go",
"is_bot": false,
"headline": "feat: add dedicated Heartbeat RPC — lightweight liveness signal",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-11T12:29:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52e565f379b75b282fb098f95dbd9d1a4c3f1628",
"body": "- serve.go: add keepalive.EnforcementPolicy (MinTime 20s, PermitWithoutStream)\n and keepalive.ServerParameters (Time 30s, Timeout 10s) to gRPC server\n- context.go: add keepalive.ClientParameters (Time 30s, Timeout 10s,\n PermitWithoutStream) to EngineContext gRPC client connection\n\nPrevents idle TCP connections from being silently dropped during\nlong-running LLM inference, which caused 'the client connection is\nclosing' errors on the engine side.",
"is_bot": false,
"headline": "feat: add gRPC keepalive on server and EngineContext client",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-11T09:43:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6a9d6cb57d78015a08e555ba128d8a8d2fda570",
"body": "…stration heartbeat\n\n- Two-phase registration: initial backoff (2s→30s cap, 10 attempts) then\n persistent heartbeat loop (default 30s, configurable via\n MIRASTACK_PLUGIN_HEARTBEAT_INTERVAL env var)\n- Survives engine restarts: next heartbeat re-establishes registration\n- Clean shutdown via stopCh — heartbeat exits before DeregisterSelf\n- ConfigParams validation in Serve() with unit tests\n- 4 new unit tests for maintainRegistration lifecycle",
"is_bot": false,
"headline": "feat: replace one-shot registerWithRetry with persistent maintainRegi…",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-11T07:13:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77323fe5ed52cf206caa982e1491c5e349c6f1d2",
"body": "…ss support\n\n- Background goroutine with exponential backoff (2s→30s cap, 10 attempts)\n- MIRASTACK_PLUGIN_ADVERTISE_ADDR for container/K8s/horizontal scaling\n- gRPC server starts immediately, not blocked by registration\n- Unit tests for resolveAdvertiseAddr",
"is_bot": false,
"headline": "feat: production-grade self-registration with retry and Service addre…",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-09T13:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef42aff6bbf1185cf8cbe12a9cf6ebe01a9d818e",
"body": null,
"is_bot": false,
"headline": "ci: add GitHub Actions release workflow",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-09T13:02:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86e4d073203bfd2ad6d25ed2aff97b4689e8d525",
"body": null,
"is_bot": false,
"headline": "feat: SDK self-registration, OTel tracing, dependency updates",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-09T12:28:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8e9eb8a41af21f233fbf798881efcd98b30a0a3",
"body": null,
"is_bot": false,
"headline": "fix: add NowUTCMs to datetimeutils, update go.mod deps",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-08T17:26:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a40370be660d706a179255353ee3326c235568aa",
"body": null,
"is_bot": false,
"headline": "chore: oss-readiness — rewrite README for Agent SDK, add .gitignore",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-07T17:38:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26d55bbac006b82df3cf7a66797e7f22b7695c66",
"body": "- Add validate.go: name/version required, action ID+description required\n- Wire validatePlugin() into Serve() before gRPC listen\n- Fix GetConfig() cache mutation bug (return copy, not original)\n- Add context_test.go (10 tests) and validate_test.go (7 tests)",
"is_bot": false,
"headline": "feat: SDK-level plugin validation + cache mutation fix",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-07T04:12:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4b2b74fdbbb07c72162143eea8c40f6de5e4ea2",
"body": null,
"is_bot": false,
"headline": "E1-10a: Fix stale version string to mirastack-agents-sdk-go",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-07T02:22:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88da9e3951917f309364fb0b4b5b246462c213c9",
"body": "…RespondError/RespondRaw, actionsToProto, GetSchema Actions support",
"is_bot": false,
"headline": "E1-08: Action struct, json.RawMessage output, RespondMap/RespondJSON/…",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-06T18:55:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d708b9af6bd7974115519ac6d4c9af81e26062f3",
"body": "…ntext, serve.go adapter\n\n- Added ConfigParam struct (Key, Type, Required, Default, Description, IsSecret)\n- Added ConfigParams field on PluginInfo\n- Added GetConfig(ctx) on EngineContext with thread-safe 15s TTL local cache\n- serve.go maps ConfigParams → ConfigParamSchema in pluginServiceAdapter.Info()",
"is_bot": false,
"headline": "feat: E1-06e — ConfigParam type, GetConfig with 15s cache on EngineCo…",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-06T12:13:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "989c350669f87471adad0c5f81e1ad4f72732108",
"body": "Base plugin interface, engine context proxy, gRPC server bootstrap,\nand generated protobuf stubs for the MIRASTACK plugin protocol.",
"is_bot": false,
"headline": "feat: MIRASTACK SDK for Go — plugin development kit",
"author_name": "aarvee11",
"author_login": "aarvee11",
"committed_at": "2026-04-01T08:30:52Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 15,
"commits_last_year": 30,
"latest_release_at": "2026-07-19T08:31:47Z",
"latest_release_tag": "v1.14.2",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 10,
"days_since_latest_release": 2,
"mean_days_between_releases": 7.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/mirastacklabs-ai/mirastack-agents-sdk-go",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/mirastacklabs-ai/mirastack-agents-sdk-go",
"is_deprecated": false,
"latest_version": "v1.14.2",
"repository_url": "https://github.com/mirastacklabs-ai/mirastack-agents-sdk-go",
"versions_count": 21,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-19T08:30:12Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 21629,
"source_files_sampled": 44,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.60.0"
},
{
"name": "go.opentelemetry.io/otel",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.34.0"
},
{
"name": "go.opentelemetry.io/otel/metric",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "go.opentelemetry.io/otel/sdk/metric",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "go.opentelemetry.io/otel/trace",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "go.uber.org/zap",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.27.0"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.80.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "aarvee11",
"commits": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/15531173?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"release.yaml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "11 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d764c63a39fbb06f69a15744d29341ddb6665d8f",
"ran_at": "2026-07-22T03:30:32Z",
"aggregate_score": 3.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T08:31:49Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/mirastacklabs-ai/mirastack-agents-sdk-go",
"host": "github.com",
"name": "mirastack-agents-sdk-go",
"owner": "mirastacklabs-ai"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 46,
"inputs": {
"security": 31,
"vitality": 80,
"community": 24,
"governance": 36,
"engineering": 52
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 80,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"commits_last_year": 30,
"human_commit_share": 1,
"days_since_last_push": 2,
"active_weeks_last_year": 10
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "10/52 weeks with commits",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 10
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "30 commits in the last year",
"points": 13.4,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 30
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 15,
"latest_release_tag": "v1.14.2",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 7.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "15 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 15
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~7.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 7.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 24,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (AGPL-3.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "AGPL-3.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 36,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 46,
"inputs": {
"followers": 8,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "mirastacklabs-ai",
"public_repos": 14,
"account_age_days": 149
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "8 followers of mirastacklabs-ai",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 8,
"login": "mirastacklabs-ai"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "14 public repos, account ~0 yr old",
"points": 9.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 14
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/mirastacklabs-ai/mirastack-agents-sdk-go"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 2
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 2 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 2
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "21 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 21
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 52,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 31,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 31,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "11 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 63,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.933,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "28 of 30 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 28,
"sampled": 30
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.233,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "7 of the last 30 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 7,
"sampled": 30
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 21629,
"source_files_sampled": 44,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/44 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 44,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-22T03:30:38.041011Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/mirastacklabs-ai/mirastack-agents-sdk-go.svg",
"full_name": "mirastacklabs-ai/mirastack-agents-sdk-go",
"license_state": "standard",
"license_spdx": "AGPL-3.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.