Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-25 11:25 UTC
pgsty / pg_exporter
Advanced PostgreSQL & Pgbouncer Metrics Exporter for Prometheus
pgsty/pg_exporter holds a health index of 65 out of 100, placing it in the Moderate band. It scores highest on Vitality (82/100) and lowest on Sustainability & Governance (55/100). It was last updated 7 days ago. A single contributor accounts for most of its recent work.
65
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
65
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
PigstyOrganization
183 followers33 public repossince Jan 2024
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
82
Development activity
76Good
How it's scored
| 36/36 | Push recency — last push 7 days ago |
| 11.8/36 | Commit cadence — 17/52 weeks with commits |
| 18/18 | Commit volume — 115 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 115 |
| human_commit_share | 1 |
| days_since_last_push | 7 |
| active_weeks_last_year | 17 |
Release discipline
90Excellent
How it's scored
| 27/27 | Ships releases — 32 releases published |
| 36/36 | Release recency — latest release 7 days ago |
| 27/27 | Release cadence — a release every ~37.5 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 32 |
| latest_release_tag | v1.4.0 |
| releases_from_tags | no |
| days_since_latest_release | 7 |
| mean_days_between_releases | 37.5 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
56
Popularity & adoption
62Moderate
How it's scored
| 41.3/60 | Stars — 354 stars |
| 14.6/25 | Forks — 58 forks |
| 5.6/15 | Watchers — 11 watchers |
Inputs used
| forks | 58 |
| stars | 354 |
| watchers | 11 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
55
Maintainer resilience (bus factor)
34At risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 1.5/22.5 | Commit distribution — top contributor authored 93% of commits |
| 13.5/13.5 | Contributor breadth — 12 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 5 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 12 |
| top_contributor_share | 0.934 |
How it's scored
| 39.2/46.8 | Issue resolution — 84% of issues closed |
| 33.1/38.3 | PR acceptance — 32/37 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 32 |
| open_issues | 10 |
| closed_issues | 52 |
| issue_closed_ratio | 0.839 |
| closed_unmerged_prs | 5 |
Ownership & stewardship
62Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 16.3/25 | Owner reach — 183 followers of pgsty |
| 16.2/25 | Track record — 33 public repos, account ~2 yr old |
Inputs used
| followers | 183 |
| owner_type | Organization |
| is_verified | — |
| owner_login | pgsty |
| public_repos | 33 |
| account_age_days | 916 |
Engineering Quality
Are baseline engineering and documentation practices in place?
72
Engineering practices
60Moderate
How it's scored
| 24/24 | CI workflows — 3 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
90Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://pigsty.io/docs/pg_exporter |
| 10/10 | Repository description |
| 10/10 | Topics — 6 topics |
| 0/10 | Wiki |
Inputs used
| topics | postgres, prometheus, prometheus-exporter, pgbouncer, pg-exporter, monitoring |
| has_wiki | no |
| homepage | https://pigsty.io/docs/pg_exporter |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
58
Security posture
48At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 5 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4.8 |
Excluded from scoring (no data or not applicable): ci_tests. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 1 |
| affected_packages | 1 |
| assessed_packages | 30 |
| unassessed_packages | 0 |
| affected_by_severity | unknown 1 |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 30 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
65
Agent context & guidance
39At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 38.9/40 | Legible commit history — 73 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.73 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 10/10 | Demonstrated agent practice — 12 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0.12 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/40 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 30,968 |
| source_files_sampled | 40 |
| oversized_source_files | 0 |
Key facts
354GitHub stars
12contributors
115commits, last 12 months
7days since last push
32releases
1bus factor
10open issues
Gopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 58 ⇿
0Stars
58Forks
23Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 1Minor 9Patch 13
Each point covers 6 days.
OpenSSF Scorecard 4.8 / 10
4.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 5 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Direct dependencies 7
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/alecthomas/kingpin/v2 | v2.4.0 | go.mod |
| Go | github.com/lib/pq | v1.12.3 | go.mod |
| Go | github.com/prometheus/client_golang | v1.23.2 | go.mod |
| Go | github.com/prometheus/client_model | v0.6.2 | go.mod |
| Go | github.com/prometheus/common | v0.70.0 | go.mod |
| Go | github.com/prometheus/exporter-toolkit | v0.17.1 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
All dependencies 30
Full resolved dependency set from the GitHub dependency graph: 7 direct and 23 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/alecthomas/kingpin/v2 | v2.4.0 | direct |
| Go | github.com/lib/pq | v1.12.3 | direct |
| Go | github.com/prometheus/client_golang | v1.23.2 | direct |
| Go | github.com/prometheus/client_model | v0.6.2 | direct |
| Go | github.com/prometheus/common | v0.70.0 | direct |
| Go | github.com/prometheus/exporter-toolkit | v0.17.1 | direct |
| Go | gopkg.in/yaml.v3 | v3.0.1 | direct |
| Go | github.com/alecthomas/units | v0.0.0-20240927000941-0f3dac36c52b | indirect |
| Go | github.com/beorn7/perks | v1.0.1 | indirect |
| Go | github.com/cespare/xxhash/v2 | v2.3.0 | indirect |
| Go | github.com/coreos/go-systemd/v22 | v22.7.0 | indirect |
| Go | github.com/golang-jwt/jwt/v5 | v5.3.1 | indirect |
| Go | github.com/google/uuid | v1.6.0 | indirect |
| Go | github.com/jpillora/backoff | v1.0.0 | indirect |
| Go | github.com/klauspost/compress | v1.18.6 | indirect |
| Go | github.com/mdlayher/socket | v0.6.1 | indirect |
| Go | github.com/mdlayher/vsock | v1.3.0 | indirect |
| Go | github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | indirect |
| Go | github.com/mwitkow/go-conntrack | v0.0.0-20190716064945-2f068394615f | indirect |
| Go | github.com/prometheus/procfs | v0.21.1 | indirect |
| Go | github.com/xhit/go-str2duration/v2 | v2.1.0 | indirect |
| Go | go.yaml.in/yaml/v2 | v2.4.4 | indirect |
| Go | golang.org/x/crypto | v0.54.0 | indirect |
| Go | golang.org/x/net | v0.57.0 | indirect |
| Go | golang.org/x/oauth2 | v0.36.0 | indirect |
| Go | golang.org/x/sync | v0.22.0 | indirect |
| Go | golang.org/x/sys | v0.47.0 | indirect |
| Go | golang.org/x/text | v0.40.0 | indirect |
| Go | golang.org/x/time | v0.15.0 | indirect |
| Go | google.golang.org/protobuf | v1.36.11 | indirect |
Dependency advisories 1
This repository publishes no package the index resolves, so its own dependency graph was assessed — 30 packages, which also include development and test pins that never ship: 1 carry known advisories, of which 0 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| golang.org/x/crypto | v0.54.0 | indirect | unknown | 1 | — |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"postgres",
"prometheus",
"prometheus-exporter",
"pgbouncer",
"pg-exporter",
"monitoring"
],
"is_fork": false,
"size_kb": 16726,
"has_wiki": false,
"homepage": "https://pigsty.io/docs/pg_exporter",
"languages": {
"Go": 226615,
"Shell": 21703,
"Makefile": 7647,
"Dockerfile": 1365
},
"pushed_at": "2026-07-18T02:38:14Z",
"created_at": "2019-12-06T08:17:23Z",
"owner_type": "Organization",
"updated_at": "2026-07-23T13:42:53Z",
"description": "Advanced PostgreSQL & Pgbouncer Metrics Exporter for Prometheus",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://pigsty.io",
"name": "Pigsty",
"type": "Organization",
"login": "pgsty",
"company": null,
"location": "Singapore",
"followers": 183,
"avatar_url": "https://avatars.githubusercontent.com/u/157279331?v=4",
"created_at": "2024-01-21T09:39:29Z",
"is_verified": null,
"public_repos": 33,
"account_age_days": 916
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-07-18T02:41:26Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-06-24T04:04:24Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2026-04-14T12:09:59Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2026-03-21T01:23:31Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-02-12T11:37:24Z"
},
{
"tag": "v1.1.2",
"kind": "patch",
"published_at": "2026-01-15T15:06:15Z"
},
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2025-12-30T16:03:31Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2025-12-15T06:09:58Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2025-11-20T09:19:38Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2025-08-14T05:12:49Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2025-07-17T01:15:40Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2025-05-06T15:43:42Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2025-04-26T15:12:49Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2025-03-29T04:33:55Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2025-02-14T07:40:25Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2024-12-29T09:00:02Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2024-08-13T11:41:28Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2024-01-26T09:26:17Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2023-10-18T04:54:49Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2022-04-27T23:27:37Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2022-03-08T10:48:00Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2021-07-12T08:09:02Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2021-02-01T03:12:06Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2020-12-04T09:27:21Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2020-10-29T08:47:32Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2020-03-21T11:10:25Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2020-02-20T07:12:29Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2020-01-09T17:30:28Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2020-01-08T13:10:42Z"
},
{
"tag": "v0.0.4",
"kind": "patch",
"published_at": "2019-12-20T09:22:44Z"
},
{
"tag": "v0.0.3",
"kind": "patch",
"published_at": "2019-12-13T16:03:23Z"
},
{
"tag": "v0.0.2",
"kind": "patch",
"published_at": "2019-12-09T12:43:23Z"
}
],
"recent_commits": [
{
"oid": "b79a3db66bbafc9563245933a538005e665b9b25",
"body": "Add a drift gate that regenerates pg_exporter.yml and legacy/pg_exporter.yml\nfrom their config fragments and fails on any difference; add a concurrency\ngroup so superseded runs are cancelled; drop the plain test run since the\nrace run executes the same suite. Tidy go.mod/go.sum so the existing\ntidy gate passes.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: verify generated configs, cancel stale runs, dedupe tests",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-17T15:27:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "20489c04aaf9ddd74a351abfb73ac509b5faea87",
"body": "The docker tooling consolidation dropped the GOPROXY/GOSUMDB build-arg\npassthrough the deleted docker/build.sh provided, so host proxy settings\nno longer reached the container build.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: forward GOPROXY to docker build",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-17T15:26:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ff39570fd16713225545e3f73893e8b720f9c16e",
"body": "GoReleaser strips the v prefix from {{.Version}}, so release binaries\nreported 1.4.0 while make and go builds report v1.4.0; inject v{{.Version}}\ninstead. Also sync the embedded rpm/deb descriptions with package/nfpm-*.yaml\n(Postgres 9.x - 19+, Pgbouncer 1.25+) and fix the truncated docs URL.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: align goreleaser version format and package metadata",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-17T15:26:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b84380051becce966ff21fb9d45e39230990ce80",
"body": "Histogram columns were detected with strings.EqualFold in collector.go but\nexact comparison in config.go and query.go. Usage is normalized to uppercase\nat parse time, so give Column a single IsHistogram predicate and use it\neverywhere, removing the case-insensitive compare from the row scan hot path.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: unify histogram detection via Column.IsHistogram",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-17T15:26:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "16b97b31598dba503be1c5eaeed696cb61af5de9",
"body": "ServeMux path-cleans incoming requests, so a pattern like //metrics or\n/a/../metrics registers fine but can never be matched: startup validation\npassed while every scrape silently fell through to the landing page. Reject\npaths that differ from their cleaned form (trailing-slash subtree patterns\nstay allowed), and HTML-escape the telemetry path interpolated into the\nlanding page as defense in depth.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: reject non-canonical telemetry path and escape landing page",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-17T15:26:31Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dd74186f5fb78d04ef56f4aceb06d80192ec62d8",
"body": "castHistogramFloat64 applied the column scale factor to every value type,\nwhile the scalar castFloat64 path deliberately leaves epoch timestamps and\nbooleans unscaled, so the same column yielded different values under GAUGE\nand HISTOGRAM usage. Align the histogram path with the scalar carve-outs\nand note the exemption in the design spec.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: exempt timestamps and booleans from histogram scale",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-17T15:26:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8899a373341a309b5dbc70e9345eca8ebeea6021",
"body": "Update Makefile VERSION, the Go fallback default, and the four nfpm\npackage specs; the Go default is now v-prefixed to match every build path.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump version to v1.4.0",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-17T15:26:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c702a9ac49ee0068537e0b11095cb4b8319255ce",
"body": "Point the prometheus system user's home at /var/lib/prometheus so libpq can\nfind ~/.pgpass (the directory itself is intentionally not created), and add\nthe postgres database name to the packaged default URL so libpq no longer\nfalls back to a database named after the OS user.\n\nFixes #105\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: set prometheus home and default database in packages",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-17T15:25:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a1ab4d56f32bb35eae6e183a7d50f95a08acc8fe",
"body": "Replace the per-session histogram reference collector with a two-metric\ntransaction age collector (open transaction age + idle-in-transaction age),\ninserted at 0450 with pg_lock/pg_lock_stat/pg_query renumbered to 0460-0480.\n\nConfig coverage tests are generalized to stop assuming specific collectors\nexist in the config directory; the reference-config pinning test is removed\nfor the same reason. Design spec bumped to v1.3 accordingly.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: replace pg_session with pg_xact_age collector",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-17T15:25:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e216bccb8bdc7338d7732634b7be5f8d7e9dcb54",
"body": null,
"is_bot": false,
"headline": "bump go to 1.26.5",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-16T23:49:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "795418f6b544f3684097ea9cb26d51926f8afb27",
"body": null,
"is_bot": false,
"headline": "chore: bump Go to 1.26.5",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-16T02:38:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bd80df1c5679b8e705efa1870e3ac357fc870dd",
"body": null,
"is_bot": false,
"headline": "feat: add snapshot histogram collectors",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-11T14:06:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c855dafd2ad923da1f899f262ed649e4c31bec8",
"body": null,
"is_bot": false,
"headline": "ci: add regular verification workflow",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-11T10:06:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28da792a4d454753b04a7facaae4d5578f10fca0",
"body": null,
"is_bot": false,
"headline": "fix: validate and isolate HTTP routes",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-11T10:06:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c51b0ba01efdb86e3d0b9fbf7caed11d057fb3d7",
"body": null,
"is_bot": false,
"headline": "fix: preserve explicit exporter connection target",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-11T10:06:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7097f2ddd83e3ea43cc1586c6c2cf0338c2529e8",
"body": null,
"is_bot": false,
"headline": "fix: close primary pool on fail-fast startup",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-11T10:04:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1597f75a3a4af7b1ccda72bd30d9ef6d3c66abc",
"body": null,
"is_bot": false,
"headline": "test: preserve last-known recovery role",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-11T10:03:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be1934006c7b1d85951b70641d28828544297485",
"body": null,
"is_bot": false,
"headline": "test: lock config directory fault isolation",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-11T10:03:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac8c85ff68e7d980fcdb2143ff7c105672c0fc4a",
"body": null,
"is_bot": false,
"headline": "chore: consolidate Docker build tooling",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-07-11T01:55:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2004cf2623ac58c8c9d71b788fea469ff262dfa9",
"body": null,
"is_bot": false,
"headline": "v1.3.0 release",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-24T03:59:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c807dea8f29fff14d8e0a7f81b693784f945a8f8",
"body": null,
"is_bot": false,
"headline": "bump version string to 1.3.0",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-22T02:00:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cd6d440b68efd43c3bd2cbe58d11c861f76cf34",
"body": null,
"is_bot": false,
"headline": "PG 19 collector final",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-22T01:59:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0dbdf27fb39c6f2552528ca884de6c938073520b",
"body": null,
"is_bot": false,
"headline": "feat: add PG progress task summary",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-18T13:14:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90ade1351d85a54b309618a64bf8689406280d7e",
"body": null,
"is_bot": false,
"headline": "feat(config): add PG19 vacuum score collector",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-18T12:33:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6ea2f8031056deba3f4ac494b32f594327beb56",
"body": "Collect pg_stat_lock waits, wait_time, and fastpath_exceeded by lock type for PostgreSQL 19+. Renumber the query collector config after inserting the new lock stats collector.",
"is_bot": false,
"headline": "feat(config): add PG19 lock stats collector",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-18T12:20:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9be5a89d01e260cfc7aa15eb6b8f57089aa86a38",
"body": "Expose pg_stat_recovery metrics on recovery nodes and shift the adjacent SLRU, shared memory, and WAL config IDs to keep collector ordering consistent.",
"is_bot": false,
"headline": "config: add PG 19 recovery state collector",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-18T09:17:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f485e5cc10ccd5bde686943f5e26325b9bec04d",
"body": "Encode the connecting WAL receiver status as state 5 and document the expanded state range for PostgreSQL 19 compatibility.",
"is_bot": false,
"headline": "pg_recv: add PG 19 connecting receiver state",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-18T08:41:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa7c38ce897dc8a6107559aac19c4f482440718f",
"body": "Map idle_timeout to replication slot invalidation state 4 and update the metric description for PostgreSQL 19 compatibility.",
"is_bot": false,
"headline": "pg_slot: add PG 19 idle_timeout invalidation reason",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-18T08:41:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dbdde2df52232eceb903b268fdad5abef86ba60",
"body": null,
"is_bot": false,
"headline": "Avoid SELECT star in pg_db_confl collector",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-18T08:36:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a6d3e2c8e0fb0e1d859c9f3ba67ad36688b5c1d",
"body": null,
"is_bot": false,
"headline": "chore: update Go toolchain and dependencies",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-18T02:17:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1021219e60b19502f831df06e8b65286b4b38450",
"body": "PostgreSQL 19 reworks subscription statistics for the new sequence\nsynchronization feature: pg_stat_subscription_stats renames\nsync_error_count to sync_table_error_count and adds sync_seq_error_count\nplus a confl_update_deleted conflict counter, while pg_stat_subscription\ngains a 'sequence synchroni\n[…]\nn confirmed the old filter matches two worker rows while the new\nfilter always matches exactly one.\n\nCo-authored-by: Claude Code <noreply@anthropic.com>\nCo-authored-by: OpenAI Codex <codex@openai.com>",
"is_bot": false,
"headline": "Add PG19 pg_sub collector branch",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-12T10:32:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "456cc6cb51c3a9c2b11b53540e51b743b2e1d071",
"body": "Commit 76c65c7 added the pg_wal_19 branch and the PG18 version cap to\nconfig/0390-pg_wal.yml but did not regenerate pg_exporter.yml, so the\nmerged config diverged from the split fragments. Regenerate it with\nmake conf, with no new collector change.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "conf: regenerate merged config to include pg_wal_19",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-12T10:32:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "76c65c7b27fa30f301a5f8b8a3b9d925985c5603",
"body": "PostgreSQL 19 extends pg_stat_wal with wal_fpi_bytes, while keeping\nthe PG18-era reduced WAL statistics surface without the older write,\nsync, write_time, and sync_time columns.\n\nAdd a PG19-specific pg_wal collector branch so pg_exporter exposes the\nnew full-page-image byte counter as fpi_bytes alon\n[…]\no\nnot keep using the older query and so version-based collector selection\nstays mutually exclusive.\n\nCo-authored-by: Claude Code <noreply@anthropic.com>\nCo-authored-by: OpenAI Codex <codex@openai.com>",
"is_bot": false,
"headline": "Add PG19 pg_wal collector branch",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-06-12T09:45:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e303f2ad915ccdee9213c5c014d1f7b6456564c3",
"body": "Upgrade the release version to v1.2.2 and align Go-based builds with Go 1.26.2, which indirectly brings in upstream fixes for multiple security issues.",
"is_bot": false,
"headline": "release: bump to v1.2.2 with Go 1.26.2",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-04-14T11:58:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3cea615df608d01c5d4659139840f020cdf81d11",
"body": null,
"is_bot": false,
"headline": "legacy: quote descriptions and regenerate merged config",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-03-21T00:58:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fb93f772ae1fc4c4891fca0109b3a5638f78544",
"body": null,
"is_bot": false,
"headline": "conf: quote inline metric descriptions",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-03-21T00:58:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4a8fb020648a714b18b03d7930e1a1f4e8ad0a0",
"body": null,
"is_bot": false,
"headline": "add config merge style test",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-03-21T00:49:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "feca061ac5761b8995e47337c91d497a72206e5d",
"body": null,
"is_bot": false,
"headline": "bump pg_exporter version to 1.2.1",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-03-21T00:26:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b687e573e78c5dbc861dca925115f2f44f9e3721",
"body": null,
"is_bot": false,
"headline": "bump golang to 1.26.1",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-03-21T00:25:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f124168d7610a236553a35ada491a6c6a3d3c655",
"body": null,
"is_bot": false,
"headline": "bump dockerfile go version to 1.26",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-17T12:46:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c75dd09e84a205f70856bea8ce0062c081838026",
"body": null,
"is_bot": false,
"headline": "v1.2.0 release",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-12T11:33:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d33fc4e58ac77b80222861f0a4dd71ce418b5218",
"body": null,
"is_bot": false,
"headline": "bump golang to 1.26.0",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-12T05:10:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd95ad68aca6d6fbceac51be36f99528ca1ef0c7",
"body": null,
"is_bot": false,
"headline": "remove pg_exporter docs page ci",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-12T05:10:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b03b0095b843665fd59c70b9886f6beede3eff1",
"body": null,
"is_bot": false,
"headline": "docs: clarify local-first URL defaults and sslmode behavior",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-12T03:55:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "262d8d93ed4d2db80a325c527c5cc06cc386278d",
"body": "- reject malformed metrics entries that define multiple columns in one item\n\n- return error when a config directory has yaml files but none load successfully\n\n- default Logger to slog.Default and guard log helpers against nil logger\n\n- support dbname query parameter in ParseDatname/ReplaceDatname\n\n- add regression tests for the above behaviors",
"is_bot": false,
"headline": "fix: harden config parsing and runtime fallbacks",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-11T12:41:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8df9d7cd60b817366ad2c9df8ef8c58522a29b10",
"body": null,
"is_bot": false,
"headline": "v1.2.0 release candidate",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-10T03:51:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c7f61cabf8478c36f98fea3df339076d48e7721",
"body": null,
"is_bot": false,
"headline": "Document PgBouncer health probing pitfalls",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-10T03:32:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a7acf75a3b42f0bedeae45119aaacc01b5d8556",
"body": null,
"is_bot": false,
"headline": "Fix PgBouncer health probe (avoid lib/pq Ping ';')",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-10T03:25:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e67b95d50fea7ef9818a2451ced9daf619cd285",
"body": null,
"is_bot": false,
"headline": "docs: fix built-in metrics wording and reload response example",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T12:52:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b5f7c2fd726c4dab94171b6276652a0249034eb",
"body": null,
"is_bot": false,
"headline": "fix: use html/template for Query HTML rendering",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T12:52:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b65601413244dae7add41efcbb36c2dcb092856",
"body": null,
"is_bot": false,
"headline": "fix: serve /explain as text and reject conflicting const labels",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T12:52:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0770d695818659404aecc7da07f59399eec1e5a5",
"body": null,
"is_bot": false,
"headline": "fix(cli): normalize kingpin bool flags passed as --flag=false",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T12:52:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c8b1a81fb7516d0b8e61eab37b75b43f3ddddaa",
"body": "Fixes #92 (CVE-2025-61726)\nFixes #93 (CVE-2025-61728)\nFixes #94 (CVE-2025-61730)\nFixes #95 (CVE-2025-68121)\nFixes #96 (CVE-2025-61731)",
"is_bot": false,
"headline": "chore(go): bump to go1.25.7 for CVE fixes",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T12:52:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09dc7e2359dbb88e202b79e0cf1fa12b4d33ce4e",
"body": null,
"is_bot": false,
"headline": "chore: ignore Codex working dirs",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T10:38:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "318c00a7fb0e04d926c558a2057d789993b72702",
"body": null,
"is_bot": false,
"headline": "docs: clarify config dir loading and pgBouncer notes",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T10:38:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90b5e0f86967fb89b815e28c5e495136efc0bce4",
"body": null,
"is_bot": false,
"headline": "fix: allow startup when target precheck fails",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T10:38:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c42c07a47721986ba244f6dcf0d23e84b3198118",
"body": "- Unify query finalization for file/dir/reader loads (branch/path/timeout)\n\n- Validate SQL/metrics and Prometheus metric/label names; reject unsupported histogram usage\n\n- Pre-parse column scale/default and validate const label keys\n\n- Cache predicate query results by TTL\n\n- Emit dynamic internal se\n[…]\ny stats as const metrics (remove GaugeVec Reset)\n\n- Make exporter Collector unchecked; add HTTP server timeouts and /reload method guard\n\n- Update docs (POST /reload example, deprecate /slave mention)",
"is_bot": false,
"headline": "fix: normalize config parsing and harden exporter runtime",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T09:55:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "755101b4710fbe93468b5808e742330f0a442450",
"body": "Avoid blocking scrapes when an auto-discovered database is dropped by closing the removed server DB in a background goroutine.",
"is_bot": false,
"headline": "fix: close removed servers asynchronously",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T08:31:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "491c21460d9eebb6da1d2327c3178d77b936f892",
"body": "- Use filepath.Join for config dir loads\\n- Fix MetricDesc label signature when column has rename\\n- Apply scale to default values in castFloat64\\n- Allow '=' in const label values; extend unit tests",
"is_bot": false,
"headline": "fix: tighten config loading and metric helpers",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T08:29:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abfdab2a3077878a4e026ded66da462696b00ed5",
"body": "- Capture pgbouncer SHOW VERSION via NOTICE handler (1.12+)\\n- Treat real errors as fatal and re-plan on version change\\n- Use PingContext for pgbouncer health probes\\n- Snapshot DB pointers under lock to avoid probe races",
"is_bot": false,
"headline": "fix(pgbouncer): harden precheck and health probe",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T08:29:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "feda9bbd88caa31e208740968f2eea856aacdabd",
"body": "- Reload query config in-place and invalidate server plans\\n- Start HTTP immediately even when the target is down\\n- Add SIGHUP/SIGUSR1 reload signals (platform-aware) and log reload failures\\n- Implement --disable-intro to hide exporter internal metrics\\n- Align handler content-types; update docs and add reload/intro tests",
"is_bot": false,
"headline": "feat: enable hot reload and non-blocking startup",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-09T08:29:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "468a9199ba4fbcba46b3ca9b430bd29663cad0d4",
"body": null,
"is_bot": false,
"headline": "chore: bundle PG9 legacy configs under legacy/",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-08T07:42:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0e6d01868c5d50db2e75720f9d7113c28cb731a",
"body": null,
"is_bot": false,
"headline": "docs: clarify legacy support starts at PostgreSQL 9.1",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-08T06:23:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c49d60b3a8843d33a542fff5d74ceb1f0d45c263",
"body": null,
"is_bot": false,
"headline": "chore: drop PG 9.0 legacy support (keep 9.1-9.6)",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-08T06:15:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "692d282ff42f6d5714a89d3e97bb487e50871d04",
"body": null,
"is_bot": false,
"headline": "fix: make PG9.0 collectors and precheck work",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-08T04:41:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01d061910bd14f49fee39a2851122e62fe202975",
"body": null,
"is_bot": false,
"headline": "fix: add conf9 target and harden PG9 legacy collectors",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-08T01:09:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d89ed88cc46dda4622d7619918ab11917eaaaaa2",
"body": null,
"is_bot": false,
"headline": "feat: add PostgreSQL 9.0-9.6 legacy collectors",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-08T00:30:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3ab6761783e82cfe0cd88697d26d3b9b4e9932c",
"body": "- Fix minor typos in pg_recv SQL and branch descriptions\\n- Correct bgwriter/checkpointer/meta version range descriptions\\n- Regenerate merged pg_exporter.yml\\n- Add a static test to ensure config coverage for PG10..PG18",
"is_bot": false,
"headline": "config: clarify version splits and add PG10-18 coverage test",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-07T17:56:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3aea941fcc37e2d6a6e25644bd3012751ec0ef59",
"body": "Run unit tests and vet in both release and test-release pipelines before building artifacts.",
"is_bot": false,
"headline": "ci: run go test and go vet in release workflows",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-07T16:32:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01ca8d9164a442d6b886b8e1495a4ea649beee78",
"body": "- Update Makefile VERSION and nfpm package versions\\n- Refresh README/docs examples and latest release references",
"is_bot": false,
"headline": "release: bump metadata and docs to v1.2.0",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-07T16:32:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ed7130ffda6d846f7b4cde2c4713502c852273f",
"body": "- Cover concurrent reload/health handlers\\n- Verify Postgres startup detection (SQLSTATE 57P03) and health state transitions\\n- Add tests for config parsing, PGURL processing/redaction, and metric lifecycle",
"is_bot": false,
"headline": "test: add coverage for health probes and helpers",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-07T16:32:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5af178b3160e897981f9d3a9910c3e259b58525c",
"body": "- Close predicate query rows correctly and surface iteration/close errors\\n- Accept BOOL/BOOLEAN predicate result types\\n- Reset collector error/skip state per execution and fix debug log formatting\\n- Normalize column usage to be case-insensitive in config parsing\\n- Fix PG_EXPORTER_URL(_FILE)/PGURL logging and use url.Values.Encode",
"is_bot": false,
"headline": "exporter: harden predicate queries and PGURL handling",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-07T16:32:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c78c08107ce2a465cd3250d061a08b9b8ff0a97f",
"body": "- Serve /up and role endpoints from an atomic health snapshot updated by a 1Hz probe\\n- Probe Postgres with pg_is_in_recovery and treat SQLSTATE 57P03 as startup\\n- Switch reload state to RWMutex + atomic current exporter pointer\\n- Register the new exporter on reload and stop the old health loop\\n- Close removed auto-discovery servers and add read locks for explain/stat/describe",
"is_bot": false,
"headline": "exporter: make health checks cached and reload safe",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-02-07T16:31:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d3d5067f75f9b210afef5ef75df08bf66160e7a",
"body": null,
"is_bot": false,
"headline": "update copyright year to 2026",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-01-17T02:28:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38b9df0ce334b598237c1f4f9c30b3f497deb653",
"body": null,
"is_bot": false,
"headline": "bump version to 1.1.2",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-01-15T15:02:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "873ca3516395ead8b089058274719eb586939154",
"body": null,
"is_bot": false,
"headline": "doc: update pgsty to pigsty.io",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-01-15T15:02:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "108c80050cd222244597920a8b6e439b711936e0",
"body": null,
"is_bot": false,
"headline": "bump golang deps to the latest version",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-01-15T14:56:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de193f3cc6ddabdc87c923ed959115f25a3bdb6c",
"body": null,
"is_bot": false,
"headline": "bug fix, resolve https://github.com/pgsty/pg_exporter/issues/91",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2026-01-15T14:55:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fa5ddec1cb1735926e7803f8b84a3306ef1fed7",
"body": null,
"is_bot": false,
"headline": "bump version string to 1.1.1",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-30T06:29:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e8da445082da9270bc7007f22e41d36f6fd4a24",
"body": null,
"is_bot": false,
"headline": "add new collector pg_timeline",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-30T03:59:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28843e629dd9251dc7ad14dbb6d07f9b4a525bde",
"body": null,
"is_bot": false,
"headline": "add pg_sub_16 branch to filter out parallel works in subscription",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-30T03:59:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ac3d4f55aee914281ebdd8142e7db4a63d53735",
"body": null,
"is_bot": false,
"headline": "fix: add coalesce slotname for pg_recv collector",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-30T03:58:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b77905f68f144ca6e181112c595bb5627c9a386b",
"body": null,
"is_bot": false,
"headline": "update release checksums",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:46:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d030ce7b9180dd31a682e37979d37467044a674",
"body": null,
"is_bot": false,
"headline": "bump version string to 1.1.0",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:06:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a49726026589e1e064e0f17f3640f4cc2a5f700f",
"body": null,
"is_bot": false,
"headline": "refactor: update the default collector config",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:06:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b907b804c048f133ac2023bda06246d40e40974d",
"body": "- Document all collector changes for v1.1.0 release\n- Include bug fixes, performance optimizations, and new metrics",
"is_bot": false,
"headline": "docs: update release.md with v1.1.0 collector changes",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:05:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4caa7e2cd7dd9f97309822d3eea8fd3b48e503a2",
"body": "- Align YAML metric definition indentation for consistency\n- Affected collectors: pg_doc, pg, pg_slot, pg_recv, pg_backend, pg_indexing,\n pg_clustering, pg_backup, pg_db, pg_index, pg_func, pgbouncer_database, pgbouncer_stat",
"is_bot": false,
"headline": "adjust config format alignment for multiple collectors",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:05:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85dd1e2e06c5c47b2b92e16bf0f7fa27026c4545",
"body": "- pg_io: fix typo in reuses description (\"buffer in reused\" -> \"buffer is reused\")\n- pg_checkpointer: fix pg_checkpointer_10 description (\"9.4+\" -> \"9.4-17\")\n- pg_db_confl: fix pg_db_confl_15 description (\"9.1 - 16\" -> \"9.1 - 15\")",
"is_bot": false,
"headline": "adjust config fix typos and version descriptions",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:04:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a388f85e5979e9b7800f4d3c2f17de9fc322d29a",
"body": "- Increase timeout from 1s to 2s for all version branches\n- Prevents query timeout on busy systems with large pg_stat_statements",
"is_bot": false,
"headline": "adjust config/0460-pg_query increase timeout for high-load scenarios",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:04:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e462366fd853cd6dcddbe73fc39fa651b554635",
"body": "- Add new pg_vacuuming_17 collector branch for PG17\n- Add indexes_total metric: total number of indexes to be vacuumed\n- Add indexes_processed metric: number of indexes already vacuumed\n- Add dead_tuple_bytes metric: total size of dead tuples collected\n- Update pg_vacuuming_18 to include new metrics plus delay_time\n- Update pg_vacuuming_12 max_version from 180000 to 170000\n- Improve metric descriptions for clarity",
"is_bot": false,
"headline": "adjust config/0510-pg_vacuuming add PG17 index progress tracking",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:04:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9da884b5ab90f1be97292c4ff5950df817f7e6c0",
"body": "- Replace LATERAL subqueries with JOIN for better query performance\n- Use explicit table aliases (c., psut., psio., nsp.) for all columns\n- Replace relnamespace::RegNamespace with nsp.nspname to avoid function call overhead\n- Fix tuples metric type from COUNTER to GAUGE (estimated value can fluctuat\n[…]\n type from COUNTER to GAUGE (not strictly monotonic)\n- Increase timeout from 1s to 2s for large table counts\n- Apply changes to all version branches: pg_table_18, pg_table_16, pg_table_13, pg_table_10",
"is_bot": false,
"headline": "adjust config/0700-pg_table performance optimization and type fixes",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:03:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2b102dab94f69a2b4527437c70933d8cae302c6e",
"body": "- Replace path pattern check (log_directory LIKE '/%') with logging_collector setting check\n- Use current_setting('logging_collector') = 'on' to determine if log directory exists\n- Fix issue where relative log_directory paths would incorrectly return 0 bytes\n- Simplify query formatting",
"is_bot": false,
"headline": "adjust config/0310-pg_size fix log directory size detection",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:03:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faf10f0860add7f79bdcebc0aff1d50ba4e33402",
"body": "- Add 13 new metrics: max_parallel_workers, max_parallel_workers_per_gather,\n max_parallel_maintenance_workers, shared_buffers, maintenance_work_mem,\n effective_cache_size, fsync, full_page_writes, autovacuum, autovacuum_max_workers,\n checkpoint_timeout, checkpoint_completion_target, hot_standby,\n[…]\nG13+/PG14+/PG18+)\n- Rename work_memory_size to work_mem\n- Change min_version from 9.6 to 10\n- Add explicit ::int type casting for all numeric settings\n- Fix hugepage_status ELSE clause from -2 to NULL",
"is_bot": false,
"headline": "adjust config/0130-pg_setting refactor for PG10-18 compatibility",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:03:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cea3f4424bb50f83d63fe2f594dc42fc1f4d9cd6",
"body": "- Fix file header comment: 1000 -> 2000\n- Fix lsn metric type: GAUGE -> COUNTER (LSN is monotonically increasing)\n- Align YAML formatting",
"is_bot": false,
"headline": "fix config/2000-pg_heartbeat comment and lsn type",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:02:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39bc4268ef9f162e9f57d343bdbb2031d0450775",
"body": "- Fix column name typo: roiname -> roname (must match SQL SELECT)\n- Fix remote_lsn metric type: LABEL -> COUNTER (LSN is monotonically increasing)\n- Fix local_lsn metric type: LABEL -> COUNTER (LSN is monotonically increasing)",
"is_bot": false,
"headline": "fix config/0270-pg_origin column name typo and metric types",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17e8b41128e95acc35b6d717d45894d2ce1e17a1",
"body": "- Fix xmax CTE using wrong function txid_snapshot_xmin instead of txid_snapshot_xmax\n- This was a copy-paste error causing xmax to return same value as xmin",
"is_bot": false,
"headline": "fix config/0440-pg_xact xmax query bug",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T06:02:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca164e4aa2bc801587259f037adb2f9b6162a1c8",
"body": null,
"is_bot": false,
"headline": "bump go and deps to the latest version",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T01:06:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "beab2ce9ac773d4aa77fb1d1c1094147ffaaeb19",
"body": "Fix release year",
"is_bot": false,
"headline": "Merge pull request #85 from anayrat/patch-1",
"author_name": "Feng Ruohang",
"author_login": "Vonng",
"committed_at": "2025-12-15T00:57:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17b7fa447a80381a2d44fbcbd7cc33d14685252a",
"body": null,
"is_bot": false,
"headline": "Update release.md",
"author_name": "Adrien nayrat",
"author_login": "anayrat",
"committed_at": "2025-11-24T16:37:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81988cdcda1fd1470b35a7814b2f05f6cb1ba3d7",
"body": null,
"is_bot": false,
"headline": "Fix release year",
"author_name": "Adrien nayrat",
"author_login": "anayrat",
"committed_at": "2025-11-24T16:34:43Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 32,
"commits_last_year": 115,
"latest_release_at": "2026-07-18T02:41:26Z",
"latest_release_tag": "v1.4.0",
"releases_from_tags": false,
"days_since_last_push": 7,
"active_weeks_last_year": 17,
"days_since_latest_release": 7,
"mean_days_between_releases": 37.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 58,
"stars": 354,
"watchers": 11,
"fork_history": {
"days": [
{
"date": "2020-06-02",
"count": 1
},
{
"date": "2020-06-03",
"count": 1
},
{
"date": "2020-11-06",
"count": 1
},
{
"date": "2020-11-12",
"count": 1
},
{
"date": "2020-11-16",
"count": 1
},
{
"date": "2020-11-26",
"count": 1
},
{
"date": "2020-12-22",
"count": 1
},
{
"date": "2020-12-24",
"count": 1
},
{
"date": "2021-01-28",
"count": 1
},
{
"date": "2021-03-23",
"count": 1
},
{
"date": "2021-03-28",
"count": 1
},
{
"date": "2021-05-14",
"count": 1
},
{
"date": "2021-05-18",
"count": 1
},
{
"date": "2021-06-10",
"count": 1
},
{
"date": "2021-08-22",
"count": 1
},
{
"date": "2021-09-28",
"count": 1
},
{
"date": "2021-10-18",
"count": 1
},
{
"date": "2021-10-26",
"count": 1
},
{
"date": "2021-11-20",
"count": 1
},
{
"date": "2022-01-23",
"count": 1
},
{
"date": "2022-03-03",
"count": 1
},
{
"date": "2022-04-06",
"count": 1
},
{
"date": "2022-04-18",
"count": 1
},
{
"date": "2022-05-09",
"count": 1
},
{
"date": "2022-06-08",
"count": 1
},
{
"date": "2022-08-02",
"count": 1
},
{
"date": "2023-01-28",
"count": 1
},
{
"date": "2023-02-06",
"count": 1
},
{
"date": "2023-03-17",
"count": 1
},
{
"date": "2023-04-05",
"count": 1
},
{
"date": "2023-05-03",
"count": 2
},
{
"date": "2023-05-08",
"count": 1
},
{
"date": "2023-10-16",
"count": 1
},
{
"date": "2023-11-05",
"count": 1
},
{
"date": "2023-11-06",
"count": 1
},
{
"date": "2023-12-11",
"count": 1
},
{
"date": "2024-01-12",
"count": 1
},
{
"date": "2024-01-17",
"count": 1
},
{
"date": "2024-03-25",
"count": 1
},
{
"date": "2024-06-17",
"count": 1
},
{
"date": "2024-08-08",
"count": 1
},
{
"date": "2024-08-15",
"count": 1
},
{
"date": "2024-10-16",
"count": 1
},
{
"date": "2025-02-07",
"count": 1
},
{
"date": "2025-04-04",
"count": 1
},
{
"date": "2025-04-21",
"count": 1
},
{
"date": "2025-04-29",
"count": 1
},
{
"date": "2025-08-21",
"count": 1
},
{
"date": "2025-09-03",
"count": 1
},
{
"date": "2025-11-24",
"count": 1
},
{
"date": "2025-12-30",
"count": 1
},
{
"date": "2026-01-18",
"count": 1
},
{
"date": "2026-02-11",
"count": 1
},
{
"date": "2026-03-09",
"count": 1
},
{
"date": "2026-04-10",
"count": 1
},
{
"date": "2026-06-16",
"count": 1
},
{
"date": "2026-06-18",
"count": 1
}
],
"complete": true,
"collected": 58,
"total_forks": 58
},
"star_history": null,
"open_issues_and_prs": 10
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 30968,
"source_files_sampled": 40,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.54.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5932"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 17
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 30,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/alecthomas/kingpin/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.4.0"
},
{
"name": "github.com/lib/pq",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.12.3"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.23.2"
},
{
"name": "github.com/prometheus/client_model",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.2"
},
{
"name": "github.com/prometheus/common",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.70.0"
},
{
"name": "github.com/prometheus/exporter-toolkit",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.17.1"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/alecthomas/kingpin/v2",
"direct": true,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "github.com/lib/pq",
"direct": true,
"version": "v1.12.3",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_golang",
"direct": true,
"version": "v1.23.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_model",
"direct": true,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/common",
"direct": true,
"version": "v0.70.0",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/exporter-toolkit",
"direct": true,
"version": "v0.17.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": true,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "github.com/alecthomas/units",
"direct": false,
"version": "v0.0.0-20240927000941-0f3dac36c52b",
"ecosystem": "go"
},
{
"name": "github.com/beorn7/perks",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/coreos/go-systemd/v22",
"direct": false,
"version": "v22.7.0",
"ecosystem": "go"
},
{
"name": "github.com/golang-jwt/jwt/v5",
"direct": false,
"version": "v5.3.1",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/jpillora/backoff",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "v1.18.6",
"ecosystem": "go"
},
{
"name": "github.com/mdlayher/socket",
"direct": false,
"version": "v0.6.1",
"ecosystem": "go"
},
{
"name": "github.com/mdlayher/vsock",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/munnerz/goautoneg",
"direct": false,
"version": "v0.0.0-20191010083416-a7dc8b61c822",
"ecosystem": "go"
},
{
"name": "github.com/mwitkow/go-conntrack",
"direct": false,
"version": "v0.0.0-20190716064945-2f068394615f",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/procfs",
"direct": false,
"version": "v0.21.1",
"ecosystem": "go"
},
{
"name": "github.com/xhit/go-str2duration/v2",
"direct": false,
"version": "v2.1.0",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v2",
"direct": false,
"version": "v2.4.4",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.54.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.57.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/oauth2",
"direct": false,
"version": "v0.36.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.22.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.40.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.15.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.36.11",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 30,
"direct_count": 7,
"indirect_count": 23
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 32,
"open_issues": 10,
"closed_ratio": 0.839,
"closed_issues": 52,
"closed_unmerged_prs": 5
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "Vonng",
"commits": 355,
"avatar_url": "https://avatars.githubusercontent.com/u/8587410?v=4"
},
{
"type": "User",
"login": "ringerc",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/274337?v=4"
},
{
"type": "User",
"login": "japinli",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/20606090?v=4"
},
{
"type": "User",
"login": "anayrat",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/6862220?v=4"
},
{
"type": "User",
"login": "dovreshef",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/5120549?v=4"
},
{
"type": "User",
"login": "mjf",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/54104?v=4"
},
{
"type": "User",
"login": "trinchan",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/3772659?v=4"
},
{
"type": "User",
"login": "oneEyedSunday",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/29808443?v=4"
},
{
"type": "User",
"login": "MaxGabriel",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1274145?v=4"
},
{
"type": "User",
"login": "kadaffy",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/43817767?v=4"
}
],
"contributors_sampled": 12,
"top_contributor_share": 0.934
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yaml",
"release.yaml",
"test-release.yaml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 5 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "b79a3db66bbafc9563245933a538005e665b9b25",
"ran_at": "2026-07-25T11:25:28Z",
"aggregate_score": 4.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-18T02:41:45Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2025-12-15T00:57:32Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 12,
"created_at": "2021-05-26T02:17:01Z",
"last_comment_at": "2024-06-24T21:29:14Z",
"last_comment_author": "ringerc"
},
{
"number": 26,
"created_at": "2022-05-25T11:41:30Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 27,
"created_at": "2022-06-01T09:32:12Z",
"last_comment_at": "2022-06-04T08:43:14Z",
"last_comment_author": "Vonng"
},
{
"number": 42,
"created_at": "2024-06-11T21:48:48Z",
"last_comment_at": "2024-07-02T04:46:18Z",
"last_comment_author": "ringerc"
},
{
"number": 43,
"created_at": "2024-06-11T21:50:58Z",
"last_comment_at": "2024-06-17T23:51:51Z",
"last_comment_author": "ringerc"
},
{
"number": 72,
"created_at": "2025-04-21T10:09:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 73,
"created_at": "2025-04-21T10:11:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 81,
"created_at": "2025-09-14T17:18:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 106,
"created_at": "2026-07-22T13:43:14Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 107,
"created_at": "2026-07-24T15:49:56Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/pgsty/pg_exporter",
"host": "github.com",
"name": "pg_exporter",
"owner": "pgsty"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"security": 58,
"vitality": 82,
"community": 56,
"governance": 55,
"engineering": 72
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 82,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"commits_last_year": 115,
"human_commit_share": 1,
"days_since_last_push": 7,
"active_weeks_last_year": 17
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "17/52 weeks with commits",
"points": 11.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 17
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "115 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 115
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 32,
"latest_release_tag": "v1.4.0",
"releases_from_tags": false,
"days_since_latest_release": 7,
"mean_days_between_releases": 37.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "32 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 32
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~37.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 37.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 7,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 7 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 7
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 56,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"forks": 58,
"stars": 354,
"watchers": 11,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "354 stars",
"points": 41.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 354
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "58 forks",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 58
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "11 watchers",
"points": 5.6,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 11
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 55,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 12,
"top_contributor_share": 0.934
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 93% of commits",
"points": 1.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 93
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "12 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 12
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"merged_prs": 32,
"open_issues": 10,
"closed_issues": 52,
"issue_closed_ratio": 0.839,
"closed_unmerged_prs": 5
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "84% of issues closed",
"points": 39.2,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 84
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "32/37 decided PRs merged",
"points": 33.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 32,
"decided": 37
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"followers": 183,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "pgsty",
"public_repos": 33,
"account_age_days": 916
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "183 followers of pgsty",
"points": 16.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 183,
"login": "pgsty"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "33 public repos, account ~2 yr old",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 33
}
},
{
"code": "account_age_years",
"params": {
"years": 2
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 72,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"postgres",
"prometheus",
"prometheus-exporter",
"pgbouncer",
"pg-exporter",
"monitoring"
],
"has_wiki": false,
"homepage": "https://pigsty.io/docs/pg_exporter",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://pigsty.io/docs/pg_exporter",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 58,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 30 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 30
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 30,
"unassessed_packages": 0,
"affected_by_severity": "unknown 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 30,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 13
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 65,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.73,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "73 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 38.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 73,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.12,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "12 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 12,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 30968,
"source_files_sampled": 40,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/40 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 40,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-25T11:25:39.623637Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pgsty/pg_exporter.svg",
"full_name": "pgsty/pg_exporter",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.