Public recordAt Risk
Software health reportschema 0.27.0 · metrics 2.3.1 · 2026-07-28 15:01 UTC
opentelemetry-php / context
[READONLY] Context implementation for OpenTelemetry PHP
opentelemetry-php/context holds a health index of 31 out of 100, placing it in the At Risk band. It scores highest on Sustainability & Governance (54/100) and lowest on Engineering Quality (17/100). It was last updated 125 days ago. 2 contributors account for most of its recent work.
31
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
31
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 37 is calibrated to 31 on the published index scale (record calibration 2026-08-02).
Ownership
OpenTelemetry PHP SIG extra repositoriesOrganization
38 followers82 public repossince Dec 2021
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| Packagist | open-telemetry/context | 1.5.0 | 3,046,284 | 31 | 282 days ago | contextopentelemetryotel |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
44
Development activity
19Critical
How it's scored
| 9.9/36 | Push recency — last push 125 days ago |
| 2.8/36 | Commit cadence — 4/52 weeks with commits |
| 6.3/18 | Commit volume — 4 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 4 |
| human_commit_share | 1 |
| days_since_last_push | 125 |
| active_weeks_last_year | 4 |
Release discipline
82Excellent
How it's scored
| 27/27 | Ships releases — 17 releases published |
| 27/36 | Release recency — latest release 125 days ago |
| 19.8/27 | Release cadence — a release every ~89.4 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 17 |
| latest_release_tag | 1.5.0 |
| releases_from_tags | no |
| days_since_latest_release | 125 |
| mean_days_between_releases | 89.4 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
40
Popularity & adoption
21At Risk
How it's scored
| 19.1/60 | Stars — 16 stars |
| 0/25 | Forks — 1 forks |
| 1.7/15 | Watchers — 3 watchers |
Inputs used
| forks | 1 |
| stars | 16 |
| watchers | 3 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
25At Risk
How it's scored
| 22.5/22.5 | README |
| 0/22.5 | License — no license file detected |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | no |
| readme_badges | — |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| readme_badge_services | — |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
92Excellent
How it's scored
| 80/80 | Monthly downloads — 3,046,284 downloads/month across packagist |
| 11.7/20 | Registry dependents — 56 packages depend on it |
Inputs used
| packages | open-telemetry/context |
| dependents | 56 |
| ecosystems | packagist |
| total_downloads | 43,844,877 |
| monthly_downloads | 3,046,284 |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
54
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 16.2/22.5 | Commit distribution — top contributor authored 28% of commits |
| 13.5/13.5 | Contributor breadth — 13 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 8 contributing companies or organizations |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 13 |
| top_contributor_share | 0.28 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/42 | Issue resolution — no issues or no data |
| 0/30 | PR acceptance — no decided pull requests or no data |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance, newcomer_pr_acceptance. Remaining weights renormalized.
Ownership & stewardship
64Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 11.4/25 | Owner reach — 38 followers of opentelemetry-php |
| 22.1/25 | Track record — 82 public repos, account ~4 yr old |
Inputs used
| followers | 38 |
| owner_type | Organization |
| is_verified | — |
| owner_login | opentelemetry-php |
| public_repos | 82 |
| account_age_days | 1,670 |
Package maintenance
91Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on packagist |
| 26/35 | Publish recency — latest publish 282 days ago |
| 20/20 | Version history — 31 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | open-telemetry/context |
| ecosystems | packagist |
| any_deprecated | no |
| min_days_since_publish | 282 |
Engineering Quality
Are baseline engineering and documentation practices in place?
17
Engineering practices
1Critical
How it's scored
| 0/24 | CI workflows |
| 0/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | no |
| has_tests | no |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
40Weak
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
26
Security posture
26At Risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 8 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — no data |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 0/2.5 | License — license file not detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — no data |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 2.6 |
Excluded from scoring (no data or not applicable): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
24
Agent context & guidance
40Weak
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 50 of 51 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.98 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 0/18 | One-command bootstrap |
| 0/22 | Automated tests |
| 0/11 | Lint / format config |
| 0/11 | Static type checking |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 51 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | no |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
Code legibility for models
55Moderate
How it's scored
| 0/45 | Type-checkable code — PHP without a type-check config |
| 55/55 | Manageable file sizes — 0/32 source files over 60KB |
Inputs used
| primary_language | PHP |
| largest_source_bytes | 4,301 |
| source_files_sampled | 32 |
| oversized_source_files | 0 |
Key facts
16GitHub stars
13contributors
4commits, last 12 months
125days since last push
17releases
2bus factor
0open issues
Packagistpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- No resolved dependencies carried a version and a supported ecosystem
More detail
OpenSSF Scorecard 2.6 / 10
2.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 8 contributing companies or organizations |
| n/a | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 0 | License | license file not detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | no dependencies found |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| n/a | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 1
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Packagist | symfony/polyfill-php82 | ^1.26 | composer.json |
All dependencies 2
Full resolved dependency set from the GitHub dependency graph: 1 direct and 1 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Packagist | symfony/polyfill-php82 | — | direct |
| Packagist | php | — | indirect |
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 82,
"has_wiki": false,
"homepage": null,
"languages": {
"C": 530,
"PHP": 43142
},
"pushed_at": "2026-03-25T14:04:38Z",
"created_at": "2022-05-24T16:12:06Z",
"owner_type": "Organization",
"updated_at": "2026-07-14T22:55:04Z",
"description": "[READONLY] Context implementation for OpenTelemetry PHP",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": null,
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "https://github.com/open-telemetry/opentelemetry-php",
"name": "OpenTelemetry PHP SIG extra repositories",
"type": "Organization",
"login": "opentelemetry-php",
"company": null,
"location": null,
"followers": 38,
"avatar_url": "https://avatars.githubusercontent.com/u/96889407?v=4",
"created_at": "2021-12-30T20:32:11Z",
"is_verified": null,
"public_repos": 82,
"account_age_days": 1670
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "1.5.0",
"kind": "minor",
"published_at": "2026-03-25T14:04:39Z"
},
{
"tag": "1.4.0",
"kind": "minor",
"published_at": "2025-09-19T00:06:56Z"
},
{
"tag": "1.3.1",
"kind": "patch",
"published_at": "2025-08-13T10:54:32Z"
},
{
"tag": "1.3.0",
"kind": "minor",
"published_at": "2025-08-06T22:53:34Z"
},
{
"tag": "1.2.1",
"kind": "patch",
"published_at": "2025-05-07T23:38:10Z"
},
{
"tag": "1.2.0",
"kind": "minor",
"published_at": "2025-05-05T05:45:15Z"
},
{
"tag": "1.1.0",
"kind": "minor",
"published_at": "2024-10-02T12:46:45Z"
},
{
"tag": "1.1.0beta1",
"kind": "other",
"published_at": "2024-08-26T23:31:39Z"
},
{
"tag": "1.0.2",
"kind": "patch",
"published_at": "2024-01-17T01:37:21Z"
},
{
"tag": "1.0.1",
"kind": "patch",
"published_at": "2024-01-10T13:53:30Z"
},
{
"tag": "1.0.0",
"kind": "major",
"published_at": "2023-10-18T23:23:42Z"
},
{
"tag": "1.0.0RC1",
"kind": "other",
"published_at": "2023-09-12T07:21:27Z"
},
{
"tag": "1.0.0beta6",
"kind": "other",
"published_at": "2023-09-04T23:08:26Z"
},
{
"tag": "1.0.0beta5",
"kind": "other",
"published_at": "2023-07-28T23:34:52Z"
},
{
"tag": "1.0.0beta4",
"kind": "other",
"published_at": "2023-06-27T22:39:57Z"
},
{
"tag": "1.0.0beta3",
"kind": "other",
"published_at": "2023-05-04T23:50:10Z"
},
{
"tag": "1.0.0beta2",
"kind": "other",
"published_at": "2023-02-27T09:37:02Z"
}
],
"recent_commits": [
{
"oid": "3c414b246e0dabb7d6145404e6a5e4536ca18d07",
"body": null,
"is_bot": false,
"headline": "Chore: fix docs url (#1730)",
"author_name": "Pieter Oliver",
"author_login": "pieterocp",
"committed_at": "2025-10-19T06:44:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4c4470b541ce72000d18c339cfee633e4c8e0cf",
"body": "* Added experimental response propagator\n\n* Added response propagator interface to Globals\n\n* changed to experimental_response_propagator\n\n* Update src/API/Globals.php\n\nCo-authored-by: Brett McBride <brett.a.mcbride@gmail.com>\n\n* Update src/Context/Propagation/ResponsePropagatorInterface.php\n\nCo-aut\n[…]\ned open-telemetry/sdk in open-telemetry/sdk-configuration\n\n---------\n\nCo-authored-by: Brett McBride <brett.a.mcbride@gmail.com>\nCo-authored-by: Tobias Bachert <github.dev.k9ps1@mail.tobiasbachert.com>",
"is_bot": false,
"headline": "feat: Add experimental response propagator interface (#1712)",
"author_name": "Jerry Leung",
"author_login": "jerrytfleung",
"committed_at": "2025-09-19T00:05:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "438f71812242db3f196fb4c717c6f92cbc819be6",
"body": "Make the scope id in error messages consistent between the detached-with-error and not-detached cases,\nby using spl_object_id($this) in the latter to match the former.",
"is_bot": false,
"headline": "update DebugScope error message (#1688)",
"author_name": "Brett McBride",
"author_login": "brettmc",
"committed_at": "2025-08-13T01:12:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d5d98f1d4311a55b8d07e3d4c06d2430b4e6efc",
"body": "* feat(carreirs): implement environment context getter setter\n\nCloses #1566\n\n* tests(carrier): add EnvironmentGetterSetter missing test\n\n* fix(carrier): modify keys empty env condition\n\n* test: use OpenTelemetry\\Tests\\TestState trait to handle environment\n\n* docs: add trace context and baggage environment carrier example\n\n* refactor: clean up baggage and trace context examples by removing unused span logic\n\n* test: fix Psalm static analysis failures",
"is_bot": false,
"headline": "feat(carreirs): implement environment context getter setter (#1668)",
"author_name": "Evan",
"author_login": "ycchuang99",
"committed_at": "2025-08-04T03:25:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f2715e2fb4dfd1954582584d1510a5955f6d0c9",
"body": "* fixing psalm complaints\nuse rector (and psalm) to add Override attributes, and add symfony polyfill to\nprovide Override in earlier php versions\n\n* fixing more psalm complaints\n\n* more fixes\n\n* adding stubs for deptrac\nthere are some things in our code that deptrac doesn't understand or are missing\n[…]\nzer.php\n\nCo-authored-by: Chris Lightfoot-Wild <github-clw@wild.me.uk>\n\n* remove override stub and use the polyfill from deptrac\n\n---------\n\nCo-authored-by: Chris Lightfoot-Wild <github-clw@wild.me.uk>",
"is_bot": false,
"headline": "fixing CI complaints (#1666)",
"author_name": "Brett McBride",
"author_login": "brettmc",
"committed_at": "2025-07-22T01:02:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1eb2b837ee9362db064a6b65d5ecce15a9f9f020",
"body": "Use dummy object instead of self references as detached-marker to avoid relying on gc cycle collection.\n\nResolves #1584.",
"is_bot": false,
"headline": "Allow immediate gc of `ContextStorageNode`s after `::detach()` (#1585)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2025-05-07T23:36:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f553042b951d3fedf47925852c380159dfca801",
"body": "* implement getAll function in TextMap Extract\n\n* refactor propagation interfaces to introduce ExtendedPropagationGetterInterface\n\n* Refactor getAll method in SanitizeCombinedHeadersPropagationGetter to streamline conditional logic for getter instance check",
"is_bot": false,
"headline": "implement getAll function in TextMap Extract (#1570)",
"author_name": "Evan",
"author_login": "ycchuang99",
"committed_at": "2025-05-02T01:57:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cba875ea1953435f78aec7f1d75afa87bdbf7f3",
"body": "php8.4 deprecates implicit null (now checked by phan)",
"is_bot": false,
"headline": "fix implicit null usage (#1362)",
"author_name": "Brett McBride",
"author_login": "brettmc",
"committed_at": "2024-08-21T00:29:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da3572b117ecd3804ccc0c77e0016a7087f47250",
"body": null,
"is_bot": false,
"headline": "[PHP 8.4] Fixes for implicit nullability deprecation (#1297)",
"author_name": "Andy Postnikov",
"author_login": "andypost",
"committed_at": "2024-04-29T05:24:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b590b50b225689338cb03a6458bd70c6b722a59",
"body": "* Improve fiber bound context storage\r\n\r\nNow works properly in fibers once initial context is attached.\r\n\r\n* Change `Context::storage()` return type to `ContextStorageInterface`\r\n\r\n`ExecutionContextAwareInterface` should not be relevant for end-users / it was mainly exposed for the FFI fiber handler\n[…]\n`: `Context::setStorage(new SwooleContextStorage(new ContextStorage()));`.\r\n\r\n* Add BC layer for execution context aware fiber storage\r\n\r\n* Fix BC layer inactive execution context detection for {main}",
"is_bot": false,
"headline": "Improve fiber bound context storage (#1270)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2024-04-08T23:11:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "56026f84dd955814c420c86e5bed0d7a816839af",
"body": "* bump php to 8.1, apply rector\r\n* readonly and typehints\r\n* suppress a dodgy readonly property conversion\r\n* remove some redundant readonly phpdocs\r\n* dont run workflows against 8.0\r\n* more readonly and typehints\r\n* phpdoc reformat\r\n* typehints\r\n* remove php81 polyfill\r\n* revert a rector BC breaking change, and disable that rector for ParentBased",
"is_bot": false,
"headline": "drop php 8.0 support (#1256)",
"author_name": "Brett McBride",
"author_login": "brettmc",
"committed_at": "2024-03-14T23:14:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c79e069b28494defe76143a4db968babb53ffed",
"body": null,
"is_bot": false,
"headline": "upgrade psalm to v5 (#1246)",
"author_name": "Brett McBride",
"author_login": "brettmc",
"committed_at": "2024-03-04T11:58:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4df4cf817dab1dff9747bb56d4f91bdfed9d9de",
"body": "* drop php 7.4 support\r\nupdate composer.json minimums, and run rector over the code to update what it can. changed some static analysis\r\nconfig to fix some rector-induced failures.\r\n\r\n* adding union typehints\r\n\r\n* reformat constructor property promotions\r\n\r\n* updating/removing phpdoc\r\n\r\n* suppress p\n[…]\ne comments\r\n\r\n* remove unreachable default match arms for protobuf serializer\r\n\r\n* adding more union types to vars\r\n\r\n* use weakmap directly\r\n\r\n* remove handling for not-supported WeakMap\r\n\r\n* spacing",
"is_bot": false,
"headline": "Drop PHP 7.4 support (#1244)",
"author_name": "Brett McBride",
"author_login": "brettmc",
"committed_at": "2024-03-04T01:21:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0530e5d1ec135a5d7e677420720f39e429ab0f69",
"body": "… (#1237)\n\n* fix: Allow OTEL_PHP_DEBUG_SCOPES_DISABLED env var + use of null-coalescing operator\r\n* refactor: Check order & env reset\r\n* refactor: Use class constant\r\n* fix: Respect order and value if it is set\r\n* style: Lint\r\n* tests: Falsey behavior",
"is_bot": false,
"headline": "feat: Allow OTEL_PHP_DEBUG_SCOPES_DISABLED as en environment variable…",
"author_name": "Alexandre Choura",
"author_login": "PROFeNoM",
"committed_at": "2024-02-29T23:04:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9d254a7c89885e63fd2fde54e31e81aaaf52b7c",
"body": "…utdown (#1209)\n\n* Handle DebugScope out-of-order destruction during final shutdown\r\n* Move debug traces from local scope storage to debug scope properties\r\n* Fix phpstan error",
"is_bot": false,
"headline": "Handle out-of-order destruction of Fibers/DebugScopes during final sh…",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2024-01-13T05:50:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40a1f8941b7e8578bf3780d61e445bca5e9fbe5a",
"body": null,
"is_bot": false,
"headline": "Add option to disable debug scopes (#1205)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2024-01-09T00:33:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99f3d54fa9f9ff67421774feeef5e5b1f209ea21",
"body": "Co-authored-by: RoBorg <roborg@gmail.com>",
"is_bot": false,
"headline": "Add 'Contributing' message (#1108)",
"author_name": "Greg Pinnington",
"author_login": "stickeegreg",
"committed_at": "2023-09-05T03:38:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1625377968ad58b1576bd80ae50bc75e27360fee",
"body": "Whilst investigating upgrading to psalm 5, I notice that it generates a lot of new complaints. This fixes the ones that looked legit and\r\nrequire an API change, or were trivial. Does not upgrade to psalm 5 yet, though. That's a bigger job for another day.",
"is_bot": false,
"headline": "fixing some psalm 5 complaints (#1110)",
"author_name": "Brett McBride",
"author_login": "brettmc",
"committed_at": "2023-09-04T22:56:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae71d1ff37ce366794398e82e53bc4c982be4dcc",
"body": "They aren't _truly_ safe on NTS builds either, as the functions used\r\nare only expected to be set at certain times of the lifecycle, but in\r\npractice it's safe enough on NTS.\r\n\r\nHowever, for ZTS, these APIs are not safe to call at runtime at all.",
"is_bot": false,
"headline": "fix: fiber observers by FFI are not safe on ZTS (#1090)",
"author_name": "Levi Morrison",
"author_login": "morrisonlevi",
"committed_at": "2023-07-25T23:47:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69ba6a9d5b300aca14d252f30b7c6eca2fa78ec1",
"body": "* adding badges to the various readme files to make more obvious the current versions\r\n* list all packages and versions in main readme\r\n* remove old README documentation (excluding development-specific), and direct users to opentelemetry.io\r\n* link to opentelemetry.io where possible in package readme\r\n* adding a badge to link to releases\r\nreleases are not easy to find, since they exist only in the subtree split repository",
"is_bot": false,
"headline": "readme badges and cleanup (#1053)",
"author_name": "Brett McBride",
"author_login": "brettmc",
"committed_at": "2023-06-26T11:10:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "890040efbaa0f981e4245a2d0d17489a020e51cd",
"body": null,
"is_bot": false,
"headline": "adding support info to composer.json files (#1054)",
"author_name": "Brett McBride",
"author_login": "brettmc",
"committed_at": "2023-06-26T10:57:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "753ed70d19722019082e04c1b28118739cfc72dd",
"body": "TC review suggests that DETACHED and INACTIVE responses need clarification",
"is_bot": false,
"headline": "improve documented scope return values (#1025)",
"author_name": "Brett McBride",
"author_login": "brettmc",
"committed_at": "2023-06-07T11:49:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfb5feb6dfa819594657f588c2998bc48eff3c00",
"body": null,
"is_bot": false,
"headline": "Add branch aliases (#988)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2023-05-02T22:59:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31814464bb54e62e39e79729bbe6b1fd82324897",
"body": "This allows custom storage (eg for Swoole) to be used.",
"is_bot": false,
"headline": "Remove internal tag from Context::setStorage (#867)",
"author_name": "Marcos Passos",
"author_login": "marcospassos",
"committed_at": "2022-11-25T20:26:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d48175bbfdc35830e8c594145ed65ba9dc571693",
"body": null,
"is_bot": false,
"headline": "Improve `open-telemetry/context` documentation (#830)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2022-09-23T18:15:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e3b693c495dc5ff010f7dbf25970b27da380c24",
"body": "* Add missing autoload entry\r\n* Fix fiber tests\r\n* Trigger error if fiber support cannot be loaded",
"is_bot": false,
"headline": "Fix fiber support not loaded in `open-telemetry/context` (#829)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2022-09-19T23:31:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44d7b512214872131c86578c1bc12e659deb511a",
"body": "* Add `ContextKeyInterface`\r\n* Add `ContextInterface`\r\n* Combine `SpanBuilderInterface::setParent()` and `::setNoParent()`\r\n* Remove `NullPropagator`\r\n* Fix `Context::with()` typehint\r\n* Remove `Context::withContextValue()` suggestion",
"is_bot": false,
"headline": " Add interfaces for `Context` and `ContextKey` (#820)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2022-09-18T23:40:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00c4299a02dc1f71ddddf77b93c1bf9f6d810860",
"body": "* Use array instead of recursion in `Context`\r\n\r\n* Move span and baggage context key to context package\r\n\r\n* Add additional context tests",
"is_bot": false,
"headline": "Use array lookup instead of recursion in `Context` (#821)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2022-09-14T12:36:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc0a6d6e478312ff97a40f581476aa04f33f4520",
"body": "* Add debug scope to warn on incorrect scope usage\r\n\r\n* Enable assertions in unit tests",
"is_bot": false,
"headline": "Add debug scope to warn on incorrect scope usage (#823)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2022-09-13T02:34:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "737712dd54d449a4c9edd5269508f0effa77084f",
"body": "Removes ScopeBound... classes to reduce the API surface.\r\n\r\n- ScopeBoundCallable: Was intended for event loops. Event loop decorators should instead implement this in a way that fits the specific loop API the best with regard to avoiding unnecessary references to arguments and error handling.\r\n(The \n[…]\n of the initial promise.\r\n(I'm not sure how useful promise/future support is in general, there are scenarios where we cannot preserve the context association, e.g. when extracting/awaiting the value.)",
"is_bot": false,
"headline": "Remove scope bound example implementations (#819)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2022-09-10T03:26:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b6a5045293acc16babf0b7f881018260aca7b17c",
"body": "* gitsplit exporters\r\n* gitsplit swoole context",
"is_bot": false,
"headline": "gitsplit contrib components (#804)",
"author_name": "Brett McBride",
"author_login": "brettmc",
"committed_at": "2022-09-06T12:51:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "197c260146650d426061cfa95558177cb92861dc",
"body": "…l-php82 (#768)",
"is_bot": false,
"headline": "Add symfony/polyfill-php80 + symfony/polyfill-php81 + symfony/polyfil…",
"author_name": "Timo Michna",
"author_login": "tidal",
"committed_at": "2022-07-17T10:43:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1b72de7a26abc448111f6568c6e3ecbf0db532f",
"body": null,
"is_bot": false,
"headline": "Refactor Context (#746)",
"author_name": "Timo Michna",
"author_login": "tidal",
"committed_at": "2022-07-02T18:52:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ca29ce9260b1e53d7bc8466143d8bd8d63701e0",
"body": "* Add rector Code Quality rule\r\n\r\n* Apply rector Code Quality rule",
"is_bot": false,
"headline": "Apply rector Code Quality rules (#743)",
"author_name": "Timo Michna",
"author_login": "tidal",
"committed_at": "2022-07-02T16:48:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b8127db76305b084386cabd12fe18646b41851a",
"body": "* Add rector as dev dependency\r\n\r\n* Add rector config\r\n\r\n* Add rector make targets\r\n\r\n* Add intl extension to dev image to support rector\r\n\r\n* Add rector make targets\r\n\r\n* Apply rector PHP_74 rules\r\n\r\n* Fix CS\r\n\r\n* Make Phan happy",
"is_bot": false,
"headline": "Add Rector and PHP 7.4 rules (#739)",
"author_name": "Timo Michna",
"author_login": "tidal",
"committed_at": "2022-06-30T18:59:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f08ffada10137f1a9e70ee74643bbb674167a1e6",
"body": "* Add instrumentation draft\r\n\r\n* Add NoopMeter\r\n\r\n* Add NullPropagator\r\n\r\n* Rework InstrumentationTrait\r\n\r\n* Fix CS\r\n\r\n* Fix PsrLog dependency\r\n\r\n* Make Phan happy\r\n\r\n* Fix CS",
"is_bot": false,
"headline": "Add basic InstrumentationInterface and InstrumentationTrait (#726)",
"author_name": "Timo Michna",
"author_login": "tidal",
"committed_at": "2022-06-24T08:54:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b4fa3935888d78de6dcdb39b0a1b2b79008a957",
"body": "* Remove `Context::withValue()`\r\n\r\nCreates a hidden `Scope` when called without `$parent`.\r\n\r\n* Remove `Context::detach(Scope)`\r\n\r\n* Remove static `Context::attach()`\r\n\r\n* Add missing typehints\r\n\r\n* Use loop instead of recursion\r\n\r\n* Fix `MultiTextMapPropagator::extract()` clearing context\r\n\r\n* Fix \n[…]\ng.\r\n\r\n* Fix psalm\r\n\r\n* Fix cannot mock final class `Context`\r\n\r\nRevert after introducing ContextInterface?\r\n\r\n* Apply feedback and remove obsolete parentheses\r\n\r\n* Use psalm-suppress instead of assert",
"is_bot": false,
"headline": "Cleanup/fix context package (#711)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2022-06-16T12:17:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9fb16bb90be995b864000b1a38834cb150482444",
"body": "Attempts to fix the W3C test service by updating usage patterns to\r\nmatch the refactorings and functional changes that have been applied\r\nsince it was last updated.",
"is_bot": false,
"headline": "Fix W3C test service (#686)",
"author_name": "Yukti",
"author_login": "yuktea",
"committed_at": "2022-06-15T12:25:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "735de3b1ed4952d0f90c405d08ffbbf3945c302c",
"body": "* Fix package name\r\n\r\n* Add composer config for jaeger thrift\r\n\r\n* Fix autoload path\r\n\r\n* Add dependency on generated packages\r\n\r\n* Add gitsplit config\r\n\r\n* Add gitsplit action\r\n\r\n* Add make target for gitsplit",
"is_bot": false,
"headline": "Add initial setup for splitting composer packages (#682)",
"author_name": "Timo Michna",
"author_login": "tidal",
"committed_at": "2022-05-24T16:58:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faad8601ec7cfa084ecfde22643efbcd4a50d1ea",
"body": "* Remove implicit root scope\r\n\r\n* Provide access to active scope and context of scope\r\n\r\n* Add local storage to scope\r\n\r\n* Trigger fiber error only when crossing fiber boundaries\r\n\r\n* Split ContextStorage into two interfaces\r\n\r\n* Add swoole context storage\r\n\r\nImplementation currently incompatible wi\n[…]\norage test coverage\r\n\r\nAdds tests for newly added features and fixes covers annotations.\r\n\r\n* Apply feedback\r\n\r\n- move Swoole context storage to Contrib/Context/Swoole\r\n- use self instead of classname",
"is_bot": false,
"headline": "Support async php runtimes (#675)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2022-05-24T13:17:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7cb8fe4bdab1b0c7e2ae9586def6bef22edc8206",
"body": "* Rename protobuf make target to \"make protobuf\"\r\n\r\n* Move otel protobuf files to 'otel' subdirectory\r\n\r\n* Add composer/package-versions-deprecated as allowed plugin\r\n\r\n* Report uncovered files in dependency check\r\n\r\n* Move PrometheusExporter to contrib package\r\n\r\n* Add missing dependency checks\r\n\r\n* Fix API dependency\r\n\r\n* Add package specific composer files\r\n\r\n* Fix wording\r\n\r\n* Add use-statement for PrometheusExporter class",
"is_bot": false,
"headline": "Initial package-split setup (#531)",
"author_name": "Timo Michna",
"author_login": "tidal",
"committed_at": "2021-12-31T02:19:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "973bdf97923e86d8305fe482e0e8dfc9a01378f2",
"body": "* Relax fromConnectionString requirements\r\n\r\n* Remove contrib dependencies from exporter factory\r\n\r\n* Add SemConv to dependency check\r\n\r\n* Add SemConv as required CI check\r\n\r\n* Remove dependency from ZendObserverFiber on SDK\r\n\r\n* Fix syntax error\r\n\r\n* Fix style\r\n\r\n* Cast scheme to string to avoid nullable argument\r\n\r\n* Make up for removing false positive code coverage.\r\n\r\n* Fix CS\r\n\r\n* Fix assertions\r\n\r\n* Remove unused method",
"is_bot": false,
"headline": "Fix dependency violations in exporter factory (#525)",
"author_name": "Timo Michna",
"author_login": "tidal",
"committed_at": "2021-12-29T14:47:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebbec1fec3df63f4ceb5c2ff1251004e1190f004",
"body": "* Add tests for noop `SpanContext` propagation\r\n\r\n* Fix noop `SpanContext` propagation\r\n\r\n* Remove global context usage in `NoopSpanBuilder`\r\n\r\n* Make `Context` non-final until `ContextInterface` is introduced\r\n\r\nWorkaround for mocking failure on php8.1.",
"is_bot": false,
"headline": "Fix noop SpanContext propagation (#522)",
"author_name": "Tobias Bachert",
"author_login": "Nevay",
"committed_at": "2021-12-28T12:17:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b97770684ff93851905b0b941a4596dfc1662d0d",
"body": "* fixing fiber test crash\r\ninstead of serializing FFI into a const, stash it in a static as suggested by @nevay\r\n* update comment on FFI reference\r\n* review feedback\r\nmoving ffi+fiber code into a class, and protecting it behind a new env var\r\nreplacing class with a mock in ArrayAccessGetterSetterTest\r\n* review feedback\r\nputting back FFI::scope which is required for other SAPIs, and starting to document preloading",
"is_bot": false,
"headline": "fixing fiber test crash (#517)",
"author_name": "Brett McBride",
"author_login": "brettmc",
"committed_at": "2021-12-23T23:23:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cecb942546ed28fa6df073f47b76390463df3aa1",
"body": "* Add typed properties\r\n\r\n* Remove unused import",
"is_bot": false,
"headline": "Add typed properties (#503)",
"author_name": "Timo Michna",
"author_login": "tidal",
"committed_at": "2021-12-06T14:16:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55f0e2e53fb0e205917fad7ada934d5faaaf91e1",
"body": "* Move TraceContextPropagator to SDK\r\n\r\n* Move TraceContextPropagatorTest to SDK tests\r\n\r\n* Fix CS\r\n\r\n* Fix (wrong) Phan errors",
"is_bot": false,
"headline": "Move TraceContextPropagator to SDK (#470)",
"author_name": "Timo Michna",
"author_login": "tidal",
"committed_at": "2021-11-15T13:32:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9e88c4049eb442c49a54446796114500d0b6ded",
"body": null,
"is_bot": false,
"headline": "Move KeyedArrayAccessInterface to Context (#468)",
"author_name": "Timo Michna",
"author_login": "tidal",
"committed_at": "2021-11-13T15:28:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67d340ad22eb7a985162a1c3204ad2f1804c61c8",
"body": "…ontext switching (#456)\n\n* Add scope out-of-order detection and support for execution context switching\r\n\r\n* Remove Scope in favor of ScopeInterface\r\n\r\n* Add fiber support\r\n\r\n* Resolve/suppress phan/psalm/phpstan errors\r\n\r\nSuppresses errors related to not available classes Fiber/FFI in code that is written for php ^8.1.\r\n\r\n* Add missing test annotations",
"is_bot": false,
"headline": "Add context detach out-of-order detection and support for execution c…",
"author_name": "Tobias Bachert",
"author_login": null,
"committed_at": "2021-11-01T10:19:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "969d0f3c9cb2c928715ac241c79f6ec29efd7e1c",
"body": "* Move `Baggage` logic into the API namespace\r\n\r\nMake `TextMapPropagator` methods non-static\r\nFirst pass at adding `BaggagePropagator`\r\nCreate no-op and multiple text map propagator implementations\r\n\r\n* Move `Baggage` tests to API test namespace\r\n\r\nModernize `TraceContextPropagator`\r\n\r\n* More test c\n[…]\n\n* Properly encode/decode baggage values\r\n\r\n* Don't use PHP8 only method\r\n\r\n* Make CI happy\r\n\r\n* Expose helper method to get a composite propagator\r\n\r\n* Move field extraction logic into private method",
"is_bot": false,
"headline": "Baggage propagation (#437)",
"author_name": "George Dietrich",
"author_login": "Blacksmoke16",
"committed_at": "2021-10-06T18:39:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "edf7fd4d5a29e4fb9513ef76fbd6200f79398710",
"body": null,
"is_bot": false,
"headline": "Move Context related logic into the API (#436)",
"author_name": "George Dietrich",
"author_login": "Blacksmoke16",
"committed_at": "2021-10-03T16:43:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecf9d39f1ebf8840ad3a4fdb3e87d98f1ce25dfb",
"body": "* Create and move namespaces into `src/` directory\r\n\r\n* Update `composer.json`\r\n\r\nMove test helpers outside of `SDK` namespace into `Tests`\r\n\r\n* Follow PSR naming conventions for interfaces\r\n\r\n* Follow PSR naming conventions for abstract classes and traits\r\n\r\n* Do a pass on CI configs\r\n\r\n* Add examples directory to cs-fixer config\r\n\r\n* Fix some erroneously renamed type names",
"is_bot": false,
"headline": "Reorganize types (#434)",
"author_name": "George Dietrich",
"author_login": "Blacksmoke16",
"committed_at": "2021-10-03T10:32:46Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 17,
"commits_last_year": 4,
"latest_release_at": "2026-03-25T14:04:39Z",
"latest_release_tag": "1.5.0",
"releases_from_tags": false,
"days_since_last_push": 125,
"active_weeks_last_year": 4,
"days_since_latest_release": 125,
"mean_days_between_releases": 89.4
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "open-telemetry/context",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"Context",
"opentelemetry",
"otel"
],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/open-telemetry/context",
"is_deprecated": false,
"latest_version": "1.5.0",
"repository_url": "https://github.com/opentelemetry-php/context",
"versions_count": 31,
"total_downloads": 43844877,
"dependents_count": 56,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 3046284,
"first_published_at": null,
"latest_published_at": "2025-10-19T06:44:33Z",
"latest_version_yanked": null,
"days_since_latest_publish": 282
}
]
},
"popularity": {
"forks": 1,
"stars": 16,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2026-07-09",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 4301,
"source_files_sampled": 32,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 2,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [
{
"name": "symfony/polyfill-php82",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.26"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "symfony/polyfill-php82",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 2,
"direct_count": 1,
"indirect_count": 1
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "Nevay",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/22509671?v=4"
},
{
"type": "User",
"login": "brettmc",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/4978962?v=4"
},
{
"type": "User",
"login": "tidal",
"commits": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/57825?v=4"
},
{
"type": "User",
"login": "Blacksmoke16",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/12136995?v=4"
},
{
"type": "User",
"login": "ycchuang99",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/138915122?v=4"
},
{
"type": "User",
"login": "PROFeNoM",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/42672104?v=4"
},
{
"type": "User",
"login": "andypost",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/73713?v=4"
},
{
"type": "User",
"login": "stickeegreg",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/48593081?v=4"
},
{
"type": "User",
"login": "jerrytfleung",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/8791493?v=4"
},
{
"type": "User",
"login": "morrisonlevi",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/253316?v=4"
}
],
"contributors_sampled": 13,
"top_contributor_share": 0.28
},
"quality_signals": {
"has_ci": false,
"has_tests": false,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 8 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "3c414b246e0dabb7d6145404e6a5e4536ca18d07",
"ran_at": "2026-07-28T15:01:09Z",
"aggregate_score": 2.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/opentelemetry-php/context",
"host": "github.com",
"name": "context",
"owner": "opentelemetry-php"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": "The weighted overall 37 is calibrated to 31 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 37,
"calibrated": 31,
"calibration": "2026-08-02"
}
}
],
"value": 31,
"inputs": {
"security": 26,
"vitality": 44,
"community": 40,
"governance": 54,
"calibration": "2026-08-02",
"engineering": 17,
"ai_readiness": 24,
"weighted_overall_raw": 37
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 44,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 19,
"inputs": {
"commits_last_year": 4,
"human_commit_share": 1,
"days_since_last_push": 125,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 125 days ago",
"points": 9.9,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 125
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "4 commits in the last year",
"points": 6.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 4
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 82,
"inputs": {
"releases_count": 17,
"latest_release_tag": "1.5.0",
"releases_from_tags": false,
"days_since_latest_release": 125,
"mean_days_between_releases": 89.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "17 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 17
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 125 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 125
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~89.4 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 89.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "dormant",
"guards": [
"no_open_demand",
"recent_release"
],
"signals": [
"scorecard_unmaintained"
],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 0,
"unanswered_open_issues": 0,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 287,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 287 days, with nothing left unanswered; held at dormant by nothing open to answer, a release within the year",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_quiet",
"params": {
"days": 287
}
},
{
"code": "abandonment_guarded",
"params": {
"guards": "nothing open to answer, a release within the year"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 40,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 21,
"inputs": {
"forks": 1,
"stars": 16,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "16 stars",
"points": 19.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 16
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": true,
"has_license": false,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"packages": [
"open-telemetry/context"
],
"dependents": 56,
"ecosystems": "packagist",
"total_downloads": 43844877,
"monthly_downloads": 3046284
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,046,284 downloads/month across packagist",
"points": 80,
"status": "met",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3046284,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "56 packages depend on it",
"points": 11.7,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 56
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 54,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 13,
"top_contributor_share": 0.28
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 28% of commits",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 28
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "13 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 13
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 8 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance, Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance",
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"followers": 38,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "opentelemetry-php",
"public_repos": 82,
"account_age_days": 1670
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "38 followers of opentelemetry-php",
"points": 11.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 38,
"login": "opentelemetry-php"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "82 public repos, account ~4 yr old",
"points": 22.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 82
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 91,
"inputs": {
"packages": [
"open-telemetry/context"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 282
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 282 days ago",
"points": 26,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 282
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "31 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 31
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "critical",
"name": "Engineering Quality",
"value": 17,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "critical",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"has_ci": false,
"has_tests": false,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "weak",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 26,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 26,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 2.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 8 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status. 1 match(es) from contributors below the commit-weight threshold (fewer than 50 commits and under 10% of sampled commits) are recorded for review and do not affect the score.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
},
{
"code": "jurisdiction_below_threshold",
"params": {
"count": 1
}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [
{
"role": "contributor_organization",
"count": 1,
"country": "Russia"
}
],
"assessed_self_published_locations": 12
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match; 1 match(es) below the commit-weight threshold (<50 commits and <10% of commits), review-only",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
},
{
"code": "jurisdiction_below_threshold",
"params": {
"count": 1,
"share": 10,
"commits": 50
}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 24,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.98,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "50 of 51 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 50,
"sampled": 51
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "critical",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 51",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 51
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 4301,
"source_files_sampled": 32,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/32 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 32,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:packagist",
"weight": 6
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-28T15:01:18.590161Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/opentelemetry-php/context.svg",
"full_name": "opentelemetry-php/context",
"license_state": "absent",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.3.1, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Packagist.