open-constructs/cdk-terrain holds a health index of 77 out of 100, placing it in the Good band. It scores highest on Vitality (90/100) and lowest on Security (58/100). It was last updated today. 2 contributors account for most of its recent work.
77
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
77
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25
Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
0
affected_packages
0
assessed_packages
3
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:cdktn@0.23.4 runtime dependency closure — what installing the published package pulls in — 3 packages. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch npm package '@tools/documentation-generation' from its registry
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 23 ⇿
0Stars
23Forks
7Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 2Patch 5
OpenSSF Scorecard 4.8 / 10
4.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-23 04:45 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:cdktn@0.23.4 pulls in 3 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"cdk",
"cdktf",
"infrastructure-as-code",
"terraform",
"opentofu",
"terraform-cdk",
"cdk-terrain",
"cdktn"
],
"is_fork": false,
"size_kb": 135059,
"has_wiki": false,
"homepage": "http://cdktn.io",
"languages": {
"C#": 22856,
"Go": 39853,
"HCL": 4962,
"Java": 24994,
"Shell": 7506,
"Python": 35960,
"Batchfile": 230,
"Dockerfile": 2624,
"JavaScript": 93411,
"TypeScript": 2585269
},
"pushed_at": "2026-07-23T04:27:04Z",
"created_at": "2026-01-12T09:13:18Z",
"owner_type": "Organization",
"updated_at": "2026-07-23T04:19:23Z",
"description": "Define infrastructure resources using programming constructs and provision them using OpenTofu/Terraform",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MPL-2.0",
"default_branch": "main",
"license_spdx_raw": "MPL-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://the-ocf.org/",
"name": "Open Constructs Foundation",
"type": "Organization",
"login": "open-constructs",
"company": null,
"location": "United States of America",
"followers": 55,
"avatar_url": "https://avatars.githubusercontent.com/u/156111141?v=4",
"created_at": "2024-01-09T16:20:51Z",
"is_verified": null,
"public_repos": 12,
"account_age_days": 925
},
"license": {
"state": "standard",
"spdx_id": "MPL-2.0",
"raw_spdx": "MPL-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.23.4",
"kind": "patch",
"published_at": "2026-07-03T00:40:12Z"
},
{
"tag": "v0.23.3",
"kind": "patch",
"published_at": "2026-06-05T08:52:02Z"
},
{
"tag": "v0.23.2",
"kind": "patch",
"published_at": "2026-05-26T05:21:37Z"
},
{
"tag": "v0.23.1",
"kind": "patch",
"published_at": "2026-05-16T04:21:47Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2026-05-06T11:54:43Z"
},
{
"tag": "v0.22.1",
"kind": "patch",
"published_at": "2026-03-28T16:29:43Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2026-02-18T00:53:36Z"
}
],
"recent_commits": [
{
"oid": "90322f97388207362ad6a0a19a312353df213a73",
"body": "…ons (RFC-04) (#296)\n\nImplements RFC-04 — **provider feature availability**: support the newer\nprovider plugin-protocol capability families with `targetVersions`-aware\ncodegen and synth-time validation. Proposal, dataset, sweep tooling and\ninteractive report live in **open-constructs/cdktn-planning*\n[…]\n/issues/3886\n- https://github.com/hashicorp/terraform-cdk/issues/3686\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: support newer provider plugin-protocol features via targetVersi…",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-07-23T04:19:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2bf315d763cae0efbc5497d4c8e6630943cd5053",
"body": "### Description\n\nOfficially set the minimum node version to 22.x as 20.x is EoL.\nUpdates @types/node to 22.x and restores minor updates.\n\n### Checklist\n\n- [ ] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md#pull-requ\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore(deps)!: Require Node 22 minimum (#345)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-07-23T02:13:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc9a8e9ee91dbcd8a8cb1ecc8d3cb5f06ee7c743",
"body": "<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our process in our contributing guide:\nhttps://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md\n\n-->\n\n### R\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore: remove cdktf from tests (#277)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-07-19T20:10:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e1a69fc40410e45d7d686095419e67b60bb8d590",
"body": "### Description\n\nAttempting to fix failures seen in pnpm upgrade job:\nhttps://github.com/open-constructs/cdk-terrain/actions/runs/29232337176/job/86759126716\n\n### Checklist\n\n- [ ] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/main/CONT\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "fix(gha): Fix pnpm upgrade workflow (#335)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-07-18T22:22:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "76dd4ff80a26df3ac2202ce299e416ea430d9685",
"body": "…ture flag (#323)\n\n### Description\n\nCloses #322. ~~Stacked on #321~~ — #321 has merged and this branch is\nrebased onto current `main`; the diff is now the single canonical-hash\ncommit.\n\nAdds the canonical entry-framed asset hash as a `canonicalAssetHashes`\nfeature flag (`FUTURE_FLAGS`: enabled for n\n[…]\nth my changes\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>\nCo-authored-by: vincent de smet <vincent.drl@gmail.com>",
"is_bot": false,
"headline": "feat(lib): canonical asset hashes behind the canonicalAssetHashes fea…",
"author_name": "vincenthsh",
"author_login": "vincenthsh",
"committed_at": "2026-07-18T10:21:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "95753a93c7edc0b667f0e7e9696ffb86142e25dd",
"body": "### Description\n\nBumps `fs-extra` to `11.3.6` (and `@types/fs-extra` to `11.0.4`) in\nevery package that depends on it, so the whole monorepo resolves a\nsingle copy of each.\n\nBefore this change the versions were inconsistent: five packages were\nalready on the `11.x` line (`11.3.4` / `^11.3.0`), while\n[…]\nhat prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore(deps): update fs-extra to 11.3.6 across all packages (#328)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-17T01:38:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "557a16315aa1e118b530e709db85459c7d60b6c7",
"body": "### Description\n\nBumps `ci-info` from `3.9.0` to `4.4.0` (latest) in the two packages\nthat declare it as a dependency:\n\n- `@cdktn/commons`\n- `@cdktn/cli-core`\n\nThis is a major version bump (3.x → 4.x). The only API used in the\ncodebase is `ciInfo.isCI` and `ciInfo.name` (in\n[`commons/src/checkpoint.\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore(deps): update ci-info to 4.4.0 across all packages (#329)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-17T01:34:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c10ee352831d11d6a8d26bcc093c238b475ffd18",
"body": null,
"is_bot": false,
"headline": "chore(deps): Update zod to v4.4.3 (#332)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-14T23:36:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1c1c53c747a53dbfbcfdfbbe2bf02ca0b2c6668",
"body": "### Description\n\nBumps `minimatch` from `5.1.9` to `10.2.5` (latest) in\n`@cdktn/cli-core`.\n\nThis is a major version bump (5.x → 10.x) and required two follow-on\nchanges beyond the version number:\n\n- **Removed the `@types/minimatch` devDependency.** `minimatch@10` ships\nits own type definitions, so t\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore(deps): update minimatch to 10.2.5 (#330)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-14T04:10:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "38ea0ba85ad6ae6fd4c7207747239478abea2edd",
"body": "### Description\n\nBumps `sscaff` from `1.2.274` to `2.0.388` (latest) in\n`@cdktn/cli-core`.\n\nThis is a major version bump (1.x → 2.x) but required no code changes on\nour side.\n\nThe [v2.0.0 breaking\nchange](https://github.com/cdklabs/node-sscaff/releases/tag/v2.0.0) is a\nsingle item: sscaff now requir\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore(deps): Update sscaff to v2.0.388 (#331)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-14T03:16:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6360e202c5bd04e81e5d08e4a0511554c46fcb4a",
"body": "### Description\n\nCloses #320.\n\n`TerraformAsset` walked source trees with `fs.statSync`, which follows\nsymlinks. On symlinked trees (e.g. pnpm's `node_modules`) this meant:\n\n- **Archive bloat**: a target reachable through N symlink paths was\ncopied N times into the zip (15 MB → 34 MB on a real Lambda\n[…]\nicable\n- [x] New and existing unit tests pass locally with my changes\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(lib)!: preserve symlinks in TerraformAsset walkers (#321)",
"author_name": "vincenthsh",
"author_login": "vincenthsh",
"committed_at": "2026-07-12T23:43:54Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a899b7c86edefce60803facd9299827a1fffde46",
"body": "### Description\n\nThe pnpm upgrade job has been failing as in ci environments pnpm is by\ndefault not allowed to update the lockfile, but that is explicitly what\nwe want to do here.\n\n### Checklist\n\n- [ ] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "fix(gha): Allow pnpm to update the lockfile after package updates (#318)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-07-12T20:04:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1317141b81c37a4c1f260050cf2bb6d4781c529a",
"body": null,
"is_bot": false,
"headline": "chore(cli)!: replace node-fetch with undici (#306)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-10T14:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "605cf639c4c021048ee84f8f44daf78d037f4ded",
"body": "## Summary\n\n- `tools/documentation-generation` pinned `constructs@10.3.0`, while\nevery other package in the repo (`packages/cdktn`, `@cdktn/cli-core`,\n`@cdktn/provider-generator`, `cdktn-cli`, all examples) uses `10.6.0`.\nThe pin dates back to the `cdktf` era (2024-05-06) and was never bumped\nsince.\n[…]\nhe pin) and confirming detection\ntooling behaves correctly both ways\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Sonnet 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(docs): fix stale constructs pin breaking with()/IMixin docs (#305)",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-07-09T04:29:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "eab2a016d08481bec04d83e3d70c7b9dcda5d414",
"body": "… updates (#295)\n\nBumps the github-actions-backward-compatible group with 2 updates:\n[docker/build-push-action](https://github.com/docker/build-push-action)\nand [actions/setup-go](https://github.com/actions/setup-go).\n\nUpdates `docker/build-push-action` from 7.2.0 to 7.3.0\n<details>\n<summary>Release\n[…]\n of the specified dependency and ignore\nconditions\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump the github-actions-backward-compatible group with 2…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-09T02:01:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "94999fc2de2093bdf733adc41f2877bdb38bc126",
"body": "### Description\n\nThe repo already uses nx as its task runner for `test`, `lint`, and the\naffected-graph, but still depends on lerna for a handful of\norchestration and release chores. This PR removes lerna entirely and\nroutes those chores through nx, then converts the touched shell scripts\nto ESM Nod\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore(deps): replace lerna with nx (#315)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-09T01:56:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d555b828f6c3c6093758886661a164e4a4553ece",
"body": "…earest Any wrapper (#300)\n\nFixes #11\n\n### Problem\n\nRunning `cdktn get` for the `awscc` provider generates bindings that\nfail to compile:\n\n```\n.gen/providers/awscc/data-awscc-appintegrations-data-integration/index.ts(327,44): error TS2551: Property 'StringListMapMap' does not exist on type\n```\n\nThe \n[…]\nor the existing `StringMapMap` lookup tests\nfor the three new classes\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(provider-generator): collapse unsupported nested collections to n…",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-07-07T16:08:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "47ee2bb36112ce2c80d1d3dc87a4d14cd23de34f",
"body": "### Description\n\nBumps the direct `glob` dependency from `10.5.0` to `13.0.6` in the\nthree packages that declare it:\n\n| Package | Before | After |\n| -------------------------- | -------- | -------- |\n| `@cdktn/hcl2cdk` | `10.5.0` | `13.0.6` |\n| `@cdktn/provider-gene\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore(deps): bump glob to 13.0.6 (#307)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-07T00:32:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a960c5c69e8046481460c8061448dc48567ee1ee",
"body": "…failure (#298)",
"is_bot": false,
"headline": "fix(cli): don't downgrade prebuilt providers on a transient registry …",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-06T01:41:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d64f6c1194c58d5e06e3b6f69a6fe9562b4e49e",
"body": null,
"is_bot": false,
"headline": "fix(gha): flip merged release PR label to autorelease: tagged (#302)",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-07-05T12:24:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "955204a9d7913aede55b86710a80624ac567ca5f",
"body": "## Summary\n\n- Include dev dependencies when npm is used to detect the installed\n`cdktn` / `cdktf` package version.\n- Add regression coverage for the npm package-version lookup arguments.\n\nFixes: #278\n\n## Testing\n\n- `pnpm nx test @cdktn/commons --runInBand --testFile=src/debug.test.ts`\n- `pnpm nx build cdktn-cli`\n- Validated the linked repro with the locally built CLI:\n - `cdktn debug`\n - `cdktn provider list`\n - `cdktn provider add random`",
"is_bot": false,
"headline": "fix(cli): include dev dependencies in npm version lookup (#280)",
"author_name": "sakul-learning",
"author_login": "sakul-learning",
"committed_at": "2026-07-03T15:46:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6aff7e6cbb9eeca173af898ea1b48b322cc7c16",
"body": "### Related issue\n\nFixes #263\n\n### Description\n\nImplements the Ink + React replacement proposed in the linked issue:\nswaps the Ink/React UI layer for `@inquirer/prompts` + `cli-spinners` +\n`cli-table3` + `ansi-escapes` + `cli-cursor`. Same commands, flags,\napproval prompts, and `--auto-approve` sema\n[…]\nhat prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore(cli): replace Ink + React with smaller-tree CLI libraries (#264)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-03T15:18:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bf3131c7a3ce846fbe0d284ab304a4fc1f829ef9",
"body": ":robot: Release PR — merge to cut a new release. Kept open and rebased\nas commits land on `main`.\n---\n\n\n<details><summary>0.23.4</summary>\n\n##\n[0.23.4](https://github.com/open-constructs/cdk-terrain/compare/v0.23.3...v0.23.4)\n(2026-07-02)\n\n\n### Features\n\n* **cli:** validate Terraform CLI feature ver\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: open-constructs-cdktn[bot] <291052431+open-constructs-cdktn[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(release): release v0.23.4 (#254)",
"author_name": "open-constructs-cdktn[bot]",
"author_login": "open-constructs-cdktn[bot]",
"committed_at": "2026-07-03T00:02:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "562d4c7b90ba37c1b1e1385f552c86e4f1ee7879",
"body": "…mpile bundle (#292)\n\n### Description\n\nThe `@cdktn/provider-generator:build` step (its `postbuild` runs the\nedge-provider-schema CLI, which generates bindings for all languages)\nintermittently fails in CI with:\n\n```\n[Error: ENOENT: no such file or directory, stat\n '/__w/cdk-terrain/cdk-terrain/packa\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [x] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "fix(provider-generator): copy only publishable files into the jsii co…",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-02T12:52:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d5af07dd8679b5b6746b7b790d2558341f0fea26",
"body": "… (#285)\n\n### Description\n\nThe Java integration tests (`provider-add`, `provider-list`,\n`provider-upgrade`) have been intermittently failing, resolving a\nprebuilt provider package version one or two below the expected maximum\n(e.g. `0.2.55` → `0.2.53`/`0.2.54`).\n\n#### Example Failed jobs\n\n-\nhttps://\n[…]\nhat prove my fix is effective or that my\nfeature works if applicable\n- [x] New and existing unit tests pass locally with my changes\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "fix(cli): resolve prebuilt Java provider versions via repo1.maven.org…",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-02T12:49:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "de617dbb5e26a606e611f9a5477a12245f0650f4",
"body": "…(#284)\n\n### Related issue\n\nFixes #283\n\n### Description\n\nInterrupting `cdktn diff` or `cdktn deploy` (Ctrl-C) left terraform's\nstate lock held, so the next run failed with `Error acquiring the state\nlock`.\n\nThe cause was that the CLI's abort handler tore terraform down instead\nof letting it exit on \n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [x] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "fix(cli): release terraform state lock when interrupting diff/deploy …",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-07-01T20:58:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6d3657af14fe6abb598689999b5756bec672fa4c",
"body": null,
"is_bot": false,
"headline": "chore(deps): replace uuid dependency with node:crypto.randomUUID (#291)",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-07-01T11:28:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fda0103de7d65956f8172af0055e6c880d7065cf",
"body": "…nTofu schema keys (#293)",
"is_bot": false,
"headline": "fix(provider-generator): match shorthand provider sources against Ope…",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-07-01T10:53:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7de65e965a4575c5359b6923dde2f467e1855ee",
"body": null,
"is_bot": false,
"headline": "chore: Remove unused dependencies (#281)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-06-29T15:32:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cdf811544b7c8327f219f9668f30a574bfbec87b",
"body": "## Summary\n\n> Stacked on #269 (declared `targetVersions` foundation). \n\nTerraform and OpenTofu have diverged in their built-in function sets,\nand the checked-in function metadata predated Terraform 1.8 — so `Fn`\nwas missing every function added since, and using a function your\ntargeted runtimes don'\n[…]\nistic across the version matrix — no binary is executed\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(lib): validate Fn usage against Terraform/OpenTofu versions (#268)",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-06-26T02:23:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0aa234399933be88c55c8c82b03fce4f9ddf600a",
"body": "…ion) (#269)\n\n## Summary\n\n> Reworks unreleased\nhttps://github.com/open-constructs/cdk-terrain/issues/237 to not run\nterraform binary during synth\n\nPrerequisite for #268. Instead of probing whichever Terraform/OpenTofu\nbinary happens to be installed during synth, projects declare the\nruntimes they in\n[…]\nisting init tests exercise the new template field\nin CI\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: declared Terraform/OpenTofu target versions (validation foundat…",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-06-25T02:15:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "32a408fd8040afab63080d9c096f355d45fe2e98",
"body": "…able` deprecated JSDoc (#234)\n\n**☝️ Could I get some help with this please ☝️**\nHi, I couldn't get all the tests to pass locally, but I think it's a\nsetup issue, not due to my changes.\nCould someone help me out by either running it locally themselves or\nrunning it through GH Actions?\n\n---\n\nUpdated \n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "feat(lib): S3-backend - Add `useLockfile` field and update `dynamodbT…",
"author_name": "Richard J",
"author_login": "rj-au",
"committed_at": "2026-06-24T02:36:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0ea946f21025f3894215b2c58a829189539a9416",
"body": "… prompt (#267)\n\nFixes #265\n\n## Problem\n\n`cdktn deploy` (and `destroy`) transformed real terraform errors into a\nmisleading `Missing variable` error, swallowing the actual failure.\n\nIn `packages/@cdktn/cli-core/src/lib/models/deploy-machine.ts`,\n`handleLineReceived` detected terraform's interactive \n[…]\n it.\n\nhttps://claude.ai/code/session_01HYP7w7BmQM9F8xZTc9qoHD\n\n---\n_Generated by [Claude\nCode](https://claude.ai/code/session_01HYP7w7BmQM9F8xZTc9qoHD)_\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli): don't mistake terraform error output for a missing-variable…",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-06-13T13:29:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ef508a659e52bb8f5cd0d827e4cad8ff70e0809d",
"body": "PR #266 added a devEngines.packageManager block requiring pnpm with\nonFail: download. The publish jobs run npm/npx (publib -> npm publish,\nwhich is required for npm OIDC trusted publishing on npm >= 11.5), and\nnpm 11.15.0 reads devEngines from the root package.json and hard-fails\nwith EBADDEVENGINES\n[…]\nad was a corepack auto-download mechanism, redundant now\nthat pnpm is provisioned via mise/corepack from the packageManager field.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(release): drop devEngines.packageManager that broke npm publish",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-06-13T09:04:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "48ab91f7fa268a9c15daa2d041fe30e31b6015bc",
"body": "We switched to pnpm in #170. Adding it to mise means devs don't have to\nmanually install it.\n\nMise could also eventually take over from corepack/nvm in CI. But that\nis not implemented here.\n\nEDIT: this change also required updating lerna, nx, and knip to support\npnpm v11's multi-doc lock file format\n[…]\n--------\n\nCo-authored-by: so0k <vincent.drl@gmail.com>\nCo-authored-by: Simon Heather <32168619+X-Guardian@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: add pnpm to mise (#266)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-06-13T08:01:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1578270b57ef6eebc75df74e96d5329f9603b277",
"body": "### Description\n\nGradle is missing from the `mise.toml` config and is required for the\nproject so should be added, pinned to the same version used in the\n`Dockerfile`\n\n### Checklist\n\n- [ ] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/\n[…]\nges\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: Add Gradle to Mise config (#271)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-06-13T07:04:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba407bbe4742ab2c6126114341b928d729347114",
"body": "### Description\n\nThe `test/edge-provider-bindings` directory needs adding to the test\npackage ESLint `ignores` config so that it is not linted, as these files\nare dynamically generated. This is an issue when running eslint on the\n`test` package locally, when the `edge-provider-bindings` have been\nge\n[…]\nges\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: ESLint ignore test edge-provider-bindings (#270)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-06-13T07:04:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "968c358b2c82f2ff5aa4cdb18b12fe9467129d6f",
"body": "Move SpecLedger specs, .agents commands/skills, .specledger steering, RFCs and planning docs to open-constructs/cdktn-planning. Drop the SpecLedger CLI from mise.toml (now provided locally via mise.local.toml).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: migrate planning artifacts to cdktn-planning [skip ci]",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-06-13T05:48:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "821e1cffcc1fa3973267a20b7af73197b7a3190b",
"body": "## Summary\n- Supersedes #262 by carrying forward the existing X-Guardian\n`generate-function-bindings` fix history and adding a minimal follow-up\nfix.\n- Preserves the original X-Guardian contribution commits in this branch\nhistory for author attribution, including `3e3741298 chore: fix\ngenerate-funct\n[…]\ndes #262.\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>\nCo-authored-by: Simon Heather <32168619+X-Guardian@users.noreply.github.com>\nCo-authored-by: so0k <vincent.drl@gmail.com>",
"is_bot": false,
"headline": "fix(tools): repair generate-function-bindings tool (#273)",
"author_name": "sakul-learning",
"author_login": "sakul-learning",
"committed_at": "2026-06-13T03:48:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aded64b0e28e1056bf8b9b818a0daa728be1cb94",
"body": null,
"is_bot": false,
"headline": "chore: Fix Verdaccio logging config (#272)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-06-13T00:26:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f19d34b4d64d09571b4789fd4a45b520da2827e2",
"body": "…b (#261)\n\nRefs #206 (GHCR-for-CI half; OCF Public ECR for the devcontainer is a\nfollow-up).\n\n## Why\n\nDocker Hub's anonymous pull throttling on GitHub's shared runner IP pool\nis causing intermittent container-init failures across CI (see the audit\nin #206). All ~27 `container:` references across 12 \n[…]\nb publishing and the `DOCKERHUB_*` secrets once\nconsumers have moved.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(gha): pull jsii-terraform CI image from GHCR instead of Docker Hu…",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-06-11T02:41:54Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "163cf3df117170c74a01598668b2e56e618a2e19",
"body": "We currently have `pipx:pipenv` in our mise tools. But that fails to\ninstall unless uv or pipx are already installed. The solution is to add\nuv to our mise tools so that dev environments without any existing\npython tooling can be bootstrapped.\n\n<!--\n\nUnless this is a very simple 1-line-of-code chang\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore: add uv to mise (#260)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-06-10T13:36:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "516046999da85ae5b158ba1d23ab1a1c7c81b586",
"body": "It's now generated by release-please so the formatting checks aren't\nrelevant.\nFixed failed checks on the generated release PRs",
"is_bot": false,
"headline": "fix(gha): Adding CHANGELOG.md to prettier ignore list (#258)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-06-10T03:46:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32d434c1f47453f8648b9ea5dfc481e07fce360d",
"body": "## Summary\n\nIntroduce a Terraform-compatible CLI feature/version validator that can\nbe reused by feature PRs whose support depends on both the selected CLI\nproduct and its version.\n\nThis adds:\n\n- `parseTerraformCliVersion()` to detect Terraform vs OpenTofu from the\nfirst line of plain `version` outp\n[…]\n `yarn lerna run --scope cdktn build`\n- [x] `yarn nx test cdktn --runInBand`\n\n---------\n\nCo-authored-by: Ubuntu <ubuntu@ip-172-31-46-48.ec2.internal>\nCo-authored-by: Jon Steinich <jsteinich@gmail.com>",
"is_bot": false,
"headline": "feat(cli): validate Terraform CLI feature versions (#237)",
"author_name": "sakul-learning",
"author_login": "sakul-learning",
"committed_at": "2026-06-10T03:30:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c17677dc27706a626dcf5f88baa2e323787a2cf6",
"body": "We currently run verdaccio by spawning an `npm run` process. But since\n`local-registry` is a JS file now (#202), we can just call verdaccio's\nJS API directly.\n\nSee\nhttps://github.com/open-constructs/cdk-terrain/pull/202#discussion_r3300645026\n\n<!--\n\nUnless this is a very simple 1-line-of-code change\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore(tests): run verdaccio in-process (#248)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-06-10T03:21:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d23da4e11bc93aa387abf35fbba1b628724190f0",
"body": "### Description\n\nMigrates the monorepo's package manager from Yarn (Classic / v1) to\npnpm. The version is pinned via `package.json#packageManager` and\nactivated through corepack, so there is no separately installed pnpm to\nkeep in sync. No runtime/library behaviour changes — this is build-,\nCI-, and\n[…]\nhat prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: Migrate package manager from yarn to pnpm (#170)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-06-10T01:43:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42c27d5b65c8473236c0cf784668e62a13c0559b",
"body": "### Description\n\nThe `dependency-pinner` tool is no longer used and should be deleted.\n\n### Checklist\n\n- [ ] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md#pull-requests-1)\n- [ ] I have run the linter on my code loc\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: Remove dependency-pinner tool (#250)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-06-08T14:50:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba408cf1623ed4e5cbd9df3fb4607c7e67754dd8",
"body": "…terrain (#256)\n\n### Description\n\nCurrently, the scheduled GitHub workflows run on all forked copies of\nthe repo and fail. This PR adds a condition so that they only run on the\n`open-constructs/cdk-terrain` repo.\n\n### Checklist\n\n- [x] I have updated the PR title to match [CDKTN's style\nguide](https:\n[…]\nges\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: Update scheduled workflows to only run on open-constructs/cdk-…",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-06-08T13:03:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "004818a5ee554f0276ea8f0718ce6ffb0e5037fe",
"body": "…n (#255)\n\n### Description\n\nFixes the changelog insertion position in release-please's standing\nrelease PR (observed in #254, where `## [0.23.4]` was injected **below**\n`## 0.23.3` instead of at the top).\n\n#### Root cause\n\nrelease-please's changelog updater finds where to insert a new entry\nwith thi\n[…]\nable\n\nhttps://claude.ai/code/session_0168ykjbd1W96iSBoQUEkSLE\n\n---\n_Generated by [Claude\nCode](https://claude.ai/code/session_0168ykjbd1W96iSBoQUEkSLE)_\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(release): add Changelog title for correct release-please insertio…",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-06-08T13:01:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0a9c9554f3936e95c1291a911d4b1cc59bf66644",
"body": "… examples (#244)\n\n### Description\n\nThe C#, Java, Java-gradle, and Python `*-documentation` examples are the\ncritical-path tail of the examples CI matrix — they finish at ~25–29 min\nwhile every other example is long done. Almost all of that time is\n`cdktn get` generating provider bindings, and it ru\n[…]\nhat prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore(gha): parallelize provider binding generation for documentation…",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-06-08T01:40:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d89558f568eff134969586a5cd572869d3910955",
"body": "### Description\n\nChange all `jsii` and `jsii-rosetta` pins from exact versions to\nfloating patch ranges (`~5.9.0`). This matches the same pattern that\n`jsii-rosetta` itself uses internally, ensuring our constraints are\nsatisfied by whatever `5.9.x` patch lands in the dependency tree.\n\nThis avoids ge\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: Update JSII version constraint (#245)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-06-08T01:33:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c759eec921d164ce171878ed50eeaee5b5c59749",
"body": "### Description\n\nThis PR adds\n[release-please](https://github.com/googleapis/release-please)\nautomation to manage versioning, changelog generation, git tags, and\nGitHub releases from [Conventional\nCommits](https://www.conventionalcommits.org/).\n\nThe setup is **additive** — release-please owns versio\n[…]\nMAINTAINERS_APP_PRIVATE_KEY`\nrepository secrets before this workflow can function. ✅\n\nhttps://claude.ai/code/session_0168ykjbd1W96iSBoQUEkSLE\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): add release-please automation for versioning (#243)",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-06-08T01:28:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "de67d9f3ec59f99d6e736e5c01fe365581a01c79",
"body": "… 1 directory with 7 updates (#235)\n\nBumps the github-actions-backward-compatible group with 7 updates in the\n/ directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` |\n`6.0.3` |\n|\n[docker/setup-buildx-action](https://github.com/do\n[…]\n3dd1ae542a27a899\">compare\nview</a></li>\n</ul>\n</details>\n<br />\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump the github-actions-backward-compatible group across…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-05T10:53:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b5ac018a03b6195d12da7631076b41e5b36ebaeb",
"body": "…480748a1af4 to afb73a62d26e41464e9254689e1fd6122ee683c1 (#236)\n\nBumps [nrwl/nx-set-shas](https://github.com/nrwl/nx-set-shas) from\n38457b511e60ee4e1da09255b658e480748a1af4 to\nafb73a62d26e41464e9254689e1fd6122ee683c1.\n<details>\n<summary>Commits</summary>\n<ul>\n<li>See full diff in <a\nhref=\"https://gi\n[…]\nnless you reopen the\nPR or upgrade to it yourself)\n\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump nrwl/nx-set-shas from 38457b511e60ee4e1da09255b658e…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-05T10:52:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c27aa7f3f58213669b85f0e71ae4173d8fe625ef",
"body": "## 0.23.3\n\n### chore\n\n- chore(gha): run integration tests on Depot runners\n[\\#238](https://github.com/open-constructs/cdk-terrain/pull/238)\n- chore(deps): bump typescript to 5.9.3 across the repo\n[\\#231](https://github.com/open-constructs/cdk-terrain/pull/231)\n- chore: Upgrade jsii\n[\\#223](https://g\n[…]\nc() failures via toString()\n[\\#207](https://github.com/open-constructs/cdk-terrain/pull/207)\n\n---------\n\nCo-authored-by: so0k <vincent.drl@gmail.com>\nCo-authored-by: sakul-learning <lucas@sheesh.host>",
"is_bot": false,
"headline": "chore: prepare v0.23.3 release (#240)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-06-05T08:28:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "54dcd480d1c54d09f378fadd648af6b429b5f855",
"body": "## Summary\n\n- Add `max-parallel` to the integration-test matrix jobs that did not\nhave it yet.\n- Leave the existing regular integration-test `max-parallel: 30`\nunchanged.\n- This is intentionally limited to missing matrix throttles; it does not\nchange the existing integration workflow cap pending mai\n[…]\n 10, 'windows_provider': 10}\ninitial_wave_after_change= {'examples': 20, 'linux_integration': 30, 'linux_provider': 10, 'windows_provider': 10} total= 70\n```\n\nAlso ran `git diff --check` successfully.",
"is_bot": false,
"headline": "chore(gha): cap missing integration matrix parallelism (#239)",
"author_name": "sakul-learning",
"author_login": "sakul-learning",
"committed_at": "2026-06-05T04:03:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "82c587cb35d25cd1b07c73d5bd7bd41a0c171e50",
"body": "## Summary\n- remove the failing `Export CI/CD Traces to Scout` workflow and\n`otel-export` job",
"is_bot": false,
"headline": "chore(gha): remove Scout trace export workflow (#241)",
"author_name": "sakul-learning",
"author_login": "sakul-learning",
"committed_at": "2026-06-05T04:01:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0af528c41027ba198031bf1f3d7e9b68acb6bb84",
"body": "Releases broke in #212. The Python release job was trying to use .nvmrc,\nbut we never checked out the repo. The npm release job was failing due\nto https://github.com/actions/runner-images/issues/13883. Upgrading Node\nfixes that.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please creat\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore: fix releases (#242)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-06-05T03:02:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4f1a6742526811167930cb3eaeddf5ccb51371e6",
"body": null,
"is_bot": false,
"headline": "chore(gha): run integration tests on Depot runners (#238)",
"author_name": "sakul-learning",
"author_login": "sakul-learning",
"committed_at": "2026-06-04T17:04:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb65834d3f70b9925ff42efe44169d05f3ee8d19",
"body": "### Description\n\nAligns every workspace package and example on TypeScript 5.9.3, and\nfixes the two `WebAssembly.instantiate` call sites (`@cdktn/hcl-tools`\nand `@cdktn/hcl2json`) that fail to compile under newer TS.\n\n#### Why \n\nThe version was drifting. `@cdktn/hcl-tools` declared `^5.7.3` while the\n[…]\nhat prove my fix is effective or that my\nfeature works if applicable\n- [ ] New and existing unit tests pass locally with my changes\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore(deps): bump typescript to 5.9.3 across the repo (#231)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-06-04T13:25:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7a77d3cbfcb5ff8fa781771c126d679f0e4c6ea2",
"body": "### Description\n\nPin the CI/dev Node.js version to a single source of truth (`.nvmrc`),\nso we stop relying on whatever Node ships in the\n`terraconstructs/jsii-terraform` container or the GitHub-hosted runner\nimage of the week.\n\n**What changed:**\n\n- Added `.nvmrc` containing `22.22.2` (matches the co\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: Pin node version to 22.22.2 via .nvmrc (#212)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-06-02T13:35:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42613ceb873ef87b84659c7cef473719ded1284e",
"body": "We were installing it via npx, which means its dependencies weren't\npinned. In the age of supply chain attacks, that's not great.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead mor\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore(tests): add verdaccio to package.json (#202)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-06-02T13:33:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9f7d29f3f00e5d92181e7644a2c3135f2f1f31eb",
"body": "Allow setting `CDKTN_DISABLE_CREATION_STACK` environment variable to\ndisable capturing stack traces when constructing IResolvables.\n\nCapturing stack traces is fairly slow in Node, so disabling them saves a\nlot of time when synthing large stacks.\n\n<!--\n\nUnless this is a very simple 1-line-of-code cha\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "feat(lib): allow disabling creation stacks (#215)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-06-01T13:11:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c65a093b4d7695223072f89d5b2f825d670b142",
"body": "Replace `json-stable-stringify` with `safe-stable-stringify`. The latter\nis ~2x faster in benchmarks.\n\nBenchmark (Node 20, realistic TF-JSON payloads):\n| payload | json-stable | safe-stable | speedup |\n|------------------------|-------------|-------------|---------|\n| 100 resources (1\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "feat: faster JSON stringify (#224)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-30T01:54:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "79958518fe6c88f7a1d9771a1f0f86601e6178f3",
"body": "The latest version of jsii adds provenance back to their releases.\nPinning to an older version breaks installs for any client that expects\nthe provenance to be present.\n\nSee https://github.com/aws/jsii-compiler/issues/2651\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a ne\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore: Upgrade jsii (#223)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-28T15:54:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9f238e3346b1c121556941c3956da0de5b72eb79",
"body": "Updated README to reflect new language support and migration guides.\n\n### Checklist\n\n- [x] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md#pull-requests-1)\n- [ ] I have run the linter on my code locally\n- [x] I have \n[…]\n- [x] My changes generate no new warnings\n- [] ~I have added tests that prove my fix is effective or that my\nfeature works if applicable~\n- [x] New and existing unit tests pass locally with my changes",
"is_bot": false,
"headline": "chore: Revise README links to documentation and language support (#221)",
"author_name": "so0k",
"author_login": "so0k",
"committed_at": "2026-05-28T11:32:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "de77d18cbac0a159a7145bbd8fe4d3bc10be3567",
"body": null,
"is_bot": false,
"headline": "chore: rewrite https://cdk.tf links (#197)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-28T01:51:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "178ea7fce602f66bdc94fb90221b7ff9a8ec55da",
"body": "### Description\n\nUpdated the example `help` files to match the current `cdktn init`\ntemplates. This removes some of the diff from #170 (yarn references)\n\nAlso:\n- Updated the nuget link to\nhttps://www.nuget.org/packages?q=Io.Cdktn.Providers and on the template\n- Updated the Maven link to https://mvnr\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: Update examples help files (#194)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-27T13:58:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c3b75737d15dd06c1213218e060746baa0120f8",
"body": "Verdaccio was introduced in 548aa63 so that tests could install the CLI\nfrom an npm registry, similar to how real users install it.\nUnfortunately, we didn't always kill it after we were done.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change y\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore(tests): Ensure we terminate Verdaccio (#199)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-26T17:13:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f312c9bcac8a4c6781d92c8b65c668b6174cd923",
"body": "…(#211)\n\n### Description\n\nThe CI is intermittently failing with 502 errors downloading Gradle for\nthe Java tests. Example:\nhttps://github.com/open-constructs/cdk-terrain/actions/runs/26368817116/job/77619233680#step:12:1157.\n\nTo reduce the occurrences of this, this PR adds gradle caching to the\nexam\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: Add gradle cache to the examples and integration CI workflows …",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-26T17:12:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5bf9902ec6cfad8a3d178b58c62b331aa953b68d",
"body": "### Description\n\nCurrently, if a label is added to a PR, i.e. `ci/skip-unit`,\n`ci/skip-examples` etc, the GitHub Actions check run will re-trigger,\nbut the current run will not be cancelled.\n\n### Fix\n\n- Adds a top-level `concurrency` block to `pr.yml` so adding or removing\na `ci/*` label on a PR can\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: Add PR workflow concurrency group and CI Label Filter job (#204)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-26T17:12:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d8e907fb7bf5cfae7b098f1dfcb021bef971ab63",
"body": "### Description\n\n`exec()` and `shell()` in `@cdktn/commons` already attach `.stderr` to a\nthrown Error on non-zero exit, but the message was a generic `non-zero\nexit code N` and the captured output was hard to surface at call sites.\nThis PR makes process failures self-describing without changing the\n[…]\nded tests that prove my fix is effective or that my\nfeature works if applicable\n- [x] New and existing unit tests pass locally with my changes\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "fix(lib): surface stderr/stdout on exec() failures via toString() (#207)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-26T17:12:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ddadf889d0c6530a2e85567a2761368b90a7b055",
"body": "Allow running Typescript integration tests without having to build Java,\nPython, Go, and .NET packages.\n\nFixes #200\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our pr\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore(tests): don't require other language builds (#201)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-26T17:12:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f3937e625993b9eaa1459a007c5fb3e4c8864200",
"body": "## 0.23.2\n\n### chore\n- chore: Update npm version to support OIDC trusted publishing\n[\\#205](https://github.com/open-constructs/cdk-terrain/pull/205)\n- chore: Fix publib running to use npx rather than yarn\n[\\#203](https://github.com/open-constructs/cdk-terrain/pull/203)\n- chore(tests): Add test for N\n[…]\n\n[\\#177](https://github.com/open-constructs/cdk-terrain/pull/177)\n\n### feat\n\n- feat(provider-generator): configurable import extensions\n[\\#151](https://github.com/open-constructs/cdk-terrain/pull/151)",
"is_bot": false,
"headline": "chore: prepare v0.23.2 release (#213)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-05-26T02:03:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e4e35845f1e0efcf64c88fde335ac17e2227a1e2",
"body": "Add a test that runs synth in Node without ts-node or any other\ntranspilation. This exercises both\nhttps://nodejs.org/api/typescript.html#type-stripping and ESM support.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first,\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore(tests): Add test for Node type stripping (#198)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-25T03:24:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "58e3a11f8d82f3b7673f7af4c9be652f4ef3cbdc",
"body": "### Description\n\nThe current version of npm that is bundled with Node version 22.22.0\nthat is included in the `terraconstructs/jsii-terraform` image does not\nsupport OIDC trusted publishing. We need to update the npm version in\nthe `release-npm` workflow job to version 11.5.0+.\n\n### References\n\n- ht\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: Update npm version to support OIDC trusted publishing (#205)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-24T12:13:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4dbd3010b06a843b9345d6fd29d06c21c270391b",
"body": "### Description\n\nThe `yarn publib-npm` command is failing with:\n\n```\nnpm error need auth This command requires you to be logged in to https://registry.yarnpkg.com\n```\n\nThis is because when `npm publish` runs inside `yarn run`, `yarn` sets\n`npm_config_registry=https://registry.yarnpkg.com` in the env\n[…]\nges\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: Fix publib running to use npx rather than yarn (#203)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-24T09:36:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "78652380ca9e7fd44778306767d1b9abe6ed649b",
"body": "### Description\n\nThe previous setup had the jest configuration duplicated across every\npackage, with `ts-jest` doing TypeScript transforms on every test run\nand `lerna run` orchestrating package-level scripts that didn't\nunderstand the dependency graph. That meant slow tests, repeated\nboilerplate wh\n[…]\nen a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>\nCo-authored-by: Jon Steinich <jsteinich@gmail.com>",
"is_bot": false,
"headline": "chore: migrate jest to @nx/jest plugin with swc-jest (#160)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-24T00:47:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9355bf54097825c70f47a4903eedd1388f6c1cf1",
"body": "### Description\n\nRemove mention of Enterprise Hashicorp support.\n\n### Checklist\n\n- [x] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md#pull-requests-1)\n- [x] I have run the linter on my code locally\n- [x] I have perf\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore: remove mention of Hashicorp support (#193)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-23T15:57:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fcf739255377150977ba72c99c28de25c993fe61",
"body": "<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our process in our contributing guide:\nhttps://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md\n\n-->\n\n### R\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "fix(cli): Fix input getting split between cdktn and Terraform (#191)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-05-23T15:57:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bf7afd97e48e584a9e3cc89158e5e7ebdbff3eea",
"body": "### Description\n\nNew release workflow failing as the permissions for id-token also need\nto exist on the calling job.\n\n### Checklist\n\n- [x] I have updated the PR title to match [CDKTN's style\nguide](https://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md#pull-requests-1)\n- [x] I have\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "fix(gha): Need to grant permission on workflow call job (#196)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-05-23T14:59:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c9cb9764adcfd743f824bf66b60b358b1fad99d",
"body": "### Description\n\nEnables NPM OIDC publishing (already configured) so that we no longer\nneed to use a token.\n\nAlso fixes an issue introduced in #192 by making the edge provider\nbinding artifact name configurable.\n\n### Checklist\n\n- [x] I have updated the PR title to match [CDKTN's style\nguide](https:/\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore(gha): Enable NPM OIDC Publishing (#195)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-05-23T14:12:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c5855e688f0ad04ec697abef3455d4758393910",
"body": "### Description\n\nWe can't use npm OIDC trusted publishing today because the same packages\npublish from two different workflow files, and npm's trusted-publisher\nconfig matches on a single workflow filename. Consolidating into one\nfile unblocks OIDC and removes `NPM_TOKEN` from the loop.\n\n## Summary\n\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: consolidate release workflows for npm OIDC (#192)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-23T12:16:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "18311a2e4b301fdb734c3269c92f557cc27cc7fd",
"body": "### Description\n\nhttps://github.com/open-constructs/cdk-terrain/pull/158 introduced a bug\nas not all dependencies are bundled. See:\nhttps://github.com/open-constructs/cdk-terrain/blob/c86b27a58bbbf790a43c87067fa79638d2f01bd7/packages/cdktn-cli/build.ts#L65-L74\n\nThis manifests when not installing the\n[…]\n able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <32168619+X-Guardian@users.noreply.github.com>\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "fix(cli): restore non-bundled dependencies (#190)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-05-21T17:49:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0fec49804d9d81fdabc4eb364ab789f70dc7224b",
"body": "### Description\n\nCurrent release@next and release workflows are failing due to not\nfinding the `dist` artifact.\nAn example error:\n```Unable to download artifact(s): Artifact not found for name: dist-integration``` from https://github.com/open-constructs/cdk-terrain/actions/runs/26048945491/job/76581\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR until you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "fix: Configurable dist artifact name to fix release workflows (#189)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-05-20T09:58:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c86b27a58bbbf790a43c87067fa79638d2f01bd7",
"body": "### Description\n\n## Summary\n\nMigrates the `cdktn` package to the standard `src/` (sources) + `lib/`\n(build output) layout used by every other workspace package. Sources and\ncompile output were previously co-located in `lib/`, which caused stale\n`.js`/`.d.ts` artifacts to confuse knip after every loc\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore(lib): Move cdktn package to src/ and lib/ layout (#145)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-19T19:23:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "da67ea9e4395813cade9cd5316deaa0cfb2f963b",
"body": "### Description\n\n`pip install -r requirements.txt` in the `provider-add` and\n`provider-upgrade` Python integration tests has been flaking with\n`AssertionError: assert os.path.exists(pyc_path)` from pip's wheel\ninstaller, mid-install of the JSII-generated `cdktn` /\n`cdktn-provider-local` wheels.\nThe \n[…]\nges\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "fix(tests): pass --no-compile to pip in python integration tests (#188)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-18T17:18:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3dd711270eba35efdceda73f2b1190d64978194c",
"body": "…(#178)\n\n### Description\n\nFollow-on to `chore(gha): optimise examples CI pipeline` (fabb452ff).\nApplies the same patterns to `integration.yml` and\n`provider-integration.yml`, plus a couple of waste-reduction wins\nspecific to those workflows.\n\n**Integration tests (`integration.yml`)**\n\n- Matrix shape\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore(gha): optimise integration & provider-integration CI pipelines …",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-18T14:13:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "044e68090d12ddc8854e9f65809361e5e28d6966",
"body": "We added this as an option in #151 but neglected to pass it through\neverywhere in the CLI. The result is that `cdktn get` was not respecting\n`languageOptions.importExtension`.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing \n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "fix(cli): pass languageOptions to `get` (#179)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-18T14:12:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "772fbdc9eb9da5c54ce285be5c4fb67369735a8c",
"body": "Fixes #182\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our process in our contributing guide:\nhttps://github.com/open-constructs/cdk-terrain/blob/main/CONTRIBUTING.md\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore: fix references to cdktf in TS examples (#183)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-18T14:04:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "10cbb628d15d7b96a3b58b9e3fd69706a1e63e3f",
"body": "### Description\n\nThe `examples.yml` workflow runs 98 matrix jobs (49 examples × 2\nhclOutput values) and each one was independently doing `yarn install &&\nyarn build && yarn package` — identical, deterministic work duplicated\n98×.\n\nThis PR restructures the workflow so the heavy build happens once in \n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore(gha): optimise examples CI pipeline (#175)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-18T00:43:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4aff6cafa9d7bef1108b49cd6c23cedf4d8b506e",
"body": "https://github.com/open-constructs/cdk-terrain-docs is where the\ndocumentation lives now.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our process in our contributing \n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore: point to correct docs repo (#181)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-17T14:49:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e6d754d69095d791904d120149e1a719fe3dd9e",
"body": "Don't use the cdktf keyword when searching npm. Use cdktn instead.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our process in our contributing guide:\nhttps://github.c\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore: tell users to search for cdktn on npm (#185)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-17T13:20:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "24eb9bb93cfbdc7ef0bf2b22e3e884b850e37c75",
"body": "`https://cdk.tf/modules-and-providers` ->\n`https://cdktn.io/docs/concepts/providers`.\n\nSee #27\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more about our process in our contribu\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore: replace cdk.tf/modules-and-providers links (#184)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-17T13:20:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "be10ddfbe0bdfbbe8fac7f47054d7d557a9d4e1e",
"body": "This is presumably not that useful to us since we don't have any\nownership over the cdk.tf domain or the Vercel site behind it.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRead more \n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "chore: delete Vercel config for cdk.tf site (#180)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-17T13:20:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c2f1d870e27be68faa03e8656d131ad1b621254",
"body": "Semicolons aren't always necessary in JS/TS, but we do tend to emit them\nmost of the time. For consistency, we should always emit them.\n\n<!--\n\nUnless this is a very simple 1-line-of-code change, please create a new\nissue describing the change you're proposing first, then link to it from\nthis PR.\n\nRe\n[…]\n [x] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "fix(provider-generator): add missing semicolons (#177)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-17T12:58:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a384a73af488cec04b17e96ef5782e58a2fd2951",
"body": "### Description\n\nConsolidates per-test-suite PR workflows into a single `pr.yml`\norchestrator with tiered fail-fast gating, so quality and build failures\nstop heavy test runs from kicking off. Also folds in `dep-check` and\nrenames lint to a broader `quality` workflow.\n\n## Pipeline shape\n\n```\nquality\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: Consolidate PR CI into tiered orchestrator workflow (#143)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-16T16:15:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c921e4b15974b8e1bd8fa7d216166a09c8845ae4",
"body": "### Description\n\nThe `archiveSync` function in `packages/cdktn/lib/private/fs.ts` runs\nfrom `TerraformAsset._onSynthesize`, which executes inside the\nsynchronous constructs synth lifecycle, so it has to block until the zip\nis on disk. yazl only exposes a streaming API, so the previous\nimplementation\n[…]\nf this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->\n\n---------\n\nCo-authored-by: Simon Heather <simon.heather@yulife.com>",
"is_bot": false,
"headline": "chore: replace yazl with fflate (#148)",
"author_name": "Simon Heather",
"author_login": "X-Guardian",
"committed_at": "2026-05-16T16:01:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "324a264c1962d0af20d7dcec4ce377878ad1d320",
"body": "Currently, code generated by cdktn uses CommonJS for import semantics.\nNo file extensions are emitted, and the `/index` path is omitted. This\nis problematic as the JS/TS community has largely moved to ESM.\n\nFor consumers that want ESM, we add a setting that allows customizing\nthe extension for emitt\n[…]\n [ ] New and existing unit tests pass locally with my changes\n\n<!-- If this is still a work in progress, feel free to open a draft PR\nuntil you're able to check off all the items on the list above -->",
"is_bot": false,
"headline": "feat(provider-generator): configurable import extensions (#151)",
"author_name": "Gabe Gorelick",
"author_login": "gabegorelick",
"committed_at": "2026-05-16T16:00:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a146856a8a3d36d05f557a39ba8b9c4a4ae8f4be",
"body": "## 0.23.1\n\n### fix\n- fix(cli): forward stderr output in spawnInteractive\n[\\#173](https://github.com/open-constructs/cdk-terrain/pull/173)\n- fix(provider-generator): Fix code generation failures caused by case\ninsensitive name collisions\n[\\#165](https://github.com/open-constructs/cdk-terrain/pull/165\n[…]\ndate knip config\n[\\#144](https://github.com/open-constructs/cdk-terrain/pull/144)\n- chore: Refine provider-integration GitHub workflows\n[\\#142](https://github.com/open-constructs/cdk-terrain/pull/142)",
"is_bot": false,
"headline": "chore: prepare v0.23.1 release (#176)",
"author_name": "Jon Steinich",
"author_login": "jsteinich",
"committed_at": "2026-05-16T01:46:37Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 7,
"commits_last_year": 212,
"latest_release_at": "2026-07-03T00:40:12Z",
"latest_release_tag": "v0.23.4",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 29,
"days_since_latest_release": 20,
"mean_days_between_releases": 22.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 87,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "cdktn",
"exists": true,
"license": "MPL-2.0",
"keywords": [
"cdk",
"cdktf",
"cdktn",
"terraform"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/cdktn",
"is_deprecated": false,
"latest_version": "0.23.4",
"repository_url": "https://github.com/open-constructs/cdk-terrain",
"versions_count": 103,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 3,
"monthly_downloads": 98127,
"first_published_at": "2025-12-27T11:56:28.480000Z",
"latest_published_at": "2026-07-03T00:42:42.231000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 20
},
{
"name": "cdktn-cli",
"exists": true,
"license": "MPL-2.0",
"keywords": [
"cdk",
"cdktf",
"cdktn",
"terraform"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/cdktn-cli",
"is_deprecated": false,
"latest_version": "0.23.4",
"repository_url": "https://github.com/open-constructs/cdk-terrain",
"versions_count": 103,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 3,
"monthly_downloads": 74896,
"first_published_at": "2025-12-27T12:07:25.621000Z",
"latest_published_at": "2026-07-03T00:41:53.642000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 20
}
]
},
"popularity": {
"forks": 23,
"stars": 234,
"watchers": 6,
"fork_history": {
"days": [
{
"date": "2026-01-13",
"count": 1
},
{
"date": "2026-01-14",
"count": 1
},
{
"date": "2026-01-22",
"count": 1
},
{
"date": "2026-02-02",
"count": 1
},
{
"date": "2026-02-13",
"count": 1
},
{
"date": "2026-02-18",
"count": 1
},
{
"date": "2026-02-23",
"count": 1
},
{
"date": "2026-03-18",
"count": 1
},
{
"date": "2026-03-20",
"count": 1
},
{
"date": "2026-04-05",
"count": 1
},
{
"date": "2026-04-09",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-04-24",
"count": 1
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-05-13",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-06-03",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-19",
"count": 1
},
{
"date": "2026-07-08",
"count": 1
},
{
"date": "2026-07-11",
"count": 1
},
{
"date": "2026-07-15",
"count": 1
}
],
"complete": true,
"collected": 23,
"total_forks": 23
},
"star_history": null,
"open_issues_and_prs": 79
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example",
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"mise.toml"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"examples/typescript/aws-cloudfront-proxy/tsconfig.json",
"examples/typescript/aws-import/tsconfig.json",
"examples/typescript/aws-kubernetes/tsconfig.json",
"examples/typescript/aws-move/tsconfig.json",
"examples/typescript/aws-multiple-stacks/tsconfig.json",
"examples/typescript/aws-prebuilt/tsconfig.json",
"examples/typescript/azure-app-service/tsconfig.json",
"examples/typescript/azure-service-bus-queue-trigger/tsconfig.json",
"examples/typescript/azure/tsconfig.json",
"examples/typescript/backends/azurerm/tsconfig.json",
"examples/typescript/backends/cloud/tsconfig.json",
"examples/typescript/backends/gcs/tsconfig.json",
"examples/typescript/backends/remote/tsconfig.json",
"examples/typescript/backends/s3/tsconfig.json",
"examples/typescript/docker/tsconfig.json",
"examples/typescript/documentation/tsconfig.json",
"examples/typescript/google-cloudrun/tsconfig.json",
"examples/typescript/google/tsconfig.json",
"examples/typescript/kubernetes/tsconfig.json",
"examples/typescript/provisioner/tsconfig.json",
"examples/typescript/ucloud/tsconfig.json",
"examples/typescript/vault/tsconfig.json",
"packages/@cdktn/cli-core/templates/typescript/tsconfig.json",
"packages/@cdktn/cli-core/tsconfig.json",
"packages/@cdktn/commons/tsconfig.json",
"packages/@cdktn/hcl-tools/tsconfig.json",
"packages/@cdktn/hcl2cdk/tsconfig.json",
"packages/@cdktn/hcl2json/tsconfig.json",
"packages/@cdktn/provider-generator/tsconfig.json",
"packages/@cdktn/provider-schema/tsconfig.json",
"packages/cdktn-cli/tsconfig.json",
"test/tsconfig.json",
"tools/generate-function-bindings/tsconfig.json"
],
"toolchain_manifests": [
"examples/csharp/aws/MyTerraformStack.csproj",
"examples/csharp/azure/MyTerraformStack.csproj",
"examples/csharp/documentation/MyTerraformStack.csproj",
"examples/csharp/google/MyTerraformStack.csproj",
"examples/csharp/ucloud/MyTerraformStack.csproj",
"examples/go/aws/go.mod",
"examples/go/azure/go.mod",
"examples/go/docker/go.mod",
"examples/go/documentation/go.mod",
"examples/go/google-cloudrun/go.mod",
"examples/go/google/go.mod",
"examples/go/scaleway/go.mod",
"examples/go/ucloud/go.mod",
"examples/java/aws-gradle/build.gradle",
"examples/java/aws/pom.xml",
"examples/java/azure-gradle/build.gradle",
"examples/java/azure/pom.xml",
"examples/java/documentation-gradle/build.gradle",
"examples/java/documentation/pom.xml",
"examples/java/google-gradle/build.gradle",
"examples/java/google/pom.xml",
"examples/java/gradle-shared-module/build.gradle",
"examples/java/gradle-shared-module/common/build.gradle",
"examples/java/gradle-shared-module/module-a/build.gradle",
"examples/java/gradle-shared-module/module-b/build.gradle",
"examples/java/kubernetes-gradle/build.gradle",
"examples/java/kubernetes/pom.xml",
"examples/java/ucloud-gradle/build.gradle",
"examples/java/ucloud/pom.xml",
"packages/@cdktn/cli-core/templates/csharp/MyTerraformStack.csproj",
"packages/@cdktn/cli-core/templates/go/go.mod",
"packages/@cdktn/cli-core/templates/java/build.gradle",
"packages/@cdktn/hcl-tools/go.mod",
"packages/@cdktn/hcl2json/go.mod"
],
"largest_source_bytes": 47439,
"source_files_sampled": 897,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 6104
},
"dependencies": {
"manifests": [
"package.json",
"test/package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 3,
"malicious_count": 0,
"assessed_package": "npm:cdktn@0.23.4",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@types/node",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "22.20.1"
},
{
"name": "@cdktn/hcl-tools",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@cdktn/hcl2cdk",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@cdktn/hcl2json",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@inquirer/prompts",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "6.0.0"
},
{
"name": "ansi-escapes",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "4.3.2"
},
{
"name": "cli-cursor",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "3.1.0"
},
{
"name": "cli-spinners",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "2.9.2"
},
{
"name": "cli-table3",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "0.6.5"
},
{
"name": "constructs",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "10.6.0"
},
{
"name": "is-ci",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.0"
},
{
"name": "punycode",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "2.3.1"
},
{
"name": "yargs",
"manifest": "packages/cdktn-cli/package.json",
"ecosystem": "npm",
"version_constraint": "17.7.2"
},
{
"name": "fflate",
"manifest": "packages/cdktn/package.json",
"ecosystem": "npm",
"version_constraint": "0.8.2"
},
{
"name": "safe-stable-stringify",
"manifest": "packages/cdktn/package.json",
"ecosystem": "npm",
"version_constraint": "2.5.0"
},
{
"name": "semver",
"manifest": "packages/cdktn/package.json",
"ecosystem": "npm",
"version_constraint": "7.7.4"
},
{
"name": "cdktn",
"manifest": "tools/documentation-generation/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@babel/parser",
"manifest": "tools/generate-function-bindings/package.json",
"ecosystem": "npm",
"version_constraint": "7.27.2"
},
{
"name": "@cdktn/commons",
"manifest": "tools/generate-function-bindings/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 21,
"merged_prs": 191,
"open_issues": 58,
"closed_ratio": 0.463,
"closed_issues": 50,
"closed_unmerged_prs": 33
},
"bus_factor": 2,
"bot_contributors": 5,
"top_contributors": [
{
"type": "User",
"login": "DanielMSchmidt",
"commits": 2336,
"avatar_url": "https://avatars.githubusercontent.com/u/1337046?v=4"
},
{
"type": "User",
"login": "ansgarm",
"commits": 1423,
"avatar_url": "https://avatars.githubusercontent.com/u/1112056?v=4"
},
{
"type": "User",
"login": "skorfmann",
"commits": 1005,
"avatar_url": "https://avatars.githubusercontent.com/u/136789?v=4"
},
{
"type": "User",
"login": "mutahhir",
"commits": 749,
"avatar_url": "https://avatars.githubusercontent.com/u/573531?v=4"
},
{
"type": "User",
"login": "jsteinich",
"commits": 494,
"avatar_url": "https://avatars.githubusercontent.com/u/3868754?v=4"
},
{
"type": "User",
"login": "Maed223",
"commits": 219,
"avatar_url": "https://avatars.githubusercontent.com/u/72527044?v=4"
},
{
"type": "User",
"login": "laurapacilio",
"commits": 199,
"avatar_url": "https://avatars.githubusercontent.com/u/83350965?v=4"
},
{
"type": "User",
"login": "schersh",
"commits": 85,
"avatar_url": "https://avatars.githubusercontent.com/u/13408456?v=4"
},
{
"type": "User",
"login": "X-Guardian",
"commits": 77,
"avatar_url": "https://avatars.githubusercontent.com/u/32168619?v=4"
},
{
"type": "User",
"login": "so0k",
"commits": 49,
"avatar_url": "https://avatars.githubusercontent.com/u/1762599?v=4"
}
],
"contributors_sampled": 95,
"top_contributor_share": 0.331
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build.yml",
"cdktn-provider-docs-rollout.yml",
"docker.yml",
"examples.yml",
"integration.yml",
"lock.yml",
"pnpm-upgrade.yml",
"pr-copyright.yml",
"pr-lint.yml",
"pr-unit.yml",
"pr.yml",
"provider-integration.yml",
"quality.yml",
"registry-docs-pr-based.yml",
"release-please.yml",
"release-publish.yml",
"release.yml",
"remove-waiting-on-answer.yml",
"stale.yml",
"unit.yml",
"update-project-board-issue.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.mjs"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"Pipfile.lock",
"go.sum",
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 3,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 19 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 0,
"reason": "dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 8,
"reason": "dependency not pinned by hash detected -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 3,
"reason": "SAST tool is not run on all commits -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "42 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "90322f97388207362ad6a0a19a312353df213a73",
"ran_at": "2026-07-23T04:45:08Z",
"aggregate_score": 4.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-23T04:24:48Z",
"oldest_open_prs": [
{
"number": 62,
"created_at": "2026-03-20T09:18:38Z",
"last_comment_at": "2026-07-09T05:59:34Z",
"last_comment_author": "so0k"
},
{
"number": 153,
"created_at": "2026-05-04T03:17:07Z",
"last_comment_at": "2026-07-03T06:04:48Z",
"last_comment_author": "github-actions"
},
{
"number": 219,
"created_at": "2026-05-28T01:08:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 227,
"created_at": "2026-05-31T16:57:42Z",
"last_comment_at": "2026-06-02T19:57:51Z",
"last_comment_author": "gabegorelick"
},
{
"number": 228,
"created_at": "2026-05-31T23:09:44Z",
"last_comment_at": "2026-07-03T06:29:28Z",
"last_comment_author": "sakul-learning"
},
{
"number": 229,
"created_at": "2026-06-01T02:34:11Z",
"last_comment_at": "2026-06-14T02:21:37Z",
"last_comment_author": "so0k"
},
{
"number": 230,
"created_at": "2026-06-01T14:03:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 249,
"created_at": "2026-06-07T05:25:33Z",
"last_comment_at": "2026-06-07T06:12:46Z",
"last_comment_author": "sakul-learning"
},
{
"number": 251,
"created_at": "2026-06-07T19:51:15Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 252,
"created_at": "2026-06-07T20:19:55Z",
"last_comment_at": "2026-06-08T00:14:08Z",
"last_comment_author": "sakul-learning"
},
{
"number": 253,
"created_at": "2026-06-07T20:48:59Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 303,
"created_at": "2026-07-04T09:28:22Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 326,
"created_at": "2026-07-13T07:33:40Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 327,
"created_at": "2026-07-13T07:33:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 333,
"created_at": "2026-07-13T15:42:08Z",
"last_comment_at": "2026-07-18T06:31:45Z",
"last_comment_author": "sakul-learning"
},
{
"number": 338,
"created_at": "2026-07-18T22:26:55Z",
"last_comment_at": "2026-07-19T00:25:53Z",
"last_comment_author": "jsteinich"
},
{
"number": 339,
"created_at": "2026-07-19T03:15:10Z",
"last_comment_at": "2026-07-20T01:08:34Z",
"last_comment_author": "eduardomourar"
},
{
"number": 346,
"created_at": "2026-07-20T07:23:00Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 347,
"created_at": "2026-07-20T07:23:01Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 348,
"created_at": "2026-07-20T07:23:02Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-23T04:19:12Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 9,
"created_at": "2026-01-24T16:18:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 28,
"created_at": "2026-02-05T03:42:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 31,
"created_at": "2026-02-12T20:18:46Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 33,
"created_at": "2026-02-15T11:16:23Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 48,
"created_at": "2026-02-26T08:37:25Z",
"last_comment_at": "2026-03-01T10:29:23Z",
"last_comment_author": "krzema12"
},
{
"number": 56,
"created_at": "2026-03-15T18:29:36Z",
"last_comment_at": "2026-06-10T08:14:11Z",
"last_comment_author": "so0k"
},
{
"number": 58,
"created_at": "2026-03-16T20:06:30Z",
"last_comment_at": "2026-06-30T17:52:37Z",
"last_comment_author": "vincenthsh"
},
{
"number": 66,
"created_at": "2026-03-23T02:25:30Z",
"last_comment_at": "2026-06-10T08:15:25Z",
"last_comment_author": "so0k"
},
{
"number": 72,
"created_at": "2026-03-24T00:16:16Z",
"last_comment_at": "2026-04-04T14:38:36Z",
"last_comment_author": "jsteinich"
},
{
"number": 78,
"created_at": "2026-03-28T17:13:28Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 79,
"created_at": "2026-03-30T04:07:53Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 85,
"created_at": "2026-04-01T16:39:34Z",
"last_comment_at": "2026-06-08T17:50:16Z",
"last_comment_author": "gabegorelick"
},
{
"number": 92,
"created_at": "2026-04-07T10:11:57Z",
"last_comment_at": "2026-06-10T12:42:43Z",
"last_comment_author": "egonbraun"
},
{
"number": 96,
"created_at": "2026-04-10T19:56:10Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 106,
"created_at": "2026-04-14T02:19:17Z",
"last_comment_at": "2026-04-25T05:50:25Z",
"last_comment_author": "commiterate"
},
{
"number": 136,
"created_at": "2026-05-01T00:27:36Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 152,
"created_at": "2026-05-04T03:15:36Z",
"last_comment_at": "2026-05-04T14:30:41Z",
"last_comment_author": "gabegorelick"
},
{
"number": 168,
"created_at": "2026-05-08T14:53:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 206,
"created_at": "2026-05-24T11:56:13Z",
"last_comment_at": "2026-06-10T08:25:31Z",
"last_comment_author": "so0k"
},
{
"number": 208,
"created_at": "2026-05-25T03:21:10Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/open-constructs/cdk-terrain",
"host": "github.com",
"name": "cdk-terrain",
"owner": "open-constructs"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"security": 58,
"vitality": 90,
"community": 76,
"governance": 70,
"engineering": 86
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 90,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"commits_last_year": 212,
"human_commit_share": 0.96,
"days_since_last_push": 0,
"active_weeks_last_year": 29
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "29/52 weeks with commits",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 29
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "212 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 212
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 7,
"latest_release_tag": "v0.23.4",
"releases_from_tags": false,
"days_since_latest_release": 20,
"mean_days_between_releases": 22.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "7 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 7
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 20 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 20
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~22.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 22.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 76,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"forks": 23,
"stars": 234,
"watchers": 6,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "234 stars",
"points": 38.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 234
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "23 forks",
"points": 11.2,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 23
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "6 watchers",
"points": 3.9,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 6
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MPL-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MPL-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 87,
"inputs": {
"packages": [
"cdktn",
"cdktn-cli"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 173023
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "173,023 downloads/month across npm",
"points": 69.8,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 173023,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 70,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 95,
"top_contributor_share": 0.331
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 33% of commits",
"points": 15.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 33
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "95 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 95
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 19 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"merged_prs": 191,
"open_issues": 58,
"closed_issues": 50,
"issue_closed_ratio": 0.463,
"closed_unmerged_prs": 33
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "46% of issues closed",
"points": 21.6,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 46
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "191/224 decided PRs merged",
"points": 32.6,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 191,
"decided": 224
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"followers": 55,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "open-constructs",
"public_repos": 12,
"account_age_days": 925
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "55 followers of open-constructs",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 55,
"login": "open-constructs"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "12 public repos, account ~2 yr old",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 12
}
},
{
"code": "account_age_years",
"params": {
"years": 2
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"cdktn",
"cdktn-cli"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 20
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 20 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 20
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "103 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 103
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "21 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 21
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.mjs",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"cdk",
"cdktf",
"infrastructure-as-code",
"terraform",
"opentofu",
"terraform-cdk",
"cdk-terrain",
"cdktn"
],
"has_wiki": false,
"homepage": "http://cdktn.io",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://cdktn.io",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "8 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 8
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 58,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 47,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 19 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "dangerous workflow patterns detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "42 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:cdktn@0.23.4 runtime dependency closure — what installing the published package pulls in — 3 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:cdktn@0.23.4",
"assessed": 3
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 3,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 3,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 12
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "excellent",
"name": "AI Readiness",
"value": 86,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 6104
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "96 of 96 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 96,
"sampled": 96
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"Pipfile.lock",
"go.sum",
"pnpm-lock.yaml"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"mise.toml"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"examples/typescript/aws-cloudfront-proxy/tsconfig.json",
"examples/typescript/aws-import/tsconfig.json",
"examples/typescript/aws-kubernetes/tsconfig.json",
"examples/typescript/aws-move/tsconfig.json",
"examples/typescript/aws-multiple-stacks/tsconfig.json",
"examples/typescript/aws-prebuilt/tsconfig.json",
"examples/typescript/azure-app-service/tsconfig.json",
"examples/typescript/azure-service-bus-queue-trigger/tsconfig.json",
"examples/typescript/azure/tsconfig.json",
"examples/typescript/backends/azurerm/tsconfig.json",
"examples/typescript/backends/cloud/tsconfig.json",
"examples/typescript/backends/gcs/tsconfig.json",
"examples/typescript/backends/remote/tsconfig.json",
"examples/typescript/backends/s3/tsconfig.json",
"examples/typescript/docker/tsconfig.json",
"examples/typescript/documentation/tsconfig.json",
"examples/typescript/google-cloudrun/tsconfig.json",
"examples/typescript/google/tsconfig.json",
"examples/typescript/kubernetes/tsconfig.json",
"examples/typescript/provisioner/tsconfig.json",
"examples/typescript/ucloud/tsconfig.json",
"examples/typescript/vault/tsconfig.json",
"packages/@cdktn/cli-core/templates/typescript/tsconfig.json",
"packages/@cdktn/cli-core/tsconfig.json",
"packages/@cdktn/commons/tsconfig.json",
"packages/@cdktn/hcl-tools/tsconfig.json",
"packages/@cdktn/hcl2cdk/tsconfig.json",
"packages/@cdktn/hcl2json/tsconfig.json",
"packages/@cdktn/provider-generator/tsconfig.json",
"packages/@cdktn/provider-schema/tsconfig.json",
"packages/cdktn-cli/tsconfig.json",
"test/tsconfig.json",
"tools/generate-function-bindings/tsconfig.json"
],
"agent_commit_share": 0.14,
"toolchain_manifests": [
"examples/csharp/aws/MyTerraformStack.csproj",
"examples/csharp/azure/MyTerraformStack.csproj",
"examples/csharp/documentation/MyTerraformStack.csproj",
"examples/csharp/google/MyTerraformStack.csproj",
"examples/csharp/ucloud/MyTerraformStack.csproj",
"examples/go/aws/go.mod",
"examples/go/azure/go.mod",
"examples/go/docker/go.mod",
"examples/go/documentation/go.mod",
"examples/go/google-cloudrun/go.mod",
"examples/go/google/go.mod",
"examples/go/scaleway/go.mod",
"examples/go/ucloud/go.mod",
"examples/java/aws-gradle/build.gradle",
"examples/java/aws/pom.xml",
"examples/java/azure-gradle/build.gradle",
"examples/java/azure/pom.xml",
"examples/java/documentation-gradle/build.gradle",
"examples/java/documentation/pom.xml",
"examples/java/google-gradle/build.gradle",
"examples/java/google/pom.xml",
"examples/java/gradle-shared-module/build.gradle",
"examples/java/gradle-shared-module/common/build.gradle",
"examples/java/gradle-shared-module/module-a/build.gradle",
"examples/java/gradle-shared-module/module-b/build.gradle",
"examples/java/kubernetes-gradle/build.gradle",
"examples/java/kubernetes/pom.xml",
"examples/java/ucloud-gradle/build.gradle",
"examples/java/ucloud/pom.xml",
"packages/@cdktn/cli-core/templates/csharp/MyTerraformStack.csproj",
"packages/@cdktn/cli-core/templates/go/go.mod",
"packages/@cdktn/cli-core/templates/java/build.gradle",
"packages/@cdktn/hcl-tools/go.mod",
"packages/@cdktn/hcl2json/go.mod"
],
"dependency_bot_commit_share": 0.03
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "mise.toml",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "mise.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.mjs",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "examples/typescript/aws-cloudfront-proxy/tsconfig.json, examples/typescript/aws-import/tsconfig.json, examples/typescript/aws-kubernetes/tsconfig.json, examples/typescript/aws-move/tsconfig.json, examples/typescript/aws-multiple-stacks/tsconfig.json, examples/typescript/aws-prebuilt/tsconfig.json, examples/typescript/azure-app-service/tsconfig.json, examples/typescript/azure-service-bus-queue-trigger/tsconfig.json, examples/typescript/azure/tsconfig.json, examples/typescript/backends/azurerm/tsconfig.json, examples/typescript/backends/cloud/tsconfig.json, examples/typescript/backends/gcs/tsconfig.json, examples/typescript/backends/remote/tsconfig.json, examples/typescript/backends/s3/tsconfig.json, examples/typescript/docker/tsconfig.json, examples/typescript/documentation/tsconfig.json, examples/typescript/google-cloudrun/tsconfig.json, examples/typescript/google/tsconfig.json, examples/typescript/kubernetes/tsconfig.json, examples/typescript/provisioner/tsconfig.json, examples/typescript/ucloud/tsconfig.json, examples/typescript/vault/tsconfig.json, packages/@cdktn/cli-core/templates/typescript/tsconfig.json, packages/@cdktn/cli-core/tsconfig.json, packages/@cdktn/commons/tsconfig.json, packages/@cdktn/hcl-tools/tsconfig.json, packages/@cdktn/hcl2cdk/tsconfig.json, packages/@cdktn/hcl2json/tsconfig.json, packages/@cdktn/provider-generator/tsconfig.json, packages/@cdktn/provider-schema/tsconfig.json, packages/cdktn-cli/tsconfig.json, test/tsconfig.json, tools/generate-function-bindings/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples/typescript/aws-cloudfront-proxy/tsconfig.json, examples/typescript/aws-import/tsconfig.json, examples/typescript/aws-kubernetes/tsconfig.json, examples/typescript/aws-move/tsconfig.json, examples/typescript/aws-multiple-stacks/tsconfig.json, examples/typescript/aws-prebuilt/tsconfig.json, examples/typescript/azure-app-service/tsconfig.json, examples/typescript/azure-service-bus-queue-trigger/tsconfig.json, examples/typescript/azure/tsconfig.json, examples/typescript/backends/azurerm/tsconfig.json, examples/typescript/backends/cloud/tsconfig.json, examples/typescript/backends/gcs/tsconfig.json, examples/typescript/backends/remote/tsconfig.json, examples/typescript/backends/s3/tsconfig.json, examples/typescript/docker/tsconfig.json, examples/typescript/documentation/tsconfig.json, examples/typescript/google-cloudrun/tsconfig.json, examples/typescript/google/tsconfig.json, examples/typescript/kubernetes/tsconfig.json, examples/typescript/provisioner/tsconfig.json, examples/typescript/ucloud/tsconfig.json, examples/typescript/vault/tsconfig.json, packages/@cdktn/cli-core/templates/typescript/tsconfig.json, packages/@cdktn/cli-core/tsconfig.json, packages/@cdktn/commons/tsconfig.json, packages/@cdktn/hcl-tools/tsconfig.json, packages/@cdktn/hcl2cdk/tsconfig.json, packages/@cdktn/hcl2json/tsconfig.json, packages/@cdktn/provider-generator/tsconfig.json, packages/@cdktn/provider-schema/tsconfig.json, packages/cdktn-cli/tsconfig.json, test/tsconfig.json, tools/generate-function-bindings/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "14 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 14,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "3 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 47439,
"source_files_sampled": 897,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/897 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 897,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"example",
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example, examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example, examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch npm package '@tools/documentation-generation' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-23T04:45:37.701291Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/open-constructs/cdk-terrain.svg",
"full_name": "open-constructs/cdk-terrain",
"license_state": "standard",
"license_spdx": "MPL-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with open-constructs/cdk-terrain. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
