pluralsh / plural-cli

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

Each point covers 3 days.

Full resolved dependency set from the GitHub dependency graph: 80 direct and 259 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 339 packages, which also include development and test pins that never ship: 3 carry known advisories, of which 2 are direct.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [
        "go",
        "golang",
        "cli"
      ],
      "is_fork": false,
      "size_kb": 12823,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 687876,
        "HCL": 3437,
        "Lua": 5168,
        "Shell": 9239,
        "Liquid": 1662,
        "Makefile": 8000,
        "Dockerfile": 1479,
        "Go Template": 270
      },
      "pushed_at": "2026-07-21T18:27:04Z",
      "created_at": "2020-09-15T00:36:26Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-21T18:27:11Z",
      "description": "cli for the plural platform ",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://www.plural.sh/",
      "name": "Plural",
      "type": "Organization",
      "login": "pluralsh",
      "company": null,
      "location": "United States of America",
      "followers": 85,
      "avatar_url": "https://avatars.githubusercontent.com/u/82285029?v=4",
      "created_at": "2021-04-10T18:19:27Z",
      "is_verified": null,
      "public_repos": 134,
      "account_age_days": 1929
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.12.59",
          "kind": "patch",
          "published_at": "2026-07-18T00:07:16Z"
        },
        {
          "tag": "v0.12.58",
          "kind": "patch",
          "published_at": "2026-07-08T16:33:52Z"
        },
        {
          "tag": "v0.12.57",
          "kind": "patch",
          "published_at": "2026-07-08T15:17:31Z"
        },
        {
          "tag": "v0.12.56",
          "kind": "patch",
          "published_at": "2026-06-27T00:26:11Z"
        },
        {
          "tag": "v0.12.55",
          "kind": "patch",
          "published_at": "2026-06-26T23:56:54Z"
        },
        {
          "tag": "v0.12.54",
          "kind": "patch",
          "published_at": "2026-06-05T22:25:36Z"
        },
        {
          "tag": "v0.12.52",
          "kind": "patch",
          "published_at": "2026-05-23T02:04:38Z"
        },
        {
          "tag": "v0.12.51",
          "kind": "patch",
          "published_at": "2026-05-14T22:41:40Z"
        },
        {
          "tag": "v0.12.50",
          "kind": "patch",
          "published_at": "2026-05-06T22:17:34Z"
        },
        {
          "tag": "v0.12.49",
          "kind": "patch",
          "published_at": "2026-05-06T22:00:52Z"
        },
        {
          "tag": "v0.12.48",
          "kind": "patch",
          "published_at": "2026-04-30T20:06:43Z"
        },
        {
          "tag": "v0.12.46",
          "kind": "patch",
          "published_at": "2026-04-12T00:45:42Z"
        },
        {
          "tag": "v0.12.45",
          "kind": "patch",
          "published_at": "2026-04-11T18:52:23Z"
        },
        {
          "tag": "v0.12.44",
          "kind": "patch",
          "published_at": "2026-04-03T21:01:31Z"
        },
        {
          "tag": "v0.12.43",
          "kind": "patch",
          "published_at": "2026-03-20T03:13:23Z"
        },
        {
          "tag": "v0.12.47",
          "kind": "patch",
          "published_at": "2026-03-20T03:11:23Z"
        },
        {
          "tag": "v0.12.42",
          "kind": "patch",
          "published_at": "2026-03-19T15:36:28Z"
        },
        {
          "tag": "v0.12.41",
          "kind": "patch",
          "published_at": "2026-02-27T18:19:13Z"
        },
        {
          "tag": "v0.12.40",
          "kind": "patch",
          "published_at": "2026-02-17T19:49:00Z"
        },
        {
          "tag": "v0.12.39",
          "kind": "patch",
          "published_at": "2026-02-17T18:13:01Z"
        },
        {
          "tag": "v0.12.38",
          "kind": "patch",
          "published_at": "2026-02-17T17:54:08Z"
        },
        {
          "tag": "v0.12.36",
          "kind": "patch",
          "published_at": "2026-02-07T18:55:51Z"
        },
        {
          "tag": "v0.12.35",
          "kind": "patch",
          "published_at": "2026-01-29T22:43:50Z"
        },
        {
          "tag": "v0.12.34",
          "kind": "patch",
          "published_at": "2026-01-21T16:52:15Z"
        },
        {
          "tag": "v0.12.33",
          "kind": "patch",
          "published_at": "2026-01-16T15:53:36Z"
        },
        {
          "tag": "v0.12.32",
          "kind": "patch",
          "published_at": "2026-01-10T01:39:01Z"
        },
        {
          "tag": "v0.12.31",
          "kind": "patch",
          "published_at": "2026-01-05T22:24:08Z"
        },
        {
          "tag": "v0.12.30",
          "kind": "patch",
          "published_at": "2025-12-19T20:51:51Z"
        },
        {
          "tag": "v0.12.29",
          "kind": "patch",
          "published_at": "2025-12-12T18:30:53Z"
        },
        {
          "tag": "v0.12.28",
          "kind": "patch",
          "published_at": "2025-12-12T15:41:54Z"
        },
        {
          "tag": "v0.12.27",
          "kind": "patch",
          "published_at": "2025-12-10T21:58:42Z"
        },
        {
          "tag": "v0.12.26",
          "kind": "patch",
          "published_at": "2025-12-10T20:34:17Z"
        },
        {
          "tag": "v0.12.25",
          "kind": "patch",
          "published_at": "2025-12-10T16:51:01Z"
        },
        {
          "tag": "v0.12.24",
          "kind": "patch",
          "published_at": "2025-12-09T14:41:20Z"
        },
        {
          "tag": "v0.12.23",
          "kind": "patch",
          "published_at": "2025-12-04T22:38:36Z"
        },
        {
          "tag": "v0.12.22",
          "kind": "patch",
          "published_at": "2025-11-06T16:30:19Z"
        },
        {
          "tag": "v0.12.21",
          "kind": "patch",
          "published_at": "2025-10-30T20:35:57Z"
        },
        {
          "tag": "v0.12.20",
          "kind": "patch",
          "published_at": "2025-10-06T17:03:01Z"
        },
        {
          "tag": "v0.12.19",
          "kind": "patch",
          "published_at": "2025-09-10T23:02:10Z"
        },
        {
          "tag": "v0.12.18",
          "kind": "patch",
          "published_at": "2025-08-28T18:16:15Z"
        },
        {
          "tag": "v0.12.17",
          "kind": "patch",
          "published_at": "2025-08-19T16:03:02Z"
        },
        {
          "tag": "v0.12.16",
          "kind": "patch",
          "published_at": "2025-08-12T21:42:48Z"
        },
        {
          "tag": "v0.12.15",
          "kind": "patch",
          "published_at": "2025-08-01T15:34:31Z"
        },
        {
          "tag": "v0.12.14",
          "kind": "patch",
          "published_at": "2025-07-30T16:03:53Z"
        },
        {
          "tag": "v0.12.13",
          "kind": "patch",
          "published_at": "2025-07-14T15:55:05Z"
        },
        {
          "tag": "v0.12.12",
          "kind": "patch",
          "published_at": "2025-07-12T18:30:51Z"
        },
        {
          "tag": "v0.12.11",
          "kind": "patch",
          "published_at": "2025-07-10T02:45:20Z"
        },
        {
          "tag": "v0.12.10",
          "kind": "patch",
          "published_at": "2025-07-07T21:34:04Z"
        },
        {
          "tag": "v0.12.9",
          "kind": "patch",
          "published_at": "2025-06-24T23:01:06Z"
        },
        {
          "tag": "v0.12.8",
          "kind": "patch",
          "published_at": "2025-06-16T20:23:30Z"
        },
        {
          "tag": "v0.12.7",
          "kind": "patch",
          "published_at": "2025-06-12T23:41:24Z"
        },
        {
          "tag": "v0.12.6",
          "kind": "patch",
          "published_at": "2025-06-10T03:38:16Z"
        },
        {
          "tag": "v0.12.5",
          "kind": "patch",
          "published_at": "2025-06-08T16:44:08Z"
        },
        {
          "tag": "v0.12.4",
          "kind": "patch",
          "published_at": "2025-05-22T18:49:50Z"
        },
        {
          "tag": "v0.12.3",
          "kind": "patch",
          "published_at": "2025-03-25T13:24:55Z"
        },
        {
          "tag": "v0.12.2",
          "kind": "patch",
          "published_at": "2025-02-25T17:27:51Z"
        },
        {
          "tag": "v0.12.1",
          "kind": "patch",
          "published_at": "2025-02-04T15:14:14Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2025-02-04T11:41:36Z"
        },
        {
          "tag": "v0.11.3",
          "kind": "patch",
          "published_at": "2025-01-30T20:09:27Z"
        },
        {
          "tag": "v0.11.2",
          "kind": "patch",
          "published_at": "2025-01-08T21:34:21Z"
        },
        {
          "tag": "v0.11.1",
          "kind": "patch",
          "published_at": "2024-12-30T18:20:04Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2024-12-19T14:43:19Z"
        },
        {
          "tag": "v0.10.4",
          "kind": "patch",
          "published_at": "2024-12-18T17:46:54Z"
        },
        {
          "tag": "v0.10.3",
          "kind": "patch",
          "published_at": "2024-12-13T10:18:20Z"
        },
        {
          "tag": "v0.10.2",
          "kind": "patch",
          "published_at": "2024-12-10T16:05:24Z"
        },
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2024-11-22T05:40:34Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2024-11-07T20:03:34Z"
        },
        {
          "tag": "v0.9.25",
          "kind": "patch",
          "published_at": "2024-10-18T21:33:30Z"
        },
        {
          "tag": "v0.9.24",
          "kind": "patch",
          "published_at": "2024-10-08T17:14:04Z"
        },
        {
          "tag": "v0.9.23",
          "kind": "patch",
          "published_at": "2024-10-08T12:44:10Z"
        },
        {
          "tag": "v0.9.22",
          "kind": "patch",
          "published_at": "2024-10-04T19:03:26Z"
        },
        {
          "tag": "v0.9.21",
          "kind": "patch",
          "published_at": "2024-10-04T16:40:10Z"
        },
        {
          "tag": "v0.9.20",
          "kind": "patch",
          "published_at": "2024-10-03T18:49:46Z"
        },
        {
          "tag": "v0.9.19",
          "kind": "patch",
          "published_at": "2024-10-03T14:29:35Z"
        },
        {
          "tag": "v0.9.18",
          "kind": "patch",
          "published_at": "2024-10-03T11:49:17Z"
        },
        {
          "tag": "v0.9.16",
          "kind": "patch",
          "published_at": "2024-09-20T16:14:42Z"
        },
        {
          "tag": "v0.9.15",
          "kind": "patch",
          "published_at": "2024-09-12T16:55:10Z"
        },
        {
          "tag": "v0.9.14",
          "kind": "patch",
          "published_at": "2024-08-27T21:38:24Z"
        },
        {
          "tag": "v0.9.13",
          "kind": "patch",
          "published_at": "2024-07-22T18:56:08Z"
        },
        {
          "tag": "v0.9.12",
          "kind": "patch",
          "published_at": "2024-07-17T13:51:32Z"
        },
        {
          "tag": "v0.9.11",
          "kind": "patch",
          "published_at": "2024-07-10T12:59:03Z"
        },
        {
          "tag": "v0.9.10",
          "kind": "patch",
          "published_at": "2024-06-30T22:26:48Z"
        },
        {
          "tag": "v0.9.9",
          "kind": "patch",
          "published_at": "2024-06-22T03:03:15Z"
        },
        {
          "tag": "v0.9.8",
          "kind": "patch",
          "published_at": "2024-06-19T19:09:56Z"
        },
        {
          "tag": "v0.9.7",
          "kind": "patch",
          "published_at": "2024-06-06T18:48:18Z"
        },
        {
          "tag": "v0.9.6",
          "kind": "patch",
          "published_at": "2024-05-31T14:56:18Z"
        },
        {
          "tag": "v0.9.5",
          "kind": "patch",
          "published_at": "2024-05-06T14:21:03Z"
        },
        {
          "tag": "v0.9.4",
          "kind": "patch",
          "published_at": "2024-05-02T13:13:53Z"
        },
        {
          "tag": "v0.9.3",
          "kind": "patch",
          "published_at": "2024-04-22T15:26:52Z"
        },
        {
          "tag": "v0.9.2",
          "kind": "patch",
          "published_at": "2024-04-21T04:57:09Z"
        },
        {
          "tag": "v0.9.1",
          "kind": "patch",
          "published_at": "2024-04-17T19:46:10Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2024-04-08T21:00:30Z"
        },
        {
          "tag": "v0.8.9",
          "kind": "patch",
          "published_at": "2024-04-01T21:45:14Z"
        },
        {
          "tag": "v0.8.8",
          "kind": "patch",
          "published_at": "2024-03-21T02:28:32Z"
        },
        {
          "tag": "v0.8.7",
          "kind": "patch",
          "published_at": "2024-03-16T00:53:08Z"
        },
        {
          "tag": "v0.8.6",
          "kind": "patch",
          "published_at": "2024-02-29T01:06:08Z"
        },
        {
          "tag": "v0.8.5",
          "kind": "patch",
          "published_at": "2024-02-29T00:14:26Z"
        },
        {
          "tag": "v0.8.4",
          "kind": "patch",
          "published_at": "2024-02-05T21:53:34Z"
        },
        {
          "tag": "v0.8.3",
          "kind": "patch",
          "published_at": "2024-01-26T06:55:37Z"
        },
        {
          "tag": "v0.8.2",
          "kind": "patch",
          "published_at": "2023-11-24T05:03:33Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "b542720fec2ddd35531923beae729af2bae2a971",
          "body": "…ry (#785)\n\n* fix(Untar): ensure files are extracted inside the destination directory\n\n- Verify target paths to prevent extraction outside the destination\n- Add unit tests for validation of target path and content extraction within destination directory\n\n* fix(Untar): enhance path security and valid\n[…]\non\n- Check local path using `filepath.IsLocal`\n- Refactor `makeDir` to use `root.MkdirAll`\n- Improve error messaging for file extraction\n- Add test to reject symlinks resolving outside the destination",
          "is_bot": false,
          "headline": "fix(Untar): ensure files are extracted inside the destination directo…",
          "author_name": "Sebastian Florek",
          "author_login": "floreks",
          "committed_at": "2026-07-21T18:27:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3b9b9df8cb3ab14399000c2a2769ffc5ad8c669e",
          "body": "* implement templated agentHelmValues\n\n* Update pkg/console/agent_helm_values.go\n\nCo-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>\n\n* gen mocks\n\n* update error handling\n\n* linter\n\n---------\n\nCo-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>",
          "is_bot": false,
          "headline": "implement templated agentHelmValues (#783)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2026-07-16T20:28:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "45532e05f1bc69a9b5cb76c93f96928a59ae9e3a",
          "body": "…782)",
          "is_bot": false,
          "headline": "fix(deps): bump oras-go to v2.6.2 and golang.org/x/sync to v0.22.0 (#…",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2026-07-15T13:08:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cefcdcd86ea0c0ed3e60792042bf32a51372f3e5",
          "body": "Co-authored-by: apikey <agent@plural.sh>",
          "is_bot": true,
          "headline": "fix: rebuild plural CLI with Go 1.26.5 (#780)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-07-10T03:38:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04837c07769b3677380e7ee56885238d030c9b54",
          "body": "ignore some annoying false positives",
          "is_bot": false,
          "headline": "Tune trivy",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2026-07-09T13:32:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f9a5ab350512d5d6997942063914846a939b5dc",
          "body": "…t sessions (#760)\n\n* feat: introduce session restoration and resume functionality for agent sessions\n\n- Implement `CodexRestorer` for restoring and resuming Codex sessions\n- Add `OpencodeRestorer` for handling Opencode session states\n- Create `GeminiRestorer` for managing Gemini session restoration\n[…]\nh checkout prompt if already checked out\n- Refactor `promptRepoPath` to verify current repository before prompting\n- Add comprehensive test coverage for repository path prompting and validation logic.",
          "is_bot": false,
          "headline": "feat: introduce session restoration and resume functionality for agen…",
          "author_name": "Sebastian Florek",
          "author_login": "floreks",
          "committed_at": "2026-07-08T16:01:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a5e367d83241291a8a367afda0625993830fd005",
          "body": "* update dependencies\n\n* fix linter",
          "is_bot": false,
          "headline": "fix: Update dependencies (#773)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2026-07-07T12:56:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "123c3ca767568438a041de67474d2ce982ac7abe",
          "body": "Co-authored-by: apikey <agent@plural.sh>",
          "is_bot": true,
          "headline": "fix(deps): bump oras-go to v2.6.1 (#771)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-07-02T17:00:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94d4e31d6276b6076feb6fb729a8d143ba139262",
          "body": "Co-authored-by: apikey <agent@plural.sh>",
          "is_bot": true,
          "headline": "fix(deps): bump containerd for console CLI remediation (#770)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-06-27T00:03:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ccbbba566fc9610978c92f98e1fcf77e7bda0125",
          "body": "Co-authored-by: apikey <agent@plural.sh>",
          "is_bot": true,
          "headline": "fix(deps): remediate vulnerable golang.org/x modules (#769)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-06-26T23:34:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3608fe2482584a15c79ef5d6a53e0df3c583c009",
          "body": "Co-authored-by: apikey <agent@plural.sh>",
          "is_bot": true,
          "headline": "fix: bump Go toolchain to 1.26.4 (#758)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-06-05T15:45:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ebd85111eafc497e122d2867613522d5a64dd0f2",
          "body": "Co-authored-by: apikey <agent@plural.sh>",
          "is_bot": true,
          "headline": "fix: remediate in-scope vulnerable Go modules (#756)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-05-23T01:40:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7bdc54743fc644177e1be18a611290807193c02a",
          "body": "Updates Go version from 1.26.2 to 1.26.3 across:\n- go.mod: Go directive updated to 1.26.3\n- Dockerfile: golang base images updated to 1.26.3-alpine3.22\n\nDependencies github.com/go-git/go-git/v5@v5.19.0 and\ngithub.com/go-git/go-billy/v5@v5.9.0 are already at required versions.\n\nThis change remediates in-scope vulnerabilities for console-related Go code.\n\nCo-authored-by: Aaron Smallberg <aaron@plural.sh>",
          "is_bot": true,
          "headline": "Bump Go toolchain to 1.26.3 for security remediation (#741)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-05-14T22:17:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c44e5c27c1791283c8233293c3f546b19861c4b8",
          "body": "* Shows current api server\n* optionally requests confirmation before proceeding",
          "is_bot": false,
          "headline": "Add confirm functionality for bootstrap (#742)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2026-05-14T22:16:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "262007abc0ea9c15047de1fc993b48d6025c7fed",
          "body": "This is currently misconfigured anyway, just remove it from the bootstrap folder",
          "is_bot": false,
          "headline": "Properly rm runtime in cloud clusters (#737)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2026-05-06T21:52:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "229d0d06c5a203a66b09d55dfc14a62941e8d2db",
          "body": "…#738)\n\nUpdates github.com/go-git/go-git/v5 from v5.18.0 to v5.19.0 to address\nCVE-2026-41506 vulnerability. This is a minimal dependency update that\nincludes automatic updates to related crypto dependencies.\n\nChanges:\n- github.com/go-git/go-git/v5: v5.18.0 → v5.19.0\n- golang.org/x/crypto: v0.48.0 → v0.50.0\n- github.com/pjbgf/sha1cd: v0.5.0 → v0.6.0\n\nCo-authored-by: Aaron Smallberg <aaron@plural.sh>",
          "is_bot": true,
          "headline": "fix(security): update go-git to v5.19.0 to remediate CVE-2026-41506 (…",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-05-06T21:52:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7046cf50c82cb89e91b0693751033e1afd3bb17",
          "body": "Replace the external github.com/whilp/git-urls library with a minimal local\nimplementation using stdlib net/url. The library was used in only two places\nin pkg/up/context.go for parsing git URLs.\n\nChanges:\n- Added parseGitURL() function to replace giturls.Parse() functionality\n- Uses net/url from st\n[…]\nocal implementation maintains compatibility with existing behavior\nand test expectations.\n\nFixes vulnerability in github.com/whilp/git-urls dependency.\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>",
          "is_bot": true,
          "headline": "Remove vulnerable github.com/whilp/git-urls dependency (#736)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-05-05T05:11:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f5678ecdb1903f4d78c7630278eb073092a2e7cc",
          "body": "Bumped github.com/go-git/go-git/v5 from v5.17.1 to v5.18.0 to address\nsecurity advisory GHSA-3xc5-wrhm-f963 affecting the console image.\n\nChanges:\n- go.mod: Updated go-git dependency to v5.18.0\n- go.sum: Updated checksums for new version\n\nVerified: Build and basic validation passed\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>",
          "is_bot": true,
          "headline": "Update go-git to v5.18.0 to remediate GHSA-3xc5-wrhm-f963 (#735)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-05-05T01:36:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b09061eaf711806fc05985f0e6a26a2f4fcac98",
          "body": null,
          "is_bot": false,
          "headline": "fix(up): fix dry-run for plural up across all providers (#729)",
          "author_name": "Sebastian Florek",
          "author_login": "floreks",
          "committed_at": "2026-04-30T19:42:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "982c26acc1475e6aa5432116d4b616ab12584af7",
          "body": "This is blocking on fresh installs that do not configure crypto by default",
          "is_bot": false,
          "headline": "Fix crypto usage in `plural cd control-plane` (#732)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2026-04-28T22:43:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9248104dd0ea0798f51d311f3b1845c6d488de4",
          "body": null,
          "is_bot": false,
          "headline": "skip DNS setup if no zones exist in Azure resource group (#730)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2026-04-27T14:26:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72160b66190c85ef7536e9e017dbf6174493ca90",
          "body": "Pretty sure it's not handling relative directories correctly here, this should fix",
          "is_bot": false,
          "headline": "Fix lua file evaluation in `plural cd services lua` (#728)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2026-04-14T21:51:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "729e6925c19a7ec50f4271b1326e38ae6678f3be",
          "body": null,
          "is_bot": false,
          "headline": "Gracefully handle dns zone lookup failure (#727)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2026-04-11T23:04:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7594f35ba2e408021a008570c3243e5a882bc6cc",
          "body": "This commit upgrades helm.sh/helm/v3 from v3.20.0 to v3.20.2 to address\na security vulnerability related to Chart.yaml extraction directory collapse.\n\nThe vulnerability allowed specially crafted Charts to write contents to\nthe immediate output directory rather than the expected subdirectory during\n'\n[…]\n20.2\n- Updated go.sum with new dependency checksums\n\nBuild verification completed successfully.\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "Upgrade Helm to v3.20.2 to fix CVE security vulnerability (#726)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-04-11T18:27:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8c79c4e15af149facfe6a6c180c29304661c0f43",
          "body": "… PATH hijacking vulnerability (#725)\n\nUpgraded OpenTelemetry Go SDK from v1.40.0 to v1.43.0 to address CVE-2026-24051.\nThe vulnerability allowed PATH hijacking attacks on BSD and Solaris platforms due to\nthe BSD kenv command not using an absolute path.\n\nAlso upgraded related OpenTelemetry packages \n[…]\ntry.io/otel/sdk/metric: v1.40.0 -> v1.43.0\n- go.opentelemetry.io/otel/trace: v1.40.0 -> v1.43.0\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "fix(security): upgrade go.opentelemetry.io/otel/sdk to v1.43.0 to fix…",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-04-11T17:10:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5dd9e36f8674ab91ac03d7e518a9386918ab0e43",
          "body": "Upgraded github.com/aws/aws-sdk-go-v2/service/s3 from v1.79.3 to v1.97.3 to address CVE affecting EventStream header decoder. This fixes a denial of service vulnerability where malformed EventStream responses could cause process termination.\n\nCVE Details:\n- Severity: Medium (CVSS 5.9)\n- Impact: Deni\n[…]\n2 dependencies via go mod tidy\n\nVerification:\n- Code compiles successfully with upgraded SDK\n- No breaking API changes detected\n- Docker build verified\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>",
          "is_bot": true,
          "headline": "Fix AWS SDK for Go v2 EventStream DoS vulnerability (#724)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-04-11T16:55:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3be6d6bdbcc8bcfeb43457c670ba602e91f04149",
          "body": "This commit upgrades the Go version from 1.26.1 to 1.26.2 to address the\ncrypto/x509 vulnerability (CVE affecting certificate chain validation).\n\nThe vulnerability causes denial of service via inefficient certificate\nchain validation when certificates contain a very large number of\npolicy mappings.\n\n[…]\no test: all unit tests passed\n- docker build: image built successfully (749MB) and tested\n\nFix Version: 1.26.2\nPrevious Version: 1.26.1\nPackage: stdlib\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>",
          "is_bot": true,
          "headline": "Upgrade Go to 1.26.2 to fix crypto/x509 CVE (#722)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-04-11T15:59:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cb47ec5ba2662e1f874425b3a320e0b8c422050c",
          "body": "* allow http urls in plural up\n\n* linter",
          "is_bot": false,
          "headline": "allow http urls in plural up (#721)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2026-04-10T14:38:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93b548789be605faa52fbdd79a5e5a6b5a415559",
          "body": "* plural up ux improvements\n\n* linter\n\n* revert aws.go\n\n* fix dry-run\n\n* add byok\n\n* install agent\n\n* update\n\n* clean up\n\n* linter\n\n* update prune BYOK",
          "is_bot": false,
          "headline": "plural up ux improvements (#716)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2026-04-09T10:51:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fe1d0ea23ffc984f9f4394f861e72646db76e8e",
          "body": "…decryption panic vulnerability (#719)\n\nThis update addresses a denial of service vulnerability in Go JOSE where\ndecrypting a JSON Web Encryption (JWE) object can panic if the `alg` field\nindicates a key wrapping algorithm and the `encrypted_key` field is empty.\n\nThe panic occurs in cipher.KeyUnwrap() when attempting to allocate a slice\nwith a zero or negative length.\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>",
          "is_bot": true,
          "headline": "fix: upgrade go-jose/go-jose/v4 from v4.1.3 to v4.1.4 to address JWE …",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-04-04T21:34:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db864c5a50c08f72c0456ac9531d4610394ead00",
          "body": "…rom git ssh urls (#718)\n\nfixes a few ux issues here",
          "is_bot": false,
          "headline": "Fix ssh test preflight behaviors, and extract appropriate usernames f…",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2026-04-03T20:35:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "737c50a0550750135b517aa4e4abffd09e7985ae",
          "body": "Upgrade github.com/go-git/go-git/v5 from v5.16.5 to v5.17.1 to address\na security vulnerability where a maliciously crafted .idx file can cause\nasymmetric memory consumption, potentially leading to denial-of-service.\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>",
          "is_bot": true,
          "headline": "fix(deps): upgrade go-git to v5.17.1 to fix CVE (idx file DoS) (#717)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-04-01T17:34:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "187c1c525d24bb7d64fe12ba01b4a0444103bec4",
          "body": "Fixes security vulnerability: gRPC-Go authorization bypass via missing\nleading slash in :path pseudo-header. This is an authorization bypass\nresulting from improper input validation that allows attackers to\nbypass path-based authorization policies.\n\nCVE fix recommended upgrade from v1.79.1 to v1.79.3.\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>",
          "is_bot": true,
          "headline": "fix(deps): upgrade google.golang.org/grpc from v1.79.1 to v1.79.3 (#715)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-03-20T02:34:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1cf2dc3778e5ef95413ae0caab1265a2884122d6",
          "body": "* add service identifier parsing and retrieval functions\n\n* replace service identifier functions with a unified parsing approach\n\n* update service context handling to populate configuration map\n\n* rfactor Lua template handling and add bindings for service context\n\n* update Go modules to latest versi\n[…]\nnfiguration\n\n* update golangci-lint to version 9.2.0 and set latest version for linting\n\n* optimize slice initialization for better performance\n\n* update Go version from 1.25.8 to 1.26.1 in Dockerfile",
          "is_bot": false,
          "headline": "feat: Add `--service` option to `plural cd services lua` (#714)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2026-03-19T13:03:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "92d7afb5ec06eae57f8f484c8ed5ecbdcf14c055",
          "body": "…ity (#712)\n\nUpgrade Go stdlib to fix CVE related to HTML meta tag URL escaping.\nActions which insert URLs into the content attribute of HTML meta tags\nare not properly escaped, allowing XSS if the meta tag has an http-equiv\nattribute with the value \"refresh\".\n\nChanges:\n- Updated go.mod Go version from 1.25.7 to 1.25.8\n- Updated Dockerfile golang base images from 1.25.7-alpine3.22 to 1.25.8-alpine3.22\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>",
          "is_bot": true,
          "headline": "fix(security): upgrade Go from 1.25.7 to 1.25.8 to fix XSS vulnerabil…",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-03-18T19:27:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13e8ce964c0ca4516943dcf2ffc013e2f0121657",
          "body": "… to the latest version (#713)\n\n* use latest version of polly\n\n* implement dropdown selection for Azure DNS zones in domain setup\n\n* implement dropdown selection for AWS hosted zones in domain setup\n\n* remove redundant DNS zone selection logic for AWS and Azure\n\n* streamline GCP provider logic in DNS zone selection",
          "is_bot": false,
          "headline": "feat: Implement DNS zone selection for AWS and Azure and update polly…",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2026-03-18T13:15:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f479172aa254cb2483c4910aa2062f5620e01689",
          "body": "* add Docker Compose configuration for testing environment\n\n* update Dockerfile to use double quotes for ldflags\n\n* remove version specification from Docker Compose test configuration\n\n* rename Dockerfile for test configuration\n\n* remove commented-out Docker image publishing steps from goreleaser co\n[…]\nde test Dockerfile and Docker Compose files\n\n* remove unused Dockerfiles and related configurations\n\n* remove deprecated Makefile targets and update Docker Compose configuration\n\n* remove unused files",
          "is_bot": false,
          "headline": "chore: Add Docker Compose files and remove unused files (#711)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2026-03-10T07:57:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "64608a7a3bcc9cf20df5971850a305e6c171472b",
          "body": "Upgrades github.com/docker/cli from v28.1.1+incompatible to v29.2.0+incompatible\nto address CVE: Docker CLI Plugins Uncontrolled Search Path Element vulnerability\nthat leads to Local Privilege Escalation on Windows.\n\nThis fix addresses the vulnerability in docker image ghcr.io/pluralsh/console:sha-0c07f81.\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>",
          "is_bot": true,
          "headline": "fix(deps): upgrade github.com/docker/cli to v29.2.0 to fix CVE (#710)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-03-05T21:51:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53cf279fe39dbf64ec2666f0e47d9496c2af7595",
          "body": "Upgrade Go from v1.25.6 to v1.25.7 to fix crypto/tls session resumption\nvulnerability where ClientCAs/RootCAs mutations between initial and\nresumed handshakes could cause improper session resumption.\n\nFiles updated:\n- go.mod: Updated go directive to 1.25.7\n- Dockerfile: Updated both builder and final stage images\n- dockerfiles/Dockerfile.cloud: Updated builder stage image\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>",
          "is_bot": true,
          "headline": "fix(security): upgrade Go to 1.25.7 to address crypto/tls CVE (#709)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-02-25T16:36:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d908767fa16b35eeb1ed1441bd4006722760020",
          "body": "* upgrade golang.org/x dependencies\n\n* upgrade github.com/docker/docker dependency\n\n* upgrade go-git and related dependencies\n\n* upgrade dependencies by removing deprecated and obsolete entries from go.sum and go.mod\n\n* upgrade github.com/containerd/containerd\n\n* upgrade dependencies by removing obsolete entries from go.sum\n\n* upgrade dependencies and clean up go.mod and go.sum entries\n\n* upgrade dependencies in go.mod and go.sum\n\n* upgrade dependencies in go.mod and go.sum",
          "is_bot": false,
          "headline": "chore: Quarterly security review cleanup (#708)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2026-02-23T15:59:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f11ffc0ccb221b2ac351f1afaedd7ea02be88c83",
          "body": "This should make it easier to model the conditional logic across clouds",
          "is_bot": false,
          "headline": "Use new split config secrets format (#707)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2026-02-17T19:24:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "274ab39431a640908a76d788726e9095322e45cf",
          "body": null,
          "is_bot": false,
          "headline": "conditionally prune GCP resources in plural up (#704)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2026-02-17T17:48:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d7fec68d8c653415336bb193a32aa9383a744a6",
          "body": "self-descriptive",
          "is_bot": false,
          "headline": "Add govcloud regions for aws (#706)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2026-02-17T17:29:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d1dcf31c9e75bf6fd92bd0fc8bea4e8877b6bda",
          "body": null,
          "is_bot": false,
          "headline": "set default cluster selection only when it is not empty (#705)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2026-02-17T17:06:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3fdd94d66a4aadc2755b6ed6cfd56770c55f60c7",
          "body": null,
          "is_bot": false,
          "headline": "do not filter create new resource option in surveys (#703)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2026-02-13T13:40:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa0a1b197ef45cc01107a5b4e7f6212704daeb73",
          "body": null,
          "is_bot": false,
          "headline": "fix choseCluster() from silently returning on hostname match (#702)",
          "author_name": "JohnBlackwell",
          "author_login": "JohnBlackwell",
          "committed_at": "2026-02-12T21:48:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9db0ab9efc4cbf663db2969963818470a2a1860d",
          "body": "* remove unused function and related tests\n\n* update function to remove unused parameter\n\n* extract functions to ensure Git attributes and ignore files\n\n* do not initialize crypto during initialization\n\n* remove unused parameters\n\n* do not back up key during initialization\n\n* do not generate key fin\n[…]\nup\n\n* add kubernetes secret fields to prune removal list\n\n* add user email to template context\n\n* fetch console values template in generate step\n\n* add kubernetes namespace infra to prune removal list",
          "is_bot": false,
          "headline": "feat: Refactor plural up to no longer use git crypt (#700)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2026-02-11T15:03:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "612d9f2dacaf14255354ef5a1760938d74aa0d43",
          "body": "* plural up fixes wip\n\n* use zone name for only gcp\n\n* add guardrail for nil context\n\n* refactor fetching project further upstream",
          "is_bot": false,
          "headline": "Fix gcp plural up bugs (#699)",
          "author_name": "JohnBlackwell",
          "author_login": "JohnBlackwell",
          "committed_at": "2026-02-05T17:02:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74cf4c5c076ef2365d11297cde98959314264bd0",
          "body": "Upgrades Go from 1.25.5 to 1.25.6 to fix the security vulnerability\nin the archive/zip package that could cause excessive CPU consumption\nwhen building archive index (CVE in golang stdlib).\n\nChanges:\n- Update go.mod to require Go 1.25.6\n- Update Dockerfile base images from golang:1.25-alpine3.21 to\n\n[…]\nne3.22 (alpine3.21 not available for Go 1.25.6)\n- Update dockerfiles/Dockerfile.cloud similarly\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "fix(security): upgrade Go to 1.25.6 to address archive/zip CVE (#698)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-02-01T21:38:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cecabd745eb8fe990851da88d2ac338b021d3bd1",
          "body": "…22868 (#697)\n\nThis commit updates the containerd dependency from v1.7.27 to v1.7.29\nto fix a local privilege escalation vulnerability.\n\nCVE: CVE-2025-22868 (containerd local privilege escalation)\n- Directory paths /var/lib/containerd, /run/containerd/io.containerd.grpc.v1.cri\n  and /run/containerd/\n[…]\ngo.mod replace directive from v1.7.27 to v1.7.29\n- Updated go.sum checksums for the new version\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "fix(deps): upgrade containerd v1.7.27 to v1.7.29 to address CVE-2025-…",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-01-30T19:59:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0ea845a1d899c61a98e950ecc2ed83a068dc07f4",
          "body": null,
          "is_bot": false,
          "headline": "bump plural go client (#696)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2026-01-30T12:02:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "122e983f32353a9228789d43be07f36aa489ee62",
          "body": "* add byok for cloud settings\n\n* linter",
          "is_bot": false,
          "headline": "add byok for cloud settings (#694)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2026-01-29T07:55:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22e2db1779a0277c48d9effe037345dbc4ef85f2",
          "body": "Upgrade Go version from 1.25.1 to 1.25.5 to fix vulnerability:\n- crypto/x509: Denial of Service due to excessive resource consumption\n  via crafted certificate (HostnameError.Error() quadratic runtime)\n\nChanges:\n- Updated go.mod from go 1.25.1 to go 1.25.5\n- Updated dockerfiles/Dockerfile.cloud from\n[…]\no golang:1.25-alpine3.21\n\nThe Dockerfile was already using golang:1.25-alpine3.21 which will\npull the latest patch version (1.25.5) containing the fix.\n\nCo-authored-by: Michael Guarino <mjg@plural.sh>",
          "is_bot": true,
          "headline": "fix(security): upgrade Go to 1.25.5 to address CVE in crypto/x509 (#695)",
          "author_name": "plural-copilot[bot]",
          "author_login": "plural-copilot[bot]",
          "committed_at": "2026-01-28T22:20:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0419fa54a8dad85342b8bae321df0c8bb2215d59",
          "body": null,
          "is_bot": false,
          "headline": "fix CLI crash (#693)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2026-01-21T16:03:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53a885f3f16894de6a9f292f376616233e765250",
          "body": "This is no longer even used, and apparently can cause some weird interactions w/ --ignore-preflights",
          "is_bot": false,
          "headline": "`plural up` shouldn't choke on availability zones missing (#692)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2026-01-16T15:32:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "520f5a030f7fe1ec9d65dc01274e5debdba8419b",
          "body": "This is still attempting a full repo generation and a lot of that stuff, which is probably not desired in this case.",
          "is_bot": false,
          "headline": "Simplify `plural up --dry-run` (#691)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2026-01-10T01:16:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e10a3ec1412d208f90557565081280b9cc0a9912",
          "body": "This is breaking self-installs for the deployment operator.",
          "is_bot": false,
          "headline": "Remove cluster-id requirement from cd install command (#690)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2026-01-05T21:57:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e22ae0a7f1eac68881afbf3fc33a85059b31a17d",
          "body": null,
          "is_bot": false,
          "headline": "bump polly to v0.3.7 (#689)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2025-12-19T20:29:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "171c3491542c6cce5ad6ba02fe22323974a7a507",
          "body": "need to template the fields of the helm spec, and slight naming changes",
          "is_bot": false,
          "headline": "Improve vendoring implementation (#688)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-12-12T18:08:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "884ca174e7115766102b1b8bc61473b290112c2c",
          "body": "* pr automation helm vendor support\n\n* remove config dir\n\n* linter\n\n* don't delete tarball",
          "is_bot": false,
          "headline": "feat: pr automation helm vendor support (#687)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2025-12-12T15:19:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ffd61632658592313d03046e03ce205ef57a9a30",
          "body": "this can cause confusion and makes the lua integration trickier",
          "is_bot": false,
          "headline": "Deprecate snake case json for PrTemplate object (#686)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-12-10T20:11:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9dd780b197b99b129eafa3dfdc39b9e936861cf",
          "body": "This still wasn't fully working, added a mirror type so that it looks a lot closer to what users expect",
          "is_bot": false,
          "headline": "Fix lua preprocessing for pr automations (#685)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-12-10T07:10:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6441ac140bd17b408b5364b0a0c1a7079149b564",
          "body": null,
          "is_bot": false,
          "headline": "e2e test and fix pr automation lua parsing (#684)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2025-12-09T14:18:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2341dc4c86894d13bc166eefd9d2ba5770933a04",
          "body": "hitting another no disk space free error on release here",
          "is_bot": false,
          "headline": "Try freeing disk space for goreleaser (#683)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-12-04T18:18:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4556e921018991203551e3a29ef4ad2d0334bb8",
          "body": "This should give users tons of control to create very elaborate pr automations as much as they need. Basically specify a set of lua scripts which act on the state of an existing repo, and can amend the base pr automation with additional configs.",
          "is_bot": false,
          "headline": "Implement lua pr automation preprocessing (#682)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-12-04T16:39:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6130beff61158ca869ad4935ffcf64bcff42dd9a",
          "body": "This will allow lua library files to be tested appropriately",
          "is_bot": false,
          "headline": "Add support for lua dir in `plural cd services lua` (#681)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-11-06T16:09:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32415b2160d3a48592564b759395c3b217a5f83e",
          "body": "* feat(gcp): refactor GCP provider to use only new Google SDK, do not use gcloud binary, streamline GCP provider and client interaction, refactor survey to input provider interface\n\n* feat(gcp): add method to fetch logged-in user's email and name using Google OAuth2 API\n\n* feat(auth): enhance user info logging\n\n* fix(provider): move user info printing to WithConfig function\n\n* fix: lint",
          "is_bot": false,
          "headline": "fix(gcp): refactor and improve GCP provider (#679)",
          "author_name": "Sebastian Florek",
          "author_login": "floreks",
          "committed_at": "2025-11-06T15:55:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2564e9ee78b2e3845f919e1c3dbbc6482f8ca592",
          "body": null,
          "is_bot": false,
          "headline": "bump polly to v0.3.5 (#680)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2025-11-04T14:54:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51072e760bbf731fa02f8397208a814298d2406e",
          "body": "* add Git SSH preflight checks\n\n* fix message format",
          "is_bot": false,
          "headline": "feat: Add Git SSH preflight checks (#677)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2025-11-03T16:14:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f731483116a0332a96b2a56cb8e7ba77ad5ec224",
          "body": "* cli improvments\n\n* change err msg\n\n* gen mocks\n\n* linter\n\n* linter",
          "is_bot": false,
          "headline": "cli improvments (#678)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2025-11-03T16:05:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82d1e1656beaed93707261876bf66a9073252149",
          "body": "…nstead of input in the survey (#673)\n\n* query resource groups and storage accounts\n\n* allow creating new group and account\n\n* add validation",
          "is_bot": false,
          "headline": "feat: Query resource groups and storage accounts and display select i…",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2025-11-03T09:54:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5daff86291bc872857158b7bfac2483f38077947",
          "body": "* fix: existing repo setup doesn't ask for ssh key\n\n* verify key\n\n* improve error msg",
          "is_bot": false,
          "headline": "fix: existing repo setup doesn't ask for ssh key (#674)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2025-11-03T06:52:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "058793ff3800086159561bde014094ef634650bc",
          "body": "* auto-detect correct console instance with plural up --cloud\n\n* don't ask for the cluster",
          "is_bot": false,
          "headline": "auto-detect correct console instance with `plural up --cloud` (#676)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2025-10-31T15:00:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "616f8d998c94adc56272913c6c6b907b93fecdf4",
          "body": "* show azure account\n\n* show signed-in user\n\n* show aws caller identity\n\n* show aws profile",
          "is_bot": false,
          "headline": "feat: Show cloud identity being currently used (#675)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2025-10-31T14:24:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99f8d41520a03e69f67090e6d5b122ee3623d374",
          "body": "* add clusterId helm value to the agent installation\n\n* make cluster-id optional",
          "is_bot": false,
          "headline": "feat: add clusterId helm value to the agent installation (#671)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2025-10-30T20:16:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "535726818d4263c57dab9c21e485020127c211e4",
          "body": "check if version is nil then derefed current version",
          "is_bot": false,
          "headline": "Fix current version crash (#672)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-10-30T20:09:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbc3cb42128fcf0ef0af6ffd2fe0a08576515721",
          "body": "We were probably being too delicate and should just overwrite these files each run of plural up",
          "is_bot": false,
          "headline": "`plural up` generate fixes (#666)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-10-06T16:43:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68af4bdd0c25f427d7ee0413eeaa6184940e0621",
          "body": null,
          "is_bot": false,
          "headline": "bump polly to v0.3.3 (#669)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2025-10-06T16:41:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e11d03670734ff08c025fc74545590cf47ca063",
          "body": "* add metadata support\n\n* update clusters reinstall\n\n* add PersistedQueryInterceptor to the go client\n\n* fix linter version\n\n* update Dockerfile\n\n* update Dockerfile",
          "is_bot": false,
          "headline": "add metadata support (#668)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2025-10-03T13:50:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66d71f208d9a2b46f6633c3a2d1f6d1ec3c5b7ca",
          "body": null,
          "is_bot": false,
          "headline": "plural cd clusters kubeconfig should show a select if no args (#667)",
          "author_name": "Lukasz Zajaczkowski",
          "author_login": "zreigz",
          "committed_at": "2025-10-02T14:15:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22f35efc97d20ac78c711ada3a3b693a6f3b95fd",
          "body": "This is useful if you just want to generate the repo but not deploy out of it yet.",
          "is_bot": false,
          "headline": "Add dry run behavior to plural up (#665)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-09-15T14:33:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4aa44a5797bdb67aae2a91496cc11b2b0e32061d",
          "body": "This should make it more clear that we currently only support ssh clones for the plural up process",
          "is_bot": false,
          "headline": "Clarify git ssh error message (#664)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-09-10T22:42:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "184ff00903e1c96621c7cfaf68d1393e104f7518",
          "body": "I think the slice deep copy behavior has some goofy side-effects",
          "is_bot": false,
          "headline": "Fix mergo configs (#663)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-08-28T17:53:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "41857f34117fb5e9e9cc1f7ed1a79b1bb3ac705f",
          "body": "…rsion (#662)",
          "is_bot": false,
          "headline": "fix(cd): update cluster provider handling to use Distro and CurrentVe…",
          "author_name": "Sebastian Florek",
          "author_login": "floreks",
          "committed_at": "2025-08-19T15:42:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7ea70896f22182f9d31c54e39f0e9b328e8046b",
          "body": "* add new command\n\n* parse args ang fetch deploy token\n\n* build tarball url\n\n* download and untar\n\n* add emptiness check\n\n* update default dir\n\n* fix linter",
          "is_bot": false,
          "headline": "feat: add `plural cd services tarball` command (#661)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2025-08-18T14:15:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a21b9e78ea7c9e05438e4d35036e8e4a4ff7860",
          "body": "Should terminate w/ the checkpoint",
          "is_bot": false,
          "headline": "Fix prune process for cloud (#660)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-08-12T21:24:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04085a168a9b0f994d5dba32abe91806001c3f47",
          "body": "This will allow for some hard-to-make-idempotent operations dedupe along the setup flow",
          "is_bot": false,
          "headline": "Add checkpointing to plural up (#659)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-08-01T15:13:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "842ea58ac440b4d78f4dc3308cc2ac04daedc44b",
          "body": "I'm not sure why the ordering was the other way around tbh, but this allows you to create then overlay a file in one pra",
          "is_bot": false,
          "headline": "Apply creates before updates (#658)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-07-30T15:44:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74acec66f3c8134371b61dacc02dcb9f43e50934",
          "body": null,
          "is_bot": false,
          "headline": "implement pr trigger (#657)",
          "author_name": "Kinjal Haldar",
          "author_login": "kinjalh",
          "committed_at": "2025-07-29T17:29:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bcc03c1ee116f0e49b260dec91b0e5a1b83ab4a9",
          "body": "* switch func that generates erlang secret\n\n* remove redundant type\n\n* double erlang secret size",
          "is_bot": false,
          "headline": "fix: Switch func that generates erlang secret (#656)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2025-07-22T14:46:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2381504f874ddedfbbf5d1a68433b3b191df27b1",
          "body": null,
          "is_bot": false,
          "headline": "fix AWS context (#655)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2025-07-16T13:32:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "884aff1d1459a4152f42fb31044f4d297d19880d",
          "body": "This removes the likelihood of a prior deleted cloud instance's state bucket conflicting with a new one's",
          "is_bot": false,
          "headline": "Add rand string to plural cloud mgmt cluster bucket",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-07-14T15:11:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4e89dc8f7d4146e99adf82c57abccb20b1239a8",
          "body": "* add func to retrieve caller identity\n\n* add iam session to aws context\n\n* use terraform-provider-aws RoleNameSessionFromARN func",
          "is_bot": false,
          "headline": "feat: Add in original IAM session to AWS templating context (#653)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2025-07-12T18:11:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f24097b4be5f5b542f6f164694c2c2e28fa0fce7",
          "body": "* remove redundant scope\n\n* ensure a trailing dot is added",
          "is_bot": false,
          "headline": "fix: Fix managed zones issues (#654)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2025-07-12T18:10:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90f9462198f5459047b46fd8545394c580658985",
          "body": "* validate aws\n\n* add region to fix the api call\n\n* use actual region\n\n* validate azure\n\n* fix azure args\n\n* refactor",
          "is_bot": false,
          "headline": "feat: Add DNS domain checks for AWS and Azure (#651)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2025-07-10T12:33:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf3671e7204162d5f1e1c527408db37875c86ea5",
          "body": "just makes it a bit more clear",
          "is_bot": false,
          "headline": "`plural up` commit msg fix (#650)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-07-10T02:44:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6025ccf4258c34e74b510392f887bdd65af4bfed",
          "body": "* update app domain prompt\n\n* add func to list managed zones\n\n* update func to list managed zones\n\n* update func to list managed zones\n\n* save managed zone in context\n\n* use contains to filter\n\n* use equals to filter",
          "is_bot": false,
          "headline": "feat: Save managed zone name in project context (#649)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2025-07-09T13:33:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e03f18fb4e40a9a27c3b512bb8462a2ea86325f6",
          "body": "…AppDomain (#646)\n\n* fix(up.yml): use sudo for DNS override commands in e2e setup\n\n* fix: improve app domain prompt and handling\n\n* fix(e2e): add option to skip app domain during deployment",
          "is_bot": false,
          "headline": "fix(e2e): use sudo for DNS override commands in e2e setup and fix ask…",
          "author_name": "Sebastian Florek",
          "author_login": "floreks",
          "committed_at": "2025-07-08T07:38:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c94c5f4ff1e122394c86b5ed2788595c2557cb6",
          "body": "* gcp preflights false positive too much\n* need to import sprig to handle the gcp templates",
          "is_bot": false,
          "headline": "Fix bugs in plural up (#648)",
          "author_name": "michaeljguarino",
          "author_login": "michaeljguarino",
          "committed_at": "2025-07-07T21:13:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9e05d1cb1bb71d26674f1a43daca7cdbffde677",
          "body": "* remove iam.serviceAccounts.getAccessToken preflight check\n\n* remove iam.serviceAccounts.setIamPolicy preflight check",
          "is_bot": false,
          "headline": "fix: Remove iam.serviceAccounts.getAccessToken preflight check (#647)",
          "author_name": "Marcin Maciaszczyk",
          "author_login": "maciaszczykm",
          "committed_at": "2025-07-07T21:13:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 89,
      "latest_release_at": "2026-07-18T00:07:16Z",
      "latest_release_tag": "v0.12.59",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 36,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 8
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/pluralsh/plural-cli",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/pluralsh/plural-cli",
          "is_deprecated": false,
          "latest_version": "v0.12.59",
          "repository_url": "https://github.com/pluralsh/plural-cli",
          "versions_count": 212,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-16T20:28:11Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 6
        }
      ]
    },
    "popularity": {
      "forks": 9,
      "stars": 28,
      "watchers": 7,
      "fork_history": {
        "days": [
          {
            "date": "2022-04-13",
            "count": 1
          },
          {
            "date": "2022-07-06",
            "count": 1
          },
          {
            "date": "2022-08-08",
            "count": 1
          },
          {
            "date": "2022-11-05",
            "count": 1
          },
          {
            "date": "2023-03-18",
            "count": 1
          },
          {
            "date": "2023-05-02",
            "count": 1
          },
          {
            "date": "2023-07-03",
            "count": 1
          },
          {
            "date": "2023-11-10",
            "count": 1
          },
          {
            "date": "2024-09-03",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 9,
        "total_forks": 9
      },
      "star_history": null,
      "open_issues_and_prs": 74
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 37982,
      "source_files_sampled": 232,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": true,
            "version": "v1.82.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 1,
            "oldest_advisory_days": 1
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.53.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 15
          },
          {
            "name": "github.com/containerd/containerd",
            "direct": false,
            "version": "v1.7.33",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5064",
              "GO-2026-5338",
              "GO-2026-5622"
            ],
            "fixed_version": "2.3.2",
            "advisory_count": 3,
            "oldest_advisory_days": 30
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 2,
          "critical": 1
        },
        "advisory_count": 5,
        "affected_count": 3,
        "assessed_count": 339,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 2
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "cloud.google.com/go/compute",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.64.0"
        },
        {
          "name": "cloud.google.com/go/container",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.53.0"
        },
        {
          "name": "cloud.google.com/go/resourcemanager",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.15.0"
        },
        {
          "name": "cloud.google.com/go/serviceusage",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.14.0"
        },
        {
          "name": "cloud.google.com/go/storage",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.63.0"
        },
        {
          "name": "dario.cat/mergo",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.2"
        },
        {
          "name": "filippo.io/age",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.1"
        },
        {
          "name": "github.com/AlecAivazis/survey/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.3.7"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.22.0"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.14.0"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/dns/armdns",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.1"
        },
        {
          "name": "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/subscription/armsubscription",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.0"
        },
        {
          "name": "github.com/Azure/azure-storage-blob-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.15.0"
        },
        {
          "name": "github.com/Masterminds/sprig/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.3.0"
        },
        {
          "name": "github.com/YakDriver/regexache",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.25.0"
        },
        {
          "name": "github.com/Yamashou/gqlgenc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.33.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.42.1"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/iam",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.55.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/route53",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.64.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/sts",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.44.0"
        },
        {
          "name": "github.com/briandowns/spinner",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.23.2"
        },
        {
          "name": "github.com/chartmuseum/helm-push",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.11.1"
        },
        {
          "name": "github.com/fatih/color",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.0"
        },
        {
          "name": "github.com/go-git/go-git/v5",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.19.1"
        },
        {
          "name": "github.com/gofrs/flock",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.13.0"
        },
        {
          "name": "github.com/google/go-containerregistry",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.21.7"
        },
        {
          "name": "github.com/google/go-github/v45",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v45.2.0"
        },
        {
          "name": "github.com/hashicorp/go-bexpr",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.1.16"
        },
        {
          "name": "github.com/ktrysmt/go-bitbucket",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.10.0"
        },
        {
          "name": "github.com/likexian/doh",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.7.1"
        },
        {
          "name": "github.com/mikesmitty/edkey",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20170222072505-3356ea4e686a"
        },
        {
          "name": "github.com/mitchellh/go-homedir",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.0"
        },
        {
          "name": "github.com/mitchellh/mapstructure",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.5.1-0.20231216201459-8508981c8b6c"
        },
        {
          "name": "github.com/olekukonko/tablewriter",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.4"
        },
        {
          "name": "github.com/pkg/browser",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20240102092130-5ac0b6a4141c"
        },
        {
          "name": "github.com/pluralsh/console/go/client",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.76.5"
        },
        {
          "name": "github.com/pluralsh/console/go/polly",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/pluralsh/gqlclient",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.12.2"
        },
        {
          "name": "github.com/pluralsh/plural-operator",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.6.0"
        },
        {
          "name": "github.com/pluralsh/polly",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.8"
        },
        {
          "name": "github.com/posthog/posthog-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.17.5"
        },
        {
          "name": "github.com/samber/lo",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.53.0"
        },
        {
          "name": "github.com/urfave/cli",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.22.17"
        },
        {
          "name": "github.com/yuin/gopher-lua",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.2"
        },
        {
          "name": "gitlab.com/gitlab-org/api/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.46.0"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.53.0"
        },
        {
          "name": "golang.org/x/oauth2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.0"
        },
        {
          "name": "google.golang.org/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.287.0"
        },
        {
          "name": "google.golang.org/grpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.82.0"
        },
        {
          "name": "gopkg.in/yaml.v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "gotest.tools/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.5.1"
        },
        {
          "name": "helm.sh/helm/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.21.2"
        },
        {
          "name": "k8s.io/api",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.2"
        },
        {
          "name": "k8s.io/apimachinery",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.2"
        },
        {
          "name": "k8s.io/client-go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.2"
        },
        {
          "name": "sigs.k8s.io/controller-runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.24.1"
        },
        {
          "name": "sigs.k8s.io/yaml",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "cloud.google.com/go/iam",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.0"
        },
        {
          "name": "github.com/Masterminds/semver/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.5.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/config",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.32.28"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/ec2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.312.0"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/s3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.105.0"
        },
        {
          "name": "github.com/evanphx/json-patch",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.9.11+incompatible"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/json-iterator/go",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.12"
        },
        {
          "name": "github.com/oleiade/reflections",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.0"
        },
        {
          "name": "github.com/pkg/errors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.1"
        },
        {
          "name": "github.com/pluralsh/console/go/controller",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260706120905-5f6ff115eb71"
        },
        {
          "name": "github.com/pluralsh/oauth",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.2"
        },
        {
          "name": "github.com/schollz/progressbar/v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.19.1"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.44.0"
        },
        {
          "name": "golang.org/x/text",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.39.0"
        },
        {
          "name": "k8s.io/cli-runtime",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.2"
        },
        {
          "name": "k8s.io/helm",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.17.0+incompatible"
        },
        {
          "name": "k8s.io/kubectl",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.36.2"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "cloud.google.com/go/compute",
            "direct": true,
            "version": "v1.64.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/container",
            "direct": true,
            "version": "v1.53.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/iam",
            "direct": true,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/resourcemanager",
            "direct": true,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/serviceusage",
            "direct": true,
            "version": "v1.14.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/storage",
            "direct": true,
            "version": "v1.63.0",
            "ecosystem": "go"
          },
          {
            "name": "dario.cat/mergo",
            "direct": true,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "filippo.io/age",
            "direct": true,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/alecaivazis/survey/v2",
            "direct": true,
            "version": "v2.3.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": true,
            "version": "v1.42.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": true,
            "version": "v1.32.28",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ec2",
            "direct": true,
            "version": "v1.312.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/iam",
            "direct": true,
            "version": "v1.55.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/route53",
            "direct": true,
            "version": "v1.64.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/s3",
            "direct": true,
            "version": "v1.105.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sts",
            "direct": true,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/azcore",
            "direct": true,
            "version": "v1.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/azidentity",
            "direct": true,
            "version": "v1.14.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/resourcemanager/dns/armdns",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage",
            "direct": true,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/resourcemanager/subscription/armsubscription",
            "direct": true,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-storage-blob-go",
            "direct": true,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/briandowns/spinner",
            "direct": true,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/chartmuseum/helm-push",
            "direct": true,
            "version": "v0.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch",
            "direct": true,
            "version": "v5.9.11+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fatih/color",
            "direct": true,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-git/v5",
            "direct": true,
            "version": "v5.19.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofrs/flock",
            "direct": true,
            "version": "v0.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-containerregistry",
            "direct": true,
            "version": "v0.21.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-github/v45",
            "direct": true,
            "version": "v45.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-bexpr",
            "direct": true,
            "version": "v0.1.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": true,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ktrysmt/go-bitbucket",
            "direct": true,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/likexian/doh",
            "direct": true,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": true,
            "version": "v3.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/sprig/v3",
            "direct": true,
            "version": "v3.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mikesmitty/edkey",
            "direct": true,
            "version": "v0.0.0-20170222072505-3356ea4e686a",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-homedir",
            "direct": true,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/mapstructure",
            "direct": true,
            "version": "v1.5.1-0.20231216201459-8508981c8b6c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/oleiade/reflections",
            "direct": true,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/olekukonko/tablewriter",
            "direct": true,
            "version": "v1.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/browser",
            "direct": true,
            "version": "v0.0.0-20240102092130-5ac0b6a4141c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": true,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pluralsh/console/go/client",
            "direct": true,
            "version": "v1.76.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pluralsh/console/go/controller",
            "direct": true,
            "version": "v0.0.0-20260706120905-5f6ff115eb71",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pluralsh/console/go/polly",
            "direct": true,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pluralsh/gqlclient",
            "direct": true,
            "version": "v1.12.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pluralsh/oauth",
            "direct": true,
            "version": "v0.9.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pluralsh/plural-operator",
            "direct": true,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pluralsh/polly",
            "direct": true,
            "version": "v0.3.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/posthog/posthog-go",
            "direct": true,
            "version": "v1.17.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/samber/lo",
            "direct": true,
            "version": "v1.53.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/schollz/progressbar/v3",
            "direct": true,
            "version": "v3.19.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/urfave/cli",
            "direct": true,
            "version": "v1.22.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yakdriver/regexache",
            "direct": true,
            "version": "v0.25.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yamashou/gqlgenc",
            "direct": true,
            "version": "v0.33.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yuin/gopher-lua",
            "direct": true,
            "version": "v1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "gitlab.com/gitlab-org/api/client-go",
            "direct": true,
            "version": "v1.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.53.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": true,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": true,
            "version": "v0.44.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": true,
            "version": "v0.39.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/api",
            "direct": true,
            "version": "v0.287.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": true,
            "version": "v1.82.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": true,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "gotest.tools/v3",
            "direct": true,
            "version": "v3.5.1",
            "ecosystem": "go"
          },
          {
            "name": "helm.sh/helm/v3",
            "direct": true,
            "version": "v3.21.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": true,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": true,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/cli-runtime",
            "direct": true,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": true,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/helm",
            "direct": true,
            "version": "v2.17.0+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kubectl",
            "direct": true,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/controller-runtime",
            "direct": true,
            "version": "v0.24.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "cel.dev/expr",
            "direct": false,
            "version": "v0.25.2",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go",
            "direct": false,
            "version": "v0.123.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/auth/oauth2adapt",
            "direct": false,
            "version": "v0.2.8",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/compute/metadata",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/longrunning",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "cloud.google.com/go/monitoring",
            "direct": false,
            "version": "v1.29.0",
            "ecosystem": "go"
          },
          {
            "name": "filippo.io/edwards25519",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "filippo.io/hpke",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/99designs/gqlgen",
            "direct": false,
            "version": "v0.17.93",
            "ecosystem": "go"
          },
          {
            "name": "github.com/adalogics/go-fuzz-headers",
            "direct": false,
            "version": "v0.0.0-20240806141605-e8a1dd7889d6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/andybalholm/brotli",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/asaskevich/govalidator",
            "direct": false,
            "version": "v0.0.0-20230301143203-a9d515a09cc2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
            "direct": false,
            "version": "v1.7.14",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": false,
            "version": "v1.19.27",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
            "direct": false,
            "version": "v1.18.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
            "direct": false,
            "version": "v1.4.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
            "direct": false,
            "version": "v2.7.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
            "direct": false,
            "version": "v1.4.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
            "direct": false,
            "version": "v1.13.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
            "direct": false,
            "version": "v1.9.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
            "direct": false,
            "version": "v1.13.30",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
            "direct": false,
            "version": "v1.19.31",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/signin",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sso",
            "direct": false,
            "version": "v1.32.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
            "direct": false,
            "version": "v1.37.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/smithy-go",
            "direct": false,
            "version": "v1.27.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-pipeline-go",
            "direct": false,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/internal",
            "direct": false,
            "version": "v1.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-ansiterm",
            "direct": false,
            "version": "v0.0.0-20250102033503-faa5f7b0171c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-autorest/autorest/adal",
            "direct": false,
            "version": "v0.9.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azuread/microsoft-authentication-library-for-go",
            "direct": false,
            "version": "v1.7.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/blang/semver/v4",
            "direct": false,
            "version": "v4.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/burntsushi/toml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff",
            "direct": false,
            "version": "v2.2.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/chai2010/gettext-go",
            "direct": false,
            "version": "v1.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cihub/seelog",
            "direct": false,
            "version": "v0.0.0-20170130134532-f561c5e57575",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cli/browser",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/displaywidth",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/uax29/v2",
            "direct": false,
            "version": "v2.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cloudflare/circl",
            "direct": false,
            "version": "v1.6.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cncf/xds/go",
            "direct": false,
            "version": "v0.0.0-20260202195803-dba9d589def2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/containerd",
            "direct": false,
            "version": "v1.7.33",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/log",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/platforms",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cpuguy83/go-md2man/v2",
            "direct": false,
            "version": "v2.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cyphar/filepath-securejoin",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/datadog-agent/comp/core/tagger/origindetection",
            "direct": false,
            "version": "v0.80.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/datadog-agent/pkg/obfuscate",
            "direct": false,
            "version": "v0.80.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/datadog-agent/pkg/opentelemetry-mapping-go/otlp/attributes",
            "direct": false,
            "version": "v0.80.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/datadog-agent/pkg/proto",
            "direct": false,
            "version": "v0.80.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/datadog-agent/pkg/remoteconfig/state",
            "direct": false,
            "version": "v0.80.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/datadog-agent/pkg/trace",
            "direct": false,
            "version": "v0.80.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/datadog-agent/pkg/trace/log",
            "direct": false,
            "version": "v0.80.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/datadog-agent/pkg/trace/stats",
            "direct": false,
            "version": "v0.80.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/datadog-agent/pkg/trace/traceutil",
            "direct": false,
            "version": "v0.80.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/datadog-go/v5",
            "direct": false,
            "version": "v5.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/dd-trace-go/v2",
            "direct": false,
            "version": "v2.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/go-libddwaf/v4",
            "direct": false,
            "version": "v4.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/go-runtime-metrics-internal",
            "direct": false,
            "version": "v0.0.4-0.20260217080614-b0f4edc38a6d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/go-sqllexer",
            "direct": false,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/go-tuf",
            "direct": false,
            "version": "v1.1.1-0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/datadog/sketches-go",
            "direct": false,
            "version": "v1.4.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/cli",
            "direct": false,
            "version": "v29.6.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker-credential-helpers",
            "direct": false,
            "version": "v0.9.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ebitengine/purego",
            "direct": false,
            "version": "v0.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emirpasic/gods",
            "direct": false,
            "version": "v1.18.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/go-control-plane/envoy",
            "direct": false,
            "version": "v1.37.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/envoyproxy/protoc-gen-validate",
            "direct": false,
            "version": "v1.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/evanphx/json-patch/v5",
            "direct": false,
            "version": "v5.9.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/exponent-io/jsonpath",
            "direct": false,
            "version": "v0.0.0-20210407135951-1de76d718b3f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ghodss/yaml",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-errors/errors",
            "direct": false,
            "version": "v1.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/gcfg",
            "direct": false,
            "version": "v1.5.1-0.20230307220236-3a3c6141e376",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-git/go-billy/v5",
            "direct": false,
            "version": "v5.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-gorp/gorp/v3",
            "direct": false,
            "version": "v3.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-jose/go-jose/v4",
            "direct": false,
            "version": "v4.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.24.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.21.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/cmdutils",
            "direct": false,
            "version": "v0.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/conv",
            "direct": false,
            "version": "v0.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/fileutils",
            "direct": false,
            "version": "v0.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/jsonutils",
            "direct": false,
            "version": "v0.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/loading",
            "direct": false,
            "version": "v0.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/mangling",
            "direct": false,
            "version": "v0.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/netutils",
            "direct": false,
            "version": "v0.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/stringutils",
            "direct": false,
            "version": "v0.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/typeutils",
            "direct": false,
            "version": "v0.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/yamlutils",
            "direct": false,
            "version": "v0.27.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gobwas/glob",
            "direct": false,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goccy/go-json",
            "direct": false,
            "version": "v0.10.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v5",
            "direct": false,
            "version": "v5.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/groupcache",
            "direct": false,
            "version": "v0.0.0-20241129210726-2c02b8208cf8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/btree",
            "direct": false,
            "version": "v1.1.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-querystring",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/s2a-go",
            "direct": false,
            "version": "v0.1.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/enterprise-certificate-proxy",
            "direct": false,
            "version": "v0.3.18",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googleapis/gax-go/v2",
            "direct": false,
            "version": "v2.22.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp",
            "direct": false,
            "version": "v1.33.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric",
            "direct": false,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping",
            "direct": false,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gosuri/uitable",
            "direct": false,
            "version": "v0.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/errwrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-cleanhttp",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-multierror",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-retryablehttp",
            "direct": false,
            "version": "v0.7.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-version",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru/arc/v2",
            "direct": false,
            "version": "v2.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/golang-lru/v2",
            "direct": false,
            "version": "v2.0.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/huandu/xstrings",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jbenet/go-context",
            "direct": false,
            "version": "v0.0.0-20150711004518-d14ea06fba99",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jmoiron/sqlx",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kballard/go-shellquote",
            "direct": false,
            "version": "v0.0.0-20180428030007-95032a82bc51",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kevinburke/ssh_config",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/cpuid/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kylelemons/godebug",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lann/builder",
            "direct": false,
            "version": "v0.0.0-20180802200727-47ae307949d0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lann/ps",
            "direct": false,
            "version": "v0.0.0-20150810152359-62de8c46ede0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lib/pq",
            "direct": false,
            "version": "v1.12.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/liggitt/tabwriter",
            "direct": false,
            "version": "v0.0.0-20181228230101-89fcab3d43de",
            "ecosystem": "go"
          },
          {
            "name": "github.com/likexian/gokit",
            "direct": false,
            "version": "v0.25.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/linkdata/deadlock",
            "direct": false,
            "version": "v0.5.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lufia/plan9stats",
            "direct": false,
            "version": "v0.0.0-20260627054121-477a66015f15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/makenowjust/heredoc",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/goutils",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/squirrel",
            "direct": false,
            "version": "v1.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-colorable",
            "direct": false,
            "version": "v0.1.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-ieproxy",
            "direct": false,
            "version": "v0.0.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.22",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.24",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mgutz/ansi",
            "direct": false,
            "version": "v0.0.0-20200706080929-d51e80ef957d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/minio/simdjson-go",
            "direct": false,
            "version": "v0.4.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/colorstring",
            "direct": false,
            "version": "v0.0.0-20190213212951-d06e56a500db",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/copystructure",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/go-wordwrap",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/pointerstructure",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/reflectwalk",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/term",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/monochromegane/go-gitignore",
            "direct": false,
            "version": "v0.0.0-20200626010858-205db1a8cc00",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/olekukonko/cat",
            "direct": false,
            "version": "v0.0.0-20250911104152-50322a0618f6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/olekukonko/errors",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/olekukonko/ll",
            "direct": false,
            "version": "v0.1.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/osteele/liquid",
            "direct": false,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/osteele/tuesday",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/outcaste-io/ristretto",
            "direct": false,
            "version": "v0.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/peterbourgon/diskv",
            "direct": false,
            "version": "v2.0.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/petermattis/goid",
            "direct": false,
            "version": "v0.0.0-20260701081913-4f67fd55d3b4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/philhofer/fwd",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pjbgf/sha1cd",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/planetscale/vtprotobuf",
            "direct": false,
            "version": "v0.6.1-0.20240319094008-0393e58bdf10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/power-devops/perfstat",
            "direct": false,
            "version": "v0.0.0-20240221224432-82ca36839d55",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "v1.23.3-0.20251103151724-a5ae20370e5e",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/protonmail/go-crypto",
            "direct": false,
            "version": "v1.4.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/puzpuzpuz/xsync/v3",
            "direct": false,
            "version": "v3.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.4.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rubenv/sql-migrate",
            "direct": false,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/russross/blackfriday/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/santhosh-tekuri/jsonschema/v6",
            "direct": false,
            "version": "v6.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/secure-systems-lab/go-securesystemslib",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sergi/go-diff",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shirou/gopsutil/v4",
            "direct": false,
            "version": "v4.26.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shopspring/decimal",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": false,
            "version": "v1.9.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/skeema/knownhosts",
            "direct": false,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sosodev/duration",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": false,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spiffe/go-spiffe/v2",
            "direct": false,
            "version": "v2.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/objx",
            "direct": false,
            "version": "v0.5.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tinylib/msgp",
            "direct": false,
            "version": "v1.6.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/go-sysconf",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/numcpus",
            "direct": false,
            "version": "v0.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/trailofbits/go-mutexasserts",
            "direct": false,
            "version": "v0.0.0-20250514102930-c1f3d2e37561",
            "ecosystem": "go"
          },
          {
            "name": "github.com/vektah/gqlparser/v2",
            "direct": false,
            "version": "v2.5.36",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xanzy/ssh-agent",
            "direct": false,
            "version": "v0.3.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonpointer",
            "direct": false,
            "version": "v0.0.0-20190905194746-02993c407bfb",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonreference",
            "direct": false,
            "version": "v0.0.0-20180127040603-bd5ef7bd5415",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xeipuuv/gojsonschema",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xlab/treeprint",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yusufpapurcu/wmi",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/collector/component",
            "direct": false,
            "version": "v1.62.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/collector/featuregate",
            "direct": false,
            "version": "v1.62.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/collector/pdata",
            "direct": false,
            "version": "v1.62.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/collector/pdata/pprofile",
            "direct": false,
            "version": "v0.156.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/detectors/gcp",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.69.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/log",
            "direct": false,
            "version": "v0.20.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/metric",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.44.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/atomic",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": false,
            "version": "v1.28.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.4",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20260611194520-c48552f49976",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.56.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/xerrors",
            "direct": false,
            "version": "v0.0.0-20240903120638-7835f813f4da",
            "ecosystem": "go"
          },
          {
            "name": "gomodules.xyz/jsonpatch/v2",
            "direct": false,
            "version": "v2.5.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto",
            "direct": false,
            "version": "v0.0.0-20260706201446-f0a921348800",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20260706201446-f0a921348800",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20260706201446-f0a921348800",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.12-0.20260120151049-f2248ac996af",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/warnings.v0",
            "direct": false,
            "version": "v0.1.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiextensions-apiserver",
            "direct": false,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apiserver",
            "direct": false,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/component-base",
            "direct": false,
            "version": "v0.36.2",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.140.0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": false,
            "version": "v0.0.0-20260706235625-cdb1db5517a0",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": false,
            "version": "v0.0.0-20260707023825-cf1189d6abe3",
            "ecosystem": "go"
          },
          {
            "name": "oras.land/oras-go/v2",
            "direct": false,
            "version": "v2.6.2",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20250730193827-2d320260d730",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/kustomize/api",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/kustomize/kyaml",
            "direct": false,
            "version": "v0.21.1",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.4.1",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 339,
        "direct_count": 80,
        "indirect_count": 259
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 53,
        "merged_prs": 605,
        "open_issues": 21,
        "closed_ratio": 0.462,
        "closed_issues": 18,
        "closed_unmerged_prs": 87
      },
      "bus_factor": 1,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "michaeljguarino",
          "commits": 683,
          "avatar_url": "https://avatars.githubusercontent.com/u/3838088?v=4"
        },
        {
          "type": "User",
          "login": "zreigz",
          "commits": 148,
          "avatar_url": "https://avatars.githubusercontent.com/u/13030040?v=4"
        },
        {
          "type": "User",
          "login": "davidspek",
          "commits": 90,
          "avatar_url": "https://avatars.githubusercontent.com/u/28541758?v=4"
        },
        {
          "type": "User",
          "login": "plural-bot",
          "commits": 64,
          "avatar_url": "https://avatars.githubusercontent.com/u/103043660?v=4"
        },
        {
          "type": "User",
          "login": "maciaszczykm",
          "commits": 63,
          "avatar_url": "https://avatars.githubusercontent.com/u/2823399?v=4"
        },
        {
          "type": "User",
          "login": "floreks",
          "commits": 35,
          "avatar_url": "https://avatars.githubusercontent.com/u/2285385?v=4"
        },
        {
          "type": "User",
          "login": "ycryptx",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/20160151?v=4"
        },
        {
          "type": "User",
          "login": "JohnBlackwell",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/22261650?v=4"
        },
        {
          "type": "User",
          "login": "kinjalh",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/30448446?v=4"
        },
        {
          "type": "User",
          "login": "avaidyanatha",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/33042053?v=4"
        }
      ],
      "contributors_sampled": 15,
      "top_contributor_share": 0.619
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yaml",
        "codeql.yml",
        "e2e.yaml",
        "edge.yaml",
        "goreleaser-cd.yml",
        "pr-labels.yaml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "29 out of 29 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 8,
            "reason": "Found 12/15 approved changesets -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 8 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "21 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 5,
            "reason": "5 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "b542720fec2ddd35531923beae729af2bae2a971",
        "ran_at": "2026-07-23T00:33:33Z",
        "aggregate_score": 6.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-22T00:41:25Z",
      "oldest_open_prs": [
        {
          "number": 80,
          "created_at": "2022-05-05T17:12:34Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 140,
          "created_at": "2022-08-02T09:15:08Z",
          "last_comment_at": "2022-11-16T11:02:52Z",
          "last_comment_author": "zreigz"
        },
        {
          "number": 164,
          "created_at": "2022-08-02T17:50:14Z",
          "last_comment_at": "2022-10-25T08:57:53Z",
          "last_comment_author": "plural-bot"
        },
        {
          "number": 268,
          "created_at": "2022-11-09T13:01:43Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 275,
          "created_at": "2022-11-09T20:19:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 312,
          "created_at": "2023-01-17T11:44:53Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 322,
          "created_at": "2023-01-31T14:07:50Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 364,
          "created_at": "2023-03-10T14:01:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 365,
          "created_at": "2023-03-10T14:02:36Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 366,
          "created_at": "2023-03-10T14:05:52Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 367,
          "created_at": "2023-03-10T14:34:41Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 418,
          "created_at": "2023-06-06T03:36:25Z",
          "last_comment_at": "2023-06-06T03:36:27Z",
          "last_comment_author": "plural-renovate"
        },
        {
          "number": 421,
          "created_at": "2023-07-04T13:38:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 427,
          "created_at": "2023-08-10T16:17:37Z",
          "last_comment_at": "2023-08-10T16:24:02Z",
          "last_comment_author": "michaeljguarino"
        },
        {
          "number": 434,
          "created_at": "2023-08-21T15:35:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 444,
          "created_at": "2023-09-06T10:41:56Z",
          "last_comment_at": "2023-09-06T14:17:53Z",
          "last_comment_author": "floreks"
        },
        {
          "number": 453,
          "created_at": "2023-09-26T07:44:57Z",
          "last_comment_at": "2024-07-03T21:54:42Z",
          "last_comment_author": "plural-renovate"
        },
        {
          "number": 454,
          "created_at": "2023-09-26T07:45:19Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 459,
          "created_at": "2023-09-28T08:43:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 463,
          "created_at": "2023-10-09T15:17:19Z",
          "last_comment_at": "2024-07-08T01:34:14Z",
          "last_comment_author": "plural-renovate"
        }
      ],
      "last_merged_pr_at": "2026-07-21T18:27:01Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 2,
          "created_at": "2021-10-08T09:55:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 7,
          "created_at": "2022-01-29T19:06:49Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 8,
          "created_at": "2022-01-29T19:08:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 9,
          "created_at": "2022-01-29T19:09:43Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 10,
          "created_at": "2022-01-29T19:11:36Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 13,
          "created_at": "2022-01-29T19:14:00Z",
          "last_comment_at": "2022-04-25T17:04:53Z",
          "last_comment_author": "davidspek"
        },
        {
          "number": 14,
          "created_at": "2022-01-29T19:15:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 18,
          "created_at": "2022-02-19T17:07:30Z",
          "last_comment_at": "2022-02-25T00:29:48Z",
          "last_comment_author": "michaeljguarino"
        },
        {
          "number": 20,
          "created_at": "2022-02-25T00:31:36Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 21,
          "created_at": "2022-02-25T19:37:01Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 23,
          "created_at": "2022-03-05T16:28:49Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 29,
          "created_at": "2022-03-15T08:55:37Z",
          "last_comment_at": "2022-04-02T15:30:21Z",
          "last_comment_author": "rauerhans"
        },
        {
          "number": 33,
          "created_at": "2022-03-30T23:51:33Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 39,
          "created_at": "2022-04-05T12:23:57Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 110,
          "created_at": "2022-07-05T16:25:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 225,
          "created_at": "2022-08-23T15:59:07Z",
          "last_comment_at": "2022-08-24T12:16:43Z",
          "last_comment_author": "rauerhans"
        },
        {
          "number": 243,
          "created_at": "2022-10-25T14:23:06Z",
          "last_comment_at": "2022-10-25T15:04:51Z",
          "last_comment_author": "walkingbrad"
        },
        {
          "number": 265,
          "created_at": "2022-11-09T12:58:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 413,
          "created_at": "2023-06-01T12:07:04Z",
          "last_comment_at": "2023-06-13T11:56:57Z",
          "last_comment_author": "floreks"
        },
        {
          "number": 551,
          "created_at": "2024-09-24T14:03:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/pluralsh/plural-cli",
    "host": "github.com",
    "name": "plural-cli",
    "owner": "pluralsh"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 70,
      "inputs": {
        "security": 67,
        "vitality": 92,
        "community": 45,
        "governance": 66,
        "engineering": 74
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 92,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 88,
            "inputs": {
              "commits_last_year": 89,
              "human_commit_share": 0.77,
              "days_since_last_push": 1,
              "active_weeks_last_year": 36
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "36/52 weeks with commits",
                "points": 24.9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 36
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "89 commits in the last year",
                "points": 17.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 89
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "21 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v0.12.59",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 8
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~8 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 8
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 1 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 45,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 35,
            "inputs": {
              "forks": 9,
              "stars": 28,
              "watchers": 7,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "28 stars",
                "points": 23.2,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 28
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "9 forks",
                "points": 7.5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "7 watchers",
                "points": 4.3,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 66,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 41,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 15,
              "top_contributor_share": 0.619
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 62% of commits",
                "points": 8.6,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 62
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "15 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 67,
            "inputs": {
              "merged_prs": 605,
              "open_issues": 21,
              "closed_issues": 18,
              "issue_closed_ratio": 0.462,
              "closed_unmerged_prs": 87
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "46% of issues closed",
                "points": 21.6,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 46
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "605/692 decided PRs merged",
                "points": 33.4,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 605,
                      "decided": 692
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 12/15 approved changesets -- score normalized to 8",
                "points": 12,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "followers": 85,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "pluralsh",
              "public_repos": 134,
              "account_age_days": 1929
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "85 followers of pluralsh",
                "points": 13.9,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 85,
                      "login": "pluralsh"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "134 public repos, account ~5 yr old",
                "points": 23.6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 134
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 5
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/pluralsh/plural-cli"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 6
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 6 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "212 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 212
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 74,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "6 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "29 out of 29 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "go",
                "golang",
                "cli"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "3 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 67,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 67,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 6.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "29 out of 29 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 12/15 approved changesets -- score normalized to 8",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "21 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "5 existing vulnerabilities detected",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 339 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 339
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 65,
            "inputs": {
              "source": "osv",
              "advisories": 5,
              "affected_packages": 3,
              "assessed_packages": 339,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, unknown 2",
              "direct_affected_packages": 2
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "2 affected: google.golang.org/grpc v1.82.0 (critical 9.1), golang.org/x/crypto v0.53.0 (unknown)",
                "points": 8.9,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 2,
                      "packages": "google.golang.org/grpc v1.82.0 (critical 9.1), golang.org/x/crypto v0.53.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 339,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 14
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 70,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.974,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "75 of 77 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 75,
                      "sampled": 77
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.05,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "5 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 5,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 37982,
              "source_files_sampled": 232,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/232 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 232,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T00:33:56.822034Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pluralsh/plural-cli.svg",
  "full_name": "pluralsh/plural-cli",
  "license_state": "standard",
  "license_spdx": "MIT"
}