Public recordModerate
Software health reportschema 0.26.0 · metrics 1.13.0 · 2026-07-22 05:04 UTC
newstack-cloud / bluelink-provider-aws
The Bluelink deploy engine provider plugin for AWS
newstack-cloud/bluelink-provider-aws holds a health index of 59 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (86/100) and lowest on Community & Adoption (33/100). It was last updated 2 days ago. A single contributor accounts for most of its recent work.
59
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
59
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
newstack-cloudOrganization
0 followers22 public repossince Jun 2025
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/newstack-cloud/bluelink-provider-aws | v0.4.2 | - | 8 | 2 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
82
Development activity
71Good
How it's scored
| 36/36 | Push recency — last push 2 days ago |
| 6.9/36 | Commit cadence — 10/52 weeks with commits |
| 18/18 | Commit volume — 120 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 120 |
| human_commit_share | 0.88 |
| days_since_last_push | 2 |
| active_weeks_last_year | 10 |
Release discipline
98Excellent
How it's scored
| 27/27 | Ships releases — 7 releases published |
| 36/36 | Release recency — latest release 2 days ago |
| 27/27 | Release cadence — a release every ~17 days |
| 8/10 | OpenSSF Scorecard: Signed-Releases — 5 out of the last 5 releases have a total of 5 signed artifacts. |
Inputs used
| releases_count | 7 |
| latest_release_tag | v0.4.2 |
| releases_from_tags | no |
| days_since_latest_release | 2 |
| mean_days_between_releases | 17 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
33
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 1 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
70Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
40
Maintainer resilience (bus factor)
10Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
24Critical
How it's scored
| 0/46.8 | Issue resolution — 0% of issues closed |
| 23.7/38.3 | PR acceptance — 13/21 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/16 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 13 |
| open_issues | 1 |
| closed_issues | 0 |
| issue_closed_ratio | 0 |
| closed_unmerged_prs | 8 |
Ownership & stewardship
42At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 0/25 | Owner reach — 0 followers of newstack-cloud |
| 12.1/25 | Track record — 22 public repos, account ~1 yr old |
Inputs used
| followers | 0 |
| owner_type | Organization |
| is_verified | — |
| owner_login | newstack-cloud |
| public_repos | 22 |
| account_age_days | 406 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 2 days ago |
| 20/20 | Version history — 8 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/newstack-cloud/bluelink-provider-aws |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 2 |
Engineering Quality
Are baseline engineering and documentation practices in place?
86
Engineering practices
84Good
How it's scored
| 24/24 | CI workflows — 4 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yml |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
90Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://registry.bluelink.dev/providers/newstack-cloud/test/latest |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | https://registry.bluelink.dev/providers/newstack-cloud/test/latest |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
49
Security posture
49At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/16 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
| 2/5 | SAST — SAST tool is not run on all commits -- score normalized to 4 |
| 0/5 | Security-Policy — security policy file not detected |
| 6/7.5 | Signed-Releases — 5 out of the last 5 releases have a total of 5 signed artifacts. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 23 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 18 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 0 |
| scorecard_aggregate | 4.9 |
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
64
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 88 of 88 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 12.6/18 | One-command bootstrap — go.mod (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yml |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 9 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 1/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum, yarn.lock |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0.09 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 54.6/55 | Manageable file sizes — 4/559 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 141,104 |
| source_files_sampled | 559 |
| oversized_source_files | 4 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
0GitHub stars
1contributors
120commits, last 12 months
2days since last push
7releases
1bus factor
1open issues
Go, npmpackage ecosystems
Data collection warnings
- Could not fetch npm package 'bluelink-provider-aws' from its registry
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 4.9 / 10
4.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/16 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 1 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 1 |
| 4 | SAST | SAST tool is not run on all commits -- score normalized to 4 |
| 0 | Security-Policy | security policy file not detected |
| 8 | Signed-Releases | 5 out of the last 5 releases have a total of 5 signed artifacts. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 23 existing vulnerabilities detected |
Direct dependencies 29
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/aws/aws-sdk-go-v2 | v1.42.1 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/config | v1.32.16 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/credentials | v1.19.15 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/feature/ec2/imds | v1.18.22 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/cloudcontrol | v1.30.6 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/cloudformation | v1.72.1 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/dynamodb | v1.53.5 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.234.0 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/elasticache | v1.55.1 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/eventbridge | v1.46.6 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/iam | v1.42.2 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/kms | v1.53.6 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/lambda | v1.71.2 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi | v1.26.7 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/s3 | v1.104.0 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/secretsmanager | v1.41.5 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/signer | v1.33.6 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/sqs | v1.42.3 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/ssm | v1.68.4 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/sts | v1.42.0 | go.mod |
| Go | github.com/aws/smithy-go | v1.27.3 | go.mod |
| Go | github.com/matoous/go-nanoid/v2 | v2.1.0 | go.mod |
| Go | github.com/newstack-cloud/bluelink/libs/blueprint | v0.51.2 | go.mod |
| Go | github.com/newstack-cloud/bluelink/libs/plugin-framework | v0.15.0 | go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | go.mod |
| Go | github.com/wI2L/jsondiff | v0.7.1 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
| Go | github.com/newstack-cloud/bluelink/libs/blueprint-state | v0.8.2 | go.mod |
| Go | github.com/spf13/afero | v1.15.0 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 7087,
"has_wiki": true,
"homepage": "https://registry.bluelink.dev/providers/newstack-cloud/test/latest",
"languages": {
"Go": 2940778,
"Shell": 3490,
"JavaScript": 445
},
"pushed_at": "2026-07-19T20:17:49Z",
"created_at": "2025-03-01T12:25:35Z",
"owner_type": "Organization",
"updated_at": "2026-07-19T20:17:42Z",
"description": "The Bluelink deploy engine provider plugin for AWS",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "newstack-cloud",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/215693796?v=4",
"created_at": "2025-06-10T13:48:10Z",
"is_verified": null,
"public_repos": 22,
"account_age_days": 406
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2026-07-19T20:36:19Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2026-07-17T23:59:45Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-17T16:31:06Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-07-10T22:59:45Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-10T16:11:05Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-09T19:59:05Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-04-08T19:01:52Z"
}
],
"recent_commits": [
{
"oid": "8be3b2b09072ad34b53fec272a6ac6525c9a7234",
"body": null,
"is_bot": true,
"headline": "chore: release v0.4.2",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T20:17:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e76d40bb252c4e7bcb32bf60365493583ff77774",
"body": "… fixes\n\nAdds improvements to resilience with correct handling\nof ESM transient errors when state is transitioning in AWS.\nThis also adds support for auto-named resources with integration\ninto the recently added computed-when-ommited behaviour in\nthe blueprint framework.\nThis also adds various other bug fixes uncovered in integration\ntests with the higher level celerity transformer plugin.",
"is_bot": false,
"headline": "fix: add improved resilience, support for auto-naming and various bug…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-19T19:08:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5f97bbd337707216607fa3f2058c689fe60c4ca",
"body": null,
"is_bot": false,
"headline": "chore: group dependency updates by renovate",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-19T16:37:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3202a5c73d14997b2ca5212e0015e9dc0a7f6a89",
"body": null,
"is_bot": false,
"headline": "chore: add renovate config",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-19T15:28:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "248f7f274b2c2f5971511cf4b828a2a47d87825a",
"body": null,
"is_bot": true,
"headline": "chore: release v0.4.1",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-17T23:45:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cc63b4e5a0dc0650913b61f2f9f50b33f111c8a",
"body": null,
"is_bot": false,
"headline": "deps: bump blueprint lib to 0.51.1",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-17T21:52:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13ffee3a45798377e229d2a84b010dfa4284849f",
"body": "Fixes the subnet-group overlays so they do not misread\nreference nodes as empty lists.",
"is_bot": false,
"headline": "fix: correct overlays misreading reference nodes as empty lists",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-17T20:18:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70d74ae7d8e8c787a1a7e38a3e278a5dc720b886",
"body": "Drops patterns in code gen from cloud control resources\nthat are not compatible with Go RE2 regexp engine\nsuch as PCRE lookarounds.",
"is_bot": false,
"headline": "fix: drop patterns not compatible with re2 engine",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-17T20:12:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc79dafd02cb4f8cce7750d7541ff0311f33b3e4",
"body": null,
"is_bot": true,
"headline": "chore: release v0.4.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-17T16:12:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b46569c7cb1a7552fa546ae0f83819cc2439f567",
"body": "…oved\n\nUpdateEventSourceMapping treats a nil FilterCriteria as \"leave\nunchanged\", so removing all aws.dynamodb.lambda.stream.filter.<index>\nannotations never removed previously configured filters from an\nexisting event source mapping. Send an empty FilterCriteria object in\nthe no-filters branch so the filters are explicitly removed, and add a\nregression test asserting the update input carries an empty non-nil\nFilterCriteria.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(links): clear esm filter criteria when filter annotations are rem…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-16T20:20:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "34693c0d1ecd4a95554178b62eac62bdc0be6098",
"body": "…s is false\n\nUpdateEventSourceMapping treats a nil FunctionResponseTypes as \"leave\nunchanged\", so flipping the reportBatchItemFailures annotation from true\nto false never removed the ReportBatchItemFailures setting from an\nexisting event source mapping. Send an empty (non-nil) slice in the\ndisabled \n[…]\nranch so the setting is explicitly cleared, and add a\nregression test asserting the update input carries an empty non-nil\nFunctionResponseTypes.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(links): clear function response types when reportBatchItemFailure…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-16T20:20:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cdd17aba6d0d75fa620d74dbb89ba851c09b67a8",
"body": "…ration\n\nA SET auth token update strategy annotation is a static blueprint value,\nbut whether a deployment creates or updates the link depends on deploy\nhistory (and for transformer-generated blueprints, on how abstract\nresources map to concrete ones). Rejecting SET on first configuration\nmade a pre\n[…]\n retire, so the link falls back\nto ROTATE rather than returning an error. Docs and the rich description\nare aligned with the fallback semantics.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(links): fall back to ROTATE when SET is selected on first configu…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-16T20:20:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a24d766ab64687d68f27ffbcab43bee3fee8f8cc",
"body": "…al SET\n\nElastiCache only accepts the SET auth token update strategy after a\nprevious ROTATE, and ROTATE is the only strategy that works on a\nreplication group without an existing AUTH token. The link previously\ndefaulted to SET on first configuration, which the API would reject.\n\nDefault to ROTATE \n[…]\nategy\nannotation selects SET on first configuration. The schema, annotation\ndescription and rich description are aligned with the new lifecycle.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(links): default redis auth token strategy to ROTATE, reject initi…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-16T20:20:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b8773c85591a77e29fff224734dde5fbc786b29d",
"body": "Enforce the ElastiCache AUTH token constraints on the value read from the\nlinked Secrets Manager secret: 16-128 printable ASCII characters with\n'/', '\"', '@' and '%' forbidden. An invalid secret value now fails with a\nclear validation error naming the secret ARN (never the value) instead of\nan opaque API rejection. The existing empty-value error is preserved.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(links): validate redis auth token before ModifyReplicationGroup",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-16T20:20:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "adc734e98cc016d0865150bb99b7f227861c501a",
"body": "Correct the aws.dynamodb.lambda.stream.reportBatchItemFailures annotation\ndescription in both the inter-service schema and the Go annotation\ndefinition. Retries resume from the earliest reported failed sequence\nnumber, so subsequent records may be delivered again; the docs now state\nthis and recommend idempotent handlers instead of claiming only failed\nrecords are retried.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(links): clarify reportBatchItemFailures retry semantics",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-16T20:20:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bc6495fb97fc8873ef16e52faaf9b351dd92fcd2",
"body": "Remove restating one-liners and the name-prefix doc convention on unexported\nhelpers; keep the AWS-behaviour rationale (token never persisted, ROTATE on\nupdate, transit-encryption requirement).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(links): trim comments on dynamodb and elasticache links",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-16T20:20:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a3cd2eb03d31b3078dcbbb5a9a3535c7ea9d474a",
"body": "Hand-written inter-service link that reads a Secrets Manager secret value at\ndeploy time and applies it as the replication group's authToken via\nModifyReplicationGroup (SET on create, ROTATE on update; strategy overridable\nvia aws.elasticache.secretsmanager.authTokenUpdateStrategy). Requires\ntransit\n[…]\nsters the\nlink in provider.go. Backs the Celerity cache password-auth mechanism, aligning\nthe handler-consumed token with the app secret store.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(links): elasticache replicationGroup::secret auth-token link",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-16T20:20:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "23b97faaafc92f50e444849e506ded10cd5c48d0",
"body": "Adds the aws.dynamodb.lambda.stream.reportBatchItemFailures annotation, setting\nFunctionResponseTypes=[ReportBatchItemFailures] on the event-source-mapping\ncreate/update inputs (mirrors the SQS link). Enables consumer partial-failure\nhandling for datastore-stream sources.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(links): dynamodb stream reportBatchItemFailures on lambda esm link",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-16T20:20:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1136c4a41b997d5504818ac2493e2034d48da432",
"body": null,
"is_bot": false,
"headline": "feat: add ssm parameter tree and lambda param tree link",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-15T13:21:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f6d6548a4265c2adaac1c1ff553352b0dd1d08d",
"body": "Add region to ssm parameter spec to aid with higher level replication\nby restating the same parameter in multiple regions.",
"is_bot": false,
"headline": "feat: add region to ssm parameter spec",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-15T09:53:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98096371f14cbc60d52936a2b47e275d3451900f",
"body": null,
"is_bot": true,
"headline": "chore: release v0.3.1",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-10T22:42:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01742ad267d9239d7147e2af9e6c171e81a19cab",
"body": "Adds per-tier subnet outputs for flex vpc\nand adds subnet group validation for placement\nof subnet groups in subnet IDs from a flex vpc\nthat is not compatible (min requirements not met).",
"is_bot": false,
"headline": "fix: add per-tier subnet outputs and add subnet group validation",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-10T22:40:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8ce2e32f8e4b94a57846b8d1c5a19454f6bc4ef",
"body": null,
"is_bot": true,
"headline": "chore: release v0.3.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-10T15:53:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e497bbf56751555c4271c42415ad7eeac6098eb7",
"body": "Adds a synthetic ssm parameter path resource\nalong with a lambda to param path link to\nenable access to a hierarchy of SSM path params\nin a single link instead of having to individually\nlink to each parameter where a separate permissions\nstatement would need to be granted for each one.",
"is_bot": false,
"headline": "feat: add support for scoping links to ssm parameter path prefixes",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-10T15:48:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dee2467103926b042fb68fefee6ade52a3c87eab",
"body": null,
"is_bot": true,
"headline": "chore: release v0.2.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-09T19:41:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f36f88de774e1906b3a940e59886f06a4b1db3c",
"body": null,
"is_bot": false,
"headline": "ci: address security issues in release workflow",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-09T19:15:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00cca310b2b92357fb59c0c57539f7b487943462",
"body": null,
"is_bot": false,
"headline": "feat: add lambda function to sqs queue link implementation",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-09T17:30:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f1509b10930db5e75834a0bb5312a8ccf3e4e1e",
"body": null,
"is_bot": false,
"headline": "feat: add api gateway v2 support with lambda links",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-09T17:03:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db3279ca453716d6c3c601e5145225c0dc98f07b",
"body": null,
"is_bot": false,
"headline": "feat: add support for elasticache and add lambda cache links",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-06T12:05:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b26c16df6a61fcb8e0ecbaf340dddecfefcd5ac",
"body": null,
"is_bot": false,
"headline": "feat: add support for aurora cluster with function cluster link support",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-06T00:39:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5e18e71cd1e90d9d1d0914b3b596db4fd246926",
"body": "…working",
"is_bot": false,
"headline": "feat: add first phase of support for rds focused on rds proxy and net…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-05T21:48:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adca847c8f62131620daebccd8607cea00f16258",
"body": "… functions",
"is_bot": false,
"headline": "feat: add ssm, kms and secrets manager support with links from lambda…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-05T13:36:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fee46edad31471d14125e9858ca824b870cebed8",
"body": null,
"is_bot": false,
"headline": "feat: add bucket resource and links for bucket access and notifications",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-07-04T12:59:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdbc4c8f6514f0e2fddd51eed480baecf120142d",
"body": null,
"is_bot": false,
"headline": "feat: add kinesis streams along with stream/queue to lambda links",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-29T15:34:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cebdeefa6bc66cc3524222277a671d76b695e2e",
"body": "Updates dynamodb streams to use index-based\nfilter keys for annotations inline with the\napproach taken for kinesis and SQS event\nsources for a lambda function to reduce\nmultiple levels of complex JSON encoding\nin an annotation.",
"is_bot": false,
"headline": "feat: update ddb stream lambda link to use new index-based filter keys",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-29T09:45:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03522792af8290fdeb115d8919abefe7734623ee",
"body": null,
"is_bot": false,
"headline": "feat: add support for sns resources and links",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-29T00:59:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bf0158a776a8d164a88c2425c8da93b4f7e6ca0",
"body": "Adds the reusable network link activation\nhelper, wires it up for the vpc function link\nand function to function link and adds networking\ndata sources.\nThis also includes generated sns and cloudwatch\nlog groups resources.",
"is_bot": false,
"headline": "feat: add network link activation helper and vpc lambda function link",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-28T12:47:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24f226ceece5e9a1965d4f5c1e6edd8fc3b333e9",
"body": null,
"is_bot": false,
"headline": "ci: update sonarqube scan action",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-27T16:01:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9983972a25694e6a65cebbf091515aeb6a11a53b",
"body": null,
"is_bot": false,
"headline": "test: add missing tests for link implementations",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-27T15:53:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f841b31c3bfd6b14bab12b886ba4f77fd074053",
"body": "…ong with other improvements",
"is_bot": false,
"headline": "feat: update permission allocation logic for lambda dynamodb links al…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-27T15:35:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40dce2dea0b1b1c68adcc84fd4e83b4f00b47985",
"body": null,
"is_bot": false,
"headline": "test: add integration test for lambda layer versions",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-27T15:32:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea645f5b36a113bebd1b7867a0536c10216ef703",
"body": null,
"is_bot": false,
"headline": "chore: add get policy version to iam service mock",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-27T15:32:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1d4cf134eed3a08d8d66dece026c5f9f09ae868",
"body": null,
"is_bot": false,
"headline": "fix: add fix for qualifier bug in lambda function data source",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-27T15:31:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5440290ab4123148ccbd701d38448831cd2caf1",
"body": null,
"is_bot": false,
"headline": "feat: add link implementation for event bridge with sqs and lambda",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-27T15:30:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bec4fd1a239132a9a3de7669f7a71f66f5993ba",
"body": null,
"is_bot": false,
"headline": "test: add service mocks for unit tests",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-26T15:35:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf707fc05d44658a3548d2f5240dd0bdd960de22",
"body": null,
"is_bot": false,
"headline": "test: add direct call integration test harness",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-26T15:33:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c501c7a903549bef40c70f7919c06bce63a10d4",
"body": null,
"is_bot": false,
"headline": "feat: wire up cloud control resources and new links in the provider",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-26T15:13:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d17c62a74f0f22f78485c3a5c56a5b2761e46e8c",
"body": "…her resource types",
"is_bot": false,
"headline": "fix: make sure flex vpc is registered as a stablised dependency of ot…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-26T15:05:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8efbe0dac72a149f6a6803d816dd2a11652861fd",
"body": null,
"is_bot": false,
"headline": "feat: add and update helpers for link-managed resources and permissions",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-26T15:03:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a83f6020c5be98142bd96a9a71cc17ea19613ab6",
"body": null,
"is_bot": false,
"headline": "test: add e2e/integration test harness and initial test suites",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-26T14:10:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66ec4d5b9104936650361139934d08f819c80eeb",
"body": null,
"is_bot": false,
"headline": "chore: update generated resource descriptions following new rules",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-26T14:04:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf732df5b1a550cc166bca8696ace5bb640906c6",
"body": "…ources",
"is_bot": false,
"headline": "feat: add code gen tool for cloud control backed resources and data s…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-26T14:03:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4da219417bc4a731a451823d60d48e3552666e08",
"body": "Adds the cloud control engine that provides the base\nresource and data source implementations that power\nthe generated cloud control resources.",
"is_bot": false,
"headline": "feat: add cloud control resource and data source implementation",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-26T13:14:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d9a9185f2f18792dc0535ca57c2e3604a9a563a",
"body": "… generation",
"is_bot": false,
"headline": "feat: add initial generated output from cloud control resource and ds…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-25T13:59:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f2b57707278af4f41bf5852813024a7c82ef37b",
"body": null,
"is_bot": false,
"headline": "chore: sync schemas for all onboarded services from cf registry",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-25T13:58:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fad0052c311b760ac0c1fce5677a2a76e9120186",
"body": "…ript\n\nCleans up the old manual implementation of resources that\nare being replaced with Cloud Control generated resources\nderived from the CloudFormation schema registry.\nThis also adds documentation for working with cloud control\ncode gen.\nThis includes changes to the test script for the new\nintegration/e2e test harness.",
"is_bot": false,
"headline": "refactor: clean up old manual implementation, update docs and test sc…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-25T13:47:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a87738fc4761047d5ade2f90b4a0f47f564aef61",
"body": null,
"is_bot": false,
"headline": "chore: update example docs and remove useless comments",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-19T15:19:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f56b10b4e04048bf4de8b2af12cb6e12555f4fa",
"body": null,
"is_bot": false,
"headline": "chore: update sqs queue resource examples",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-19T15:14:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19cceef0f5ad34b9e2e79393a9dc459e6367a366",
"body": "…tructure",
"is_bot": false,
"headline": "chore: update lambda examples to include blueprint lang and use new s…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-19T15:12:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faa25a366a6d3a98d6c994358ffdcda6f4bbaf64",
"body": null,
"is_bot": false,
"headline": "feat: add support for event bridge and wire up missing resources",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-19T15:11:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07c25ed87bc612f66cb3273e6ae28f93e1d1c783",
"body": null,
"is_bot": false,
"headline": "chore: add corrections to lambda and lambda ddb definitions",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-19T13:59:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "667c13758e17d87ed3d1115b8459553674c68761",
"body": null,
"is_bot": false,
"headline": "fix: correct field path in iam policy link utils",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-19T11:11:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b76b8a4c6247e3b1ebc24a6d31ec3804648ff98",
"body": null,
"is_bot": false,
"headline": "feat: update example docs for iam resources",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-19T10:33:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bb8bed71b5cae9200ae0459fba23687d5cbbe6a",
"body": null,
"is_bot": false,
"headline": "chore: add definitions for eventbridge resources",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-19T10:24:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94aa5079e2b8003ea499af8fdfb56799f798e817",
"body": null,
"is_bot": false,
"headline": "chore: expand the pattern for annotation names",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-19T10:20:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02515bc83048e8076c1d633f633506d475e05d86",
"body": null,
"is_bot": false,
"headline": "ci: add group manifest to docgen step",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-19T10:19:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d40a69cdcda7e822e70cfdc17d54ad8cee5fde16",
"body": null,
"is_bot": false,
"headline": "chore: add groups manifest for grouping in doc generation",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-19T10:18:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "caa78c84f2256e9605e88dfcb088be8faf6f987a",
"body": null,
"is_bot": false,
"headline": "docs: update agent guidance and add link design guide",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-06-19T10:17:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "807d7999ffaeb6dba9b879f9f1ec0c8d88e01681",
"body": null,
"is_bot": false,
"headline": "feat: add cardinality constraint to source queue to dlq link",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-20T09:31:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4aeccf81306c983fde4fc7b8efa29adcc5797c2b",
"body": null,
"is_bot": false,
"headline": "feat: add cardinality constraint to function signing config link",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-20T09:30:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "839b1045dbcd5eb3231724720b6c4bcfb0d59225",
"body": null,
"is_bot": false,
"headline": "chore: add cardinality constraints to link definitions and schema",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-20T09:30:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12c34f6e98b71f46359c8e818d7dd55173a1ef46",
"body": null,
"is_bot": false,
"headline": "deps: bump up bluelink libs",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-20T00:43:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29e0f6bc0e60e05e2d68140efe5fe357c9373e3c",
"body": null,
"is_bot": true,
"headline": "chore: release v0.1.1",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-04-08T18:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2229cd4df43ebb2ccabc9d24997ea033099d45a9",
"body": null,
"is_bot": false,
"headline": "fix: bump for initial 0.1.1 release",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T18:41:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acaafa9f75733c688e6cb675c1ef79e1c4b35e04",
"body": null,
"is_bot": false,
"headline": "ci: add missing go setup for svu installation",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T18:38:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40c0ba8aa3fb6a231530da530d5934a4010918e6",
"body": null,
"is_bot": false,
"headline": "chore: migrate from release-please to custom workflow",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T18:34:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "296332f8ea931b656548c126807991db0ca94809",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.1",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-04-08T16:58:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6aab365bb343c65fcd5dd9bd3046d466d599593d",
"body": null,
"is_bot": false,
"headline": "fix: force bump to 0.1.1",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T16:56:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43d8663d360eda5805f21d75c87cdf13a8977035",
"body": null,
"is_bot": false,
"headline": "chore: reset to start from 0.0.0",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T16:54:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71d38ae2a11c63082d9aba36bbed1cad449ee722",
"body": null,
"is_bot": false,
"headline": "chore: set new bootstrap sha for release please",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T16:44:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0820a1dfa2c948788551072f1b4224de8af075dd",
"body": null,
"is_bot": false,
"headline": "ci: ensure goreleaser always runs",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T15:51:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ccabf67bb8687889310960cd018f26a80fdf1ed",
"body": null,
"is_bot": false,
"headline": "ci: add fixes for release workflow and allow manual dispatch",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T15:48:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "398e437ff21cf372507517f04701df20a82c84b1",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.2.1",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-04-08T15:31:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c00a0fc32173d77f588caa17faba568018d5ab99",
"body": null,
"is_bot": false,
"headline": "fix: update docs to get first proper release",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T15:28:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9e314b07638f779c487a2e960f26adaabb11641",
"body": null,
"is_bot": false,
"headline": "chore: reset release config to fix release please issues",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T15:26:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d37a0b466728e3442b5dd699b4d4c08b6ad9ac2",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.2.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-04-08T15:15:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13efd5225d953547dfd2934285574abd9160bbe0",
"body": null,
"is_bot": false,
"headline": "fix: force next release as 0.2.0",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T15:12:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "528aef1a51d0ba9213c04a80f03633442bce6486",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-04-08T15:08:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0b64e81d2f2eae40024d1ce0f0a87dd9334c796",
"body": null,
"is_bot": false,
"headline": "chore: fix release please config to use packages key",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T15:05:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "449276c5d0dd26e15aa8ef1f2f5861dba1ffe8b5",
"body": null,
"is_bot": false,
"headline": "fix: force version bump to 0.1.1",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T15:02:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0351a24425c702accb47db54382f0bb43e4975cd",
"body": null,
"is_bot": false,
"headline": "fix: bump initial version to force 0.1.1 release",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T14:57:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fcb862b545400218528735be29f1e35a08996b4",
"body": null,
"is_bot": false,
"headline": "chore: revert manifest version to force 0.1.0 release",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T14:54:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "029258a340db946d7c965cd0ecad6bfad3d8a2a1",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.1.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-04-08T14:50:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72e9b312e92d36bc9ff80dfc9c409c6339c19c9e",
"body": "…ase docs",
"is_bot": false,
"headline": "chore: update release workflow to work with the registry and add rele…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T14:12:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "638e2f7c8e288e26d10dfdb77fa02def31a99957",
"body": null,
"is_bot": false,
"headline": "ci: update setup-go action version",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T13:50:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af492cf57fe2234eb00f1d32885bb407cd87c278",
"body": null,
"is_bot": false,
"headline": "ci: pin sonar source scan action version",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T13:39:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18b41a806ab0fb7574ac73d6c516c62a8687fe16",
"body": null,
"is_bot": false,
"headline": "chore: update release please config and initial version",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T13:31:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dca92500ac84c76505a04b824168fda367a6139e",
"body": null,
"is_bot": false,
"headline": "chore: remove rogue sleep call, improve docs and update go in ci",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T13:21:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42d7a213fc2702facf866b9533cf41994eccd5a2",
"body": "…cture\n\nAdds lambda function to dynamodb table links\nalong with the schema, instructions and structure\nto support inter-service links.\nThis also updates existing resources to no longer\nspecify the CanLinkTo array which is no longer supported\nas the new approach in the blueprint framework is to deriv\n[…]\nllow for cross-provider\nresource links without provider coupling and requiring\nplugin maintainers to maintain a list that if not updated\nfrequently would block the ability to use cross-provider links.",
"is_bot": false,
"headline": "feat: add lambda function ddb table links and inter-service link stru…",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2026-04-08T12:51:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b4c72f6fcb1261da20268ae20db2a6bbd5b9b7f8",
"body": null,
"is_bot": false,
"headline": "feat: bundle build-time version into plugin metadata",
"author_name": "Andre Sutherland",
"author_login": "fr3shw3b",
"committed_at": "2025-12-30T15:16:47Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 7,
"commits_last_year": 120,
"latest_release_at": "2026-07-19T20:36:19Z",
"latest_release_tag": "v0.4.2",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 10,
"days_since_latest_release": 2,
"mean_days_between_releases": 17
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/newstack-cloud/bluelink-provider-aws",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/newstack-cloud/bluelink-provider-aws",
"is_deprecated": false,
"latest_version": "v0.4.2",
"repository_url": "https://github.com/newstack-cloud/bluelink-provider-aws",
"versions_count": 8,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-19T20:17:38Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 1,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0
},
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 141104,
"source_files_sampled": 559,
"oversized_source_files": 4,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod",
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"npm"
],
"dependencies": [
{
"name": "github.com/aws/aws-sdk-go-v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.42.1"
},
{
"name": "github.com/aws/aws-sdk-go-v2/config",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.32.16"
},
{
"name": "github.com/aws/aws-sdk-go-v2/credentials",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.19.15"
},
{
"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.18.22"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/cloudcontrol",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.30.6"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/cloudformation",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.72.1"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/dynamodb",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.53.5"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/ec2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.234.0"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/elasticache",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.55.1"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/eventbridge",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.46.6"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/iam",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.42.2"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/kms",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.53.6"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/lambda",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.71.2"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.26.7"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/s3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.104.0"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/secretsmanager",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.41.5"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/signer",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.33.6"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/sqs",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.42.3"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/ssm",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.68.4"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/sts",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.42.0"
},
{
"name": "github.com/aws/smithy-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.27.3"
},
{
"name": "github.com/matoous/go-nanoid/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.1.0"
},
{
"name": "github.com/newstack-cloud/bluelink/libs/blueprint",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.51.2"
},
{
"name": "github.com/newstack-cloud/bluelink/libs/plugin-framework",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.15.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/wI2L/jsondiff",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.1"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "github.com/newstack-cloud/bluelink/libs/blueprint-state",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.2"
},
{
"name": "github.com/spf13/afero",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.15.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 13,
"open_issues": 1,
"closed_ratio": 0,
"closed_issues": 0,
"closed_unmerged_prs": 8
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "fr3shw3b",
"commits": 222,
"avatar_url": "https://avatars.githubusercontent.com/u/5011918?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yaml",
"integration-tests.yaml",
"release.yaml",
"renovate.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"yarn.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/16 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 1,
"reason": "dependency not pinned by hash detected -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 4,
"reason": "SAST tool is not run on all commits -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 8,
"reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "23 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "8be3b2b09072ad34b53fec272a6ac6525c9a7234",
"ran_at": "2026-07-22T05:04:18Z",
"aggregate_score": 4.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T02:27:49Z",
"oldest_open_prs": [
{
"number": 21,
"created_at": "2026-07-19T15:15:23Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-19T20:17:38Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 22,
"created_at": "2026-07-19T16:56:47Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/newstack-cloud/bluelink-provider-aws",
"host": "github.com",
"name": "bluelink-provider-aws",
"owner": "newstack-cloud"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"security": 49,
"vitality": 82,
"community": 33,
"governance": 40,
"engineering": 86
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 82,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"commits_last_year": 120,
"human_commit_share": 0.88,
"days_since_last_push": 2,
"active_weeks_last_year": 10
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "10/52 weeks with commits",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 10
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "120 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 120
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"releases_count": 7,
"latest_release_tag": "v0.4.2",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 17
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "7 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 7
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~17 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 17
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 2,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 2 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 2
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 33,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 40,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"merged_prs": 13,
"open_issues": 1,
"closed_issues": 0,
"issue_closed_ratio": 0,
"closed_unmerged_prs": 8
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "0% of issues closed",
"points": 0,
"status": "missed",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 0
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "13/21 decided PRs merged",
"points": 23.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 13,
"decided": 21
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/16 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"followers": 0,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "newstack-cloud",
"public_repos": 22,
"account_age_days": 406
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of newstack-cloud",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "newstack-cloud"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "22 public repos, account ~1 yr old",
"points": 12.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 22
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/newstack-cloud/bluelink-provider-aws"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 2
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 2 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 2
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "8 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 8
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://registry.bluelink.dev/providers/newstack-cloud/test/latest",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://registry.bluelink.dev/providers/newstack-cloud/test/latest",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 49,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": null,
"notes": [],
"value": 49,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 4.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/16 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 4",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "23 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 64,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "88 of 88 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 88,
"sampled": 88
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"yarn.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.09,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "9 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 9,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 141104,
"source_files_sampled": 559,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/559 source files over 60KB",
"points": 54.6,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 559,
"oversized": 4
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Could not fetch npm package 'bluelink-provider-aws' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-22T05:04:30.428809Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/n/newstack-cloud/bluelink-provider-aws.svg",
"full_name": "newstack-cloud/bluelink-provider-aws",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.