prefeitura-rio / app-rmi

Full resolved dependency set from the GitHub dependency graph: 21 direct and 99 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 120 packages, which also include development and test pins that never ship: 10 carry known advisories, of which 4 are direct.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 42009,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 2199838,
        "Nix": 1652,
        "Just": 10662,
        "Shell": 84903,
        "Python": 18047,
        "Dockerfile": 1385,
        "JavaScript": 34640
      },
      "pushed_at": "2026-07-24T16:09:03Z",
      "created_at": "2025-05-16T18:24:26Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-24T16:09:43Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": null,
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://prefeitura.rio/",
      "name": "Prefeitura do Rio de Janeiro",
      "type": "Organization",
      "login": "prefeitura-rio",
      "company": null,
      "location": "Brazil",
      "followers": 352,
      "avatar_url": "https://avatars.githubusercontent.com/u/92761110?v=4",
      "created_at": "2021-10-18T22:02:14Z",
      "is_verified": null,
      "public_repos": 203,
      "account_age_days": 1742
    },
    "license": {
      "state": "absent",
      "spdx_id": null,
      "raw_spdx": null,
      "file_present": false,
      "scorecard_found": false,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.2.5",
          "kind": "patch",
          "published_at": "2026-07-24T16:09:05Z"
        },
        {
          "tag": "v0.2.4",
          "kind": "patch",
          "published_at": "2026-07-18T14:59:00Z"
        },
        {
          "tag": "v0.2.3",
          "kind": "patch",
          "published_at": "2026-07-18T14:35:11Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-05-07T16:48:35Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-04-09T21:51:56Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-04-09T21:23:00Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2026-03-23T16:25:41Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-03-23T13:18:54Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-01-27T15:47:53Z"
        },
        {
          "tag": "v0.0.3",
          "kind": "patch",
          "published_at": "2026-01-12T17:32:40Z"
        },
        {
          "tag": "v0.0.2",
          "kind": "patch",
          "published_at": "2026-01-12T17:14:36Z"
        },
        {
          "tag": "v0.0.1",
          "kind": "patch",
          "published_at": "2026-01-12T16:42:47Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "e56639ccf5617361577278312535f5d82ae6aee4",
          "body": "…min-role\n\nfix: reconhecer roles admin sob client id qualificado no resource_access do JWT",
          "is_bot": false,
          "headline": "Merge pull request #66 from prefeitura-rio/fix/jwt-resource-access-ad…",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-07-24T16:07:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44f4631c809d53261b86869b08da4b568adb1100",
          "body": "…ess do JWT\n\nO struct JWTClaims.ResourceAccess fixava a chave \"superapp\", mas o client real\ndo realm e \"superapp.apps.rio.gov.br\" (bate com o azp do token). O json.Unmarshal\nignorava a chave qualificada silenciosamente, deixando ResourceAccess.Superapp.Roles\nsempre vazio - entao RequireAdmin/Require\n[…]\n que so olhava realm_access)\n- handlers/legal_entity.go: checagem go:admin via HasRole\n- testes: fixtures passam a usar a chave real superapp.apps.rio.gov.br + novo teste\n  de regressao em jwt_test.go",
          "is_bot": false,
          "headline": "fix: reconhecer roles admin sob client id qualificado no resource_acc…",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-07-24T15:59:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0782bbd3ebdd6b54dc175b5721509bbe4a7b7f76",
          "body": "fix: stop CF lookup DLQ growth and harden wallet sync path",
          "is_bot": false,
          "headline": "Merge pull request #63 from prefeitura-rio/fix/cf-lookup-dlq-and-upsert",
          "author_name": "André Júnior",
          "author_login": "Andre1999Lopes",
          "committed_at": "2026-07-20T15:20:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ee16164906cd70a1581323f2dd263c8fd1d3d6f",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into fix/cf-lookup-dlq-and-upsert",
          "author_name": "André Júnior",
          "author_login": "Andre1999Lopes",
          "committed_at": "2026-07-20T14:05:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e65f8ed47b43dbc46880936b1c445484525693c1",
          "body": "…plate-hostname\n\nfix(k8s): corrige hostname do Prometheus no AnalysisTemplate e KEDA",
          "is_bot": false,
          "headline": "Merge pull request #64 from prefeitura-rio/fix/prometheus-analysistem…",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-07-18T14:58:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d23ef9530e70964ccc67561669859fce56bc79e",
          "body": "O serviço do Prometheus em istio-system foi migrado para o Helm chart\noficial (prometheus-community/prometheus) há ~59 dias, passando a se\nchamar prometheus-server em vez de prometheus. O AnalysisTemplate\nrmi-success-rate e os triggers do KEDA ainda apontavam para o hostname\nantigo, causando falha d\n[…]\nnte a análise do canary em produção e abortando\no rollout (release v0.2.3).\n\nAtualiza prometheus.istio-system -> prometheus-server.istio-system em\nk8s/prod/resources.yaml e k8s/staging/resources.yaml.",
          "is_bot": false,
          "headline": "fix(k8s): corrige hostname do Prometheus no AnalysisTemplate e KEDA",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-07-18T14:55:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "42ba8aae85640db5ec8be2d354757590bd35ac4f",
          "body": null,
          "is_bot": false,
          "headline": "chore: remove unused CF address helper and simplify needsCFData",
          "author_name": "André Júnior",
          "author_login": "Andre1999Lopes",
          "committed_at": "2026-07-17T17:59:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "196e9aa4d19b885944d896a5cc3cb08dd81a5642",
          "body": "Use the same address source for MCP coverage checks and lookups, clear cf_lookup:pending after success or address change, and accept normalized Rio municipality variants such as \"Rio de Janeiro/RJ\"",
          "is_bot": false,
          "headline": "fix: align CF municipality gate and pending-key lifecycle",
          "author_name": "André Júnior",
          "author_login": "Andre1999Lopes",
          "committed_at": "2026-07-17T17:48:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ba39d027053b22921600080ec658d85765f6928",
          "body": null,
          "is_bot": false,
          "headline": "fix: prevent CF lookup DLQ loops and fix sync wallet race",
          "author_name": "André Júnior",
          "author_login": "Andre1999Lopes",
          "committed_at": "2026-07-16T20:06:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32079558f977fcd6edfd649157f3b35f365d7620",
          "body": "feat(verification): add Salesforce Marketing Cloud OTP provider",
          "is_bot": false,
          "headline": "Merge pull request #62 from prefeitura-rio/feat/sfmc-otp-provider",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-07-16T14:32:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5eb75502032c2e4ed1060e706f90d0ad1c6595fb",
          "body": "Add direct internal/utils unit tests so the new SFMC code paths count\ntoward the package's own coverage (this repo's coverage.out is computed\nper-package, without -coverpkg, so cross-package integration coverage\ndoes not count here):\n\n- SendVerificationCode: both provider branches (wetalkie/salesfor\n[…]\nips the auth call) and the same invalid-subdomain technique\n\nNo production code changes; verified locally that PR branch coverage\nmoves from 59.9% back above the 60.1% baseline (tolerance is +/-0.1%).",
          "is_bot": false,
          "headline": "test(verification): cover SFMC provider branches to fix coverage gate",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-07-16T14:25:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c9d883fe4f2088e2f480ef36dbc57a67dc8e30fb",
          "body": "Add a runtime-switchable OTP dispatch provider so the WhatsApp verification\ncode can be sent through Salesforce Marketing Cloud (OTT API) while keeping\nthe existing Wetalkie HSM path as the default. The provider is selected via\nVERIFICATION_PROVIDER and can be flipped later with no code change.\n\n- c\n[…]\nconfigured provider\n- utils/database: pass CPF as the SFMC contact key\n- tests: cover provider validation and SFMC message contract\n- docs: document new env vars in README, docker-compose and justfile",
          "is_bot": false,
          "headline": "feat(verification): add Salesforce Marketing Cloud OTP provider",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-07-16T13:51:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d3a7698b634be8e87f2a0bfb6dc40d66fbcd5626",
          "body": "The cluster's IP endpoint is being disabled (INFRAVPIA-135 / F-01), so\nget-credentials must request the DNS-based control plane endpoint.\nSafe to merge before the cluster change lands.",
          "is_bot": false,
          "headline": "chore: use GKE DNS endpoint for cluster credentials [skip-ci]",
          "author_name": "João",
          "author_login": "chinchila",
          "committed_at": "2026-07-14T22:15:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7731e46b88bf2bd039349f7b36e1e06cdc8f8e8a",
          "body": "The cluster's IP endpoint is being disabled (INFRAVPIA-135 / F-01), so\nget-credentials must request the DNS-based control plane endpoint.\nSafe to merge before the cluster change lands.",
          "is_bot": false,
          "headline": "chore: use GKE DNS endpoint for cluster credentials [skip-ci]",
          "author_name": "João",
          "author_login": "chinchila",
          "committed_at": "2026-07-14T22:15:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bfc2332126e54ed34c5ed37fdf26a52abe0b6246",
          "body": "The cluster's IP endpoint is being disabled (INFRAVPIA-135 / F-01), so\nget-credentials must request the DNS-based control plane endpoint.\nSafe to merge before the cluster change lands.",
          "is_bot": false,
          "headline": "chore: use GKE DNS endpoint for cluster credentials [skip-ci]",
          "author_name": "João",
          "author_login": "chinchila",
          "committed_at": "2026-07-14T22:15:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1e8bdd68e25a1b617a46c949a02c871ac2c0ec7",
          "body": null,
          "is_bot": false,
          "headline": "ci: migrate GCP auth to WIF, drop SA key",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-06-23T13:19:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c719987331ce371a883698b33a54d328292e0ab0",
          "body": "* fix: update default ADMIN_GROUP to match Keycloak role in JWT\n\n* fix: update AdminGroup default in testhelpers to match Keycloak role\n\n---------\n\nCo-authored-by: Frederico Zolio <fredzolio@live.com>",
          "is_bot": false,
          "headline": "fix: update default ADMIN_GROUP to match Keycloak role in JWT (#59)",
          "author_name": "André Júnior",
          "author_login": "Andre1999Lopes",
          "committed_at": "2026-06-17T15:27:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b608ff3b5cd210cbb681438b0ce66f4c56ebd934",
          "body": "docs: regenerate swagger with cpf-secretaria routes",
          "is_bot": false,
          "headline": "Merge pull request #58 from prefeitura-rio/docs/swagger-cpf-secretaria",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-06-16T21:17:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44803070851120409b4070586086e7eae6b5fb98",
          "body": null,
          "is_bot": false,
          "headline": "docs: regenerate swagger with cpf-secretaria routes",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-06-16T21:09:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "952c03ff54ff3ff81ddf4944610898a99f7887ee",
          "body": "feat: add CPF-secretaria mapping CRUD and query endpoint",
          "is_bot": false,
          "headline": "Merge pull request #54 from prefeitura-rio/feat/rbac-secretaria",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-06-12T19:27:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29549921dc8792b354c0c7ce1e13120c3075191d",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into feat/rbac-secretaria",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-06-01T19:24:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "280bb68a63f81d10ba898c9d136d04c24b48eb13",
          "body": "…vent\n\nchore: raise minReplicaCount for 600k event",
          "is_bot": false,
          "headline": "Merge pull request #56 from prefeitura-rio/chore/raise-min-replicas-e…",
          "author_name": "Pedro Mendes",
          "author_login": "phrmendes",
          "committed_at": "2026-05-21T02:54:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "deb8ca44be15c377d81fdc01f4536d71e04c750e",
          "body": null,
          "is_bot": false,
          "headline": "chore: raise minReplicaCount for 600k event",
          "author_name": "Pedro Mendes",
          "author_login": "phrmendes",
          "committed_at": "2026-05-21T02:28:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b31fed855169b27fa62f04f67cb2f933bdfd73f5",
          "body": "…ccess\n\nfix: allow trusted service accounts to bypass CNPJ ownership check",
          "is_bot": false,
          "headline": "Merge pull request #55 from prefeitura-rio/fix/trusted-service-cnpj-a…",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-05-07T14:08:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1380f1eb982d80ad0050b84cd13af1d85764287d",
          "body": "Serviços internos (como app-go-api) chamam GET /v1/legal-entity/{cnpj}\nusando um service account token, não o JWT do cidadão. O handler aplicava\nchecks de responsible person/partner sobre esse token, causando 403 para\nqualquer CNPJ onde o preferred_username do service account não é um CPF\ncadastrado\n[…]\nnv TRUSTED_SERVICE_CLIENTS (lista separada por vírgula de azp\nvalues) cujos callers recebem acesso irrestrito ao endpoint, modelando\na confiança máquina-a-máquina sem exigir role go:admin no Keycloak.",
          "is_bot": false,
          "headline": "fix: allow trusted service accounts to bypass CNPJ ownership check",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-05-07T13:49:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cebd7316c92f3c27c675687bdda499e3ddd6a5b2",
          "body": "Services-level tests cover ListByCPF, AddMapping (success+duplicate),\nRemoveMapping (success+not-found), GetCdUAsByCPF, ToResponse, and\nCPF normalization — ensuring cpf_secretaria_service.go is measured\nunder services package coverage.",
          "is_bot": false,
          "headline": "test: add CPFSecretariaService unit tests in services package",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-05-06T04:10:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6bbbb6038807f91c19f0c57047a8972ee83c2389",
          "body": null,
          "is_bot": false,
          "headline": "test: add invalid JSON test for AdminAddCPFSecretaria handler",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-05-06T04:02:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef6fec228a34d837bdbbf1ef9ed5e16f46491f3b",
          "body": "FindOne before InsertOne ensures duplicate detection works even when\nthe MongoDB unique index is not yet created in test environments.",
          "is_bot": false,
          "headline": "fix: add application-level duplicate check in AddMapping",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-05-06T03:50:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efc12657ac0bf1ad7129cb823b13a4850021b291",
          "body": "- Initialize CPFSecretariaService in test environment setup\n- Add MONGODB_CPF_SECRETARIA_COLLECTION to test env vars\n- Add cpf_secretaria_handlers_test.go covering: invalid CPF, empty list,\n  add/conflict/remove/not-found, full CRUD cycle, query endpoint",
          "is_bot": false,
          "headline": "test: add coverage for CPF-secretaria handlers",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-05-06T03:41:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d02da4658878c6f77b97f048d33cfcf2899538d7",
          "body": "- Add CPFSecretariaMapping model with compound unique index on {cpf, cd_ua}\n- Add CPFSecretariaService with ListByCPF, AddMapping, RemoveMapping, GetCdUAsByCPF\n- Add admin routes: GET/POST/DELETE /v1/admin/cpf-secretaria/:cpf\n- Add authenticated query route: GET /v1/cpf-secretaria/:cpf\n- Initialize service and register routes in main.go",
          "is_bot": false,
          "headline": "feat: add CPF-secretaria mapping CRUD and query endpoint",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-05-06T03:22:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2abc4e1ba39f8a58d8e50228328ec9af613fdea",
          "body": "…safe\n\nfix: NaN-safe Prometheus queries in AnalysisTemplate + raise failureLimit",
          "is_bot": false,
          "headline": "Merge pull request #51 from prefeitura-rio/fix/analysis-template-nan-…",
          "author_name": "Lucas Tavares",
          "author_login": "lucastavarex",
          "committed_at": "2026-04-09T21:51:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb5fbb45003f4254ddf1796c7f2bcbebe886ccb7",
          "body": "Both success-rate and error-rate queries used a plain division which\nproduces NaN when the canary has zero traffic (common at 10% weight\nwith low overall load). The 'or vector(1/0)' fallback only fires when\nPrometheus returns no series at all — NaN is still a series value, so\nthe fallback never trig\n[…]\nlure.\n\nFix: guard the denominator with '> 0' so that zero-traffic windows\nproduce no series, allowing the safe-default vector to kick in.\nAlso raise failureLimit 2→5 to tolerate transient scrape gaps.",
          "is_bot": false,
          "headline": "fix: use NaN-safe Prometheus queries in AnalysisTemplate",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-04-09T21:46:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "03a49b35b76994d456c590b21c03c76e409c9980",
          "body": "feat: add outros_tutores field to Pet model",
          "is_bot": false,
          "headline": "Merge pull request #50 from prefeitura-rio/feat/outros-tutores-field",
          "author_name": "Lucas Tavares",
          "author_login": "lucastavarex",
          "committed_at": "2026-04-09T20:05:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab7732c960b1da45745f11d7082068397d396711",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into feat/outros-tutores-field",
          "author_name": "Gabriel Gazola Damazio Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-04-09T19:58:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "754ff4ca03c0885acb03e8cc3b1c963cc7590f41",
          "body": "Add support for outros_tutores (other tutors) in Pet model to fix\nmissing data in API responses.\n\nChanges:\n- Add OtherTutor struct with CPF, name, phone, and email fields\n- Add OtherTutors field to Pet struct with proper BSON/JSON tags\n- Add comprehensive tests for outros_tutores deserialization\n- T\n[…]\ne outros_tutores data from MongoDB was\nbeing silently dropped during deserialization.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add outros_tutores field to Pet model",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-04-09T19:57:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "32ad6552d0f12c7225b3d146af81370746ee7834",
          "body": "…ation-lock\n\nfeat: add distributed lock for MongoDB index creation",
          "is_bot": false,
          "headline": "Merge pull request #45 from prefeitura-rio/feat/distributed-index-cre…",
          "author_name": "Gabriel Gazola Damazio Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T16:59:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d8c4157353995be2a4a8641385ed8e07cc4ccce",
          "body": "Added targeted unit tests to improve coverage:\n\n**New Tests:**\n- internal/handlers/citizen_helpers_test.go (NEW)\n  - TestBuildAddressString: 11 test cases → buildAddressString 0% → 100%\n  - TestQueueCFLookupJob: 2 test cases → queueCFLookupJob 0% → 66.7%\n\n**Enhanced Tests:**\n- internal/circuitbreake\n[…]\nce)\n\nThese tests focus on simple, previously uncovered functions with clear\nbehavior - no complex mocking or integration test setup required.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: add coverage for helpers, circuitbreaker, and retry logic",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T16:54:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ea6e08ee45ac459b37443f1af0c7dfb1beadd850",
          "body": "Added documentation comments to explain critical operational decisions:\n\n1. Lock-bypass behavior (lines 361-366):\n   - Explains fail-open pattern when Redis is unavailable\n   - Documents that defer lock release is intentionally in else branch\n   - Clarifies MongoDB handles concurrent builds via dupl\n[…]\nync, Redis write buffers)\n\nThese comments prevent future maintainers from assuming writes are\ndurable or that lock failures are catastrophic.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: clarify lock-bypass and W:0 durability tradeoffs",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T16:41:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d1fce21aec426876c09d9b18ad084b829900d613",
          "body": "- Update TestMaskMongoURI_NoCredentials: assert the URI is returned unchanged\n  (equal to input, no \"****\" placeholder) instead of the previous weak\n  Contains check that accepted the malformed output\n- Add TestEnsureNotificationCategoryIndex_RequiredNamesMatchModels: regression\n  guard ensuring req\n[…]\nnon-nil after context cancellation\n- Add real assertions to TestClient_Eval_ErrorPath cancelled-context sub-test:\n  same pattern as SetNX fix\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: improve coverage and add assertions to error path tests",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T16:28:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6063a05a0e6680a90e9ea03bb68c5660580b468a",
          "body": "- Fix ensureNotificationCategoryIndex off-by-one bug: requiredNames had 3\n  entries (including stale \"idx_notification_category_id\") while requiredIndexes\n  only defined 2 models, causing the loop to check the wrong name for model 0\n  and to never schedule idx_notification_category_order for creatio\n[…]\nguard against URIs with no \"@\" sign; return the URI\n  unchanged instead of producing a malformed \"mongodb://****:****@mongodb://...\"\n  prefix\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: resolve index creation and namespace collision bugs",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T16:28:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5d32a1e983e0b6b15233aba1b982cb2fcdfd2e55",
          "body": "After merging main into the feat/distributed-index-creation-lock branch,\nunit tests were failing because the config.LoadConfig() function now\nrequires WhatsApp-related environment variables to be set, even when\nWHATSAPP_ENABLED is set to false.\n\nThis change adds the required WhatsApp environment var\n[…]\ng(), which broke tests in the PR branch after\nmerge.\n\nTests now pass: All unit tests pass with -race flag when MongoDB and Redis\nare running.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: add required WhatsApp environment variables to test setup",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T16:00:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9ab45d6eeb9104c40d4110cadb85fa81ed8d77ce",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into feat/distributed-index-creation-lock",
          "author_name": "Gabriel Gazola Damazio Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T15:49:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e1c3c9df6d439bcfadaf77522cf099ffe7ebc3b",
          "body": "…ted lock code\n\nSwapping the initialization order ensures that when ensureIndexes() runs\n(called by InitMongoDB), the Redis client is already available. This\nexercises the distributed lock acquisition and Lua compare-and-delete\nrelease paths that are only reachable when Redis is non-nil.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: initialize Redis before MongoDB in test setup to cover distribu…",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T15:44:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d878c9df7e5b38c9d2f121a53bb4d8360e8aff06",
          "body": "…d, applyDatabasePerformanceOptimizations, and CommandError detection\n\nCover pure-logging helper functions that do not require live services,\nand add a real mongo.CommandError test case for isIndexBuildAlreadyInProgressError\nto verify the errors.As code path (code 117) and the wrapped-error case.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: add coverage for optimizeConnectionPool, optimizeIndexesIfNeede…",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T15:40:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ea209dc41b6e7cfddcf65f21e61e9316732552c0",
          "body": "Add TestClient_SetNX_ErrorPath and TestClient_Eval_ErrorPath to cover\nthe span.RecordError / SetStatus(codes.Error) branches that are only\nreached when Redis returns a non-nil error (invalid Lua syntax or\ncancelled context).\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: add error-path coverage for SetNX and Eval traced wrappers",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T15:36:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f5abec68b49ff6e42c0ade4ca3ccd26f7080293c",
          "body": "…essError\n\nThe previous commits added new exported/package-private functions that\nwere not covered by existing tests, causing coverage to drop below the\nbaseline tolerance.\n\n- internal/config/database_test.go:\n  - TestSetRedis_GetRedis: verifies that getRedis/setRedis/SetRedis are\n    consistent and\n[…]\nhe distributed index-creation lock,\n    both the success path (correct token deletes) and the guard path\n    (wrong token leaves key intact).\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: add coverage for SetRedis, Eval, and isIndexBuildAlreadyInProgr…",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T15:30:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a97db1efd53672e72b2a595481ca6bebb7f46b3d",
          "body": "The previous commit fixed the immediate race in admin_handlers_test by\nreusing the shared Redis client from setupTestEnvironment. However, the\nroot cause was deeper: six other test setup functions (in services/ and\nutils/) were directly writing config.Redis after InitMongoDB had already\nstarted back\n[…]\n.go\n    internal/services/sync_worker_test.go\n    internal/utils/database_test.go (two occurrences)\n    internal/utils/redis_pipeline_test.go\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: eliminate remaining data races on config.Redis global variable",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T15:25:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "59ea0af0275b336f84a805c97dbcc5c3cc3396f0",
          "body": "…dex lock\n\n- Fix data race on config.Redis: admin handler tests were writing to the\n  package-level config.Redis global concurrently with the background\n  ensureIndexes goroutine started by startIndexMaintenance. Replace the\n  redundant per-test Redis client creation with a call to\n  setupTestEnviro\n[…]\nnged), and TTL-based expiry behaviour.\n\n- Add Eval method to redisclient.Client with OpenTelemetry tracing, used\n  by the Lua release script.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: resolve data race and address review feedback for distributed in…",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T15:25:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fa4ad5dca0587deaae92951e38c5ef0b2a17ee4a",
          "body": "Prevents race conditions when multiple pods attempt to create the same\nMongoDB index simultaneously. This is especially important during rolling\ndeployments or when scaling up pods.\n\n**Problem:**\n- Multiple pods starting concurrently can all try to create indexes\n- MongoDB may throw IndexBuildAlread\n[…]\ninfo log\n- No disruption if Redis unavailable\n- Index creation still succeeds eventually\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add distributed lock for MongoDB index creation",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T15:25:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3266597c120b1f2541e479911c90d4b3f57a90c1",
          "body": "…diness-wait\n\nfix: replace fixed sleep with pod readiness loop before port-forward",
          "is_bot": false,
          "headline": "Merge pull request #47 from prefeitura-rio/fix/deploy-staging-pod-rea…",
          "author_name": "Gabriel Gazola Damazio Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T15:21:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72ea0bcda849f6646c876966bacee82e8eda74f5",
          "body": "The staging deploy workflow used a fixed 'sleep 5' after ArgoCD synced\nthe rollout spec, before attempting port-forward to the preview service.\nThis was insufficient when:\n- Cold image pulls take longer than 5 seconds\n- The Istio sidecar injected into the preview pod needs extra time to\n  initialise\n[…]\nise the step timeout-minutes from 5 to 10 to accommodate the\ncombined image-wait loop (up to 5 min) and the new pod-ready loop\n(up to 3 min).\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: replace fixed sleep with pod readiness loop before port-forward",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T15:17:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "90f3ffb6f940b44645e9d04266676466a149443a",
          "body": "…le.golang.org/grpc-1.79.3\n\nchore(deps): bump google.golang.org/grpc from 1.71.0 to 1.79.3",
          "is_bot": false,
          "headline": "Merge pull request #42 from prefeitura-rio/dependabot/go_modules/goog…",
          "author_name": "Gabriel Gazola Damazio Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T15:07:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc43415e43e9a68625765ddcb9243f0d586181c3",
          "body": "Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.71.0 to 1.79.3.\n- [Release notes](https://github.com/grpc/grpc-go/releases)\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.71.0...v1.79.3)\n\n---\nupdated-dependencies:\n- dependency-name: google.golang.org/grpc\n  dependency-version: 1.79.3\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump google.golang.org/grpc from 1.71.0 to 1.79.3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T15:01:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef009a916b325b8bf5ae30f467612ca6987ce220",
          "body": "…d-by-grpc-bump\n\nfix: resolve race conditions exposed by gRPC dependency bump (PR #42)",
          "is_bot": false,
          "headline": "Merge pull request #46 from prefeitura-rio/fix/race-conditions-expose…",
          "author_name": "Gabriel Gazola Damazio Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T14:59:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a68d32b3b3685eb967fef954acec820197454615",
          "body": "Two pre-existing data races surfaced when the race detector was enabled\nduring the gRPC v1.79.3 upgrade (dependabot PR #42). Both are fixed here.\n\n**Fix 1: Global logger race condition (internal/logging/logger.go)**\n\nThe package-level `Logger` variable was written by `InitLogger()` without\nsynchroni\n[…]\nf the filter before adding the version\nkey and uses the copy (`versionedFilter`) in the `UpdateOne` call, leaving\nthe caller's map untouched.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: resolve race conditions exposed by gRPC dependency bump (PR #42)",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T14:53:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "22b751f7f063e142be84dec84c6c1e79b699ec2a",
          "body": "…pentelemetry.io/otel/sdk-1.40.0\n\nchore(deps): bump go.opentelemetry.io/otel/sdk from 1.35.0 to 1.40.0",
          "is_bot": false,
          "headline": "Merge pull request #41 from prefeitura-rio/dependabot/go_modules/go.o…",
          "author_name": "Gabriel Gazola Damazio Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T14:36:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e31db8624eed4ea9a6c49fb81d3653f695ecd021",
          "body": "…el/sdk-1.40.0",
          "is_bot": false,
          "headline": "Merge branch 'main' into dependabot/go_modules/go.opentelemetry.io/ot…",
          "author_name": "Gabriel Gazola Damazio Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T14:31:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "836b8d4257669bbb135e96f21a9b20fed44c016e",
          "body": "…ub.com/nyaruka/phonenumbers-1.2.2\n\nchore(deps): bump github.com/nyaruka/phonenumbers from 1.0.65 to 1.2.2",
          "is_bot": false,
          "headline": "Merge pull request #26 from prefeitura-rio/dependabot/go_modules/gith…",
          "author_name": "Gabriel Gazola Damazio Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-25T14:30:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b852a9185f6b71a065d331c3aa23b380678f1cf3",
          "body": "Bumps [github.com/nyaruka/phonenumbers](https://github.com/nyaruka/phonenumbers) from 1.0.65 to 1.2.2.\n- [Release notes](https://github.com/nyaruka/phonenumbers/releases)\n- [Changelog](https://github.com/nyaruka/phonenumbers/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/nyaruka/phonenumbers\n[…]\n\n\n---\nupdated-dependencies:\n- dependency-name: github.com/nyaruka/phonenumbers\n  dependency-version: 1.2.2\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github.com/nyaruka/phonenumbers from 1.0.65 to 1.2.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T14:25:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c76565a0a0960e6fdf0eb628e904da8434c1fe92",
          "body": "Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.35.0 to 1.40.0.\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\n- [Commits](https://\n[…]\n0)\n\n---\nupdated-dependencies:\n- dependency-name: go.opentelemetry.io/otel/sdk\n  dependency-version: 1.40.0\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump go.opentelemetry.io/otel/sdk from 1.35.0 to 1.40.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T14:25:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ec74480efc087cee06a78b4c15cf91156a968659",
          "body": "…ching\n\nfeat: add Redis caching to department service",
          "is_bot": false,
          "headline": "Merge pull request #44 from prefeitura-rio/feat/department-service-ca…",
          "author_name": "Frederico Zolio",
          "author_login": "fredzolio",
          "committed_at": "2026-03-23T15:31:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6454407a4662768d26e4493ef928f9baf36bf01d",
          "body": "Cache hit tests verify that data persists in Redis after MongoDB\ndeletion. Running these tests in parallel causes race conditions\nbecause the deferred cleanup() calls clear all department:* keys,\nwhich interferes with other concurrent tests' cache verification.\n\nRemoving t.Parallel() ensures cache h\n[…]\nventing concurrent cleanup from invalidating cached data that\nother tests are verifying.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: remove t.Parallel() from cache hit tests",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-23T14:59:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "738f413548f8ea611c6334aebf9e42c9e2b83ec7",
          "body": "Clear all department:* keys from Redis before and after each test\nto prevent cached data from contaminating test results.\n\nThis fixes test failures where ListDepartments would return cached\nempty results from previous test runs instead of fresh data from\nMongoDB.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: add Redis cache cleanup for department service tests",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-23T14:55:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5818253bb1fe65bbf14d074a2cee14131dc5c722",
          "body": "Fixed errcheck linting errors by explicitly ignoring return values\nfrom cleanup DeleteOne calls in deferred functions using blank\nidentifier assignment.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: handle error return values in deferred DeleteOne calls",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-23T14:47:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d737aee7ddccc4bb7400e93cb6e6acf20b6b1d79",
          "body": "Fixed cache hit tests to avoid collection drops that interfered with\nparallel test execution:\n\n- Use unique cd_ua values per test to avoid conflicts\n- Replace collection.Drop() with targeted DeleteOne() calls\n- Add t.Parallel() to run tests concurrently\n- Add deferred cleanup for test data\n\nThis pre\n[…]\nge\" panics in handler tests caused by\ntests running in parallel and dropping shared collections.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: prevent cache test interference with parallel execution",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-23T14:44:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b676e30a38f7b2373815b799c3ad18c10f1d0fa2",
          "body": "Implements Redis caching for department list queries to reduce MongoDB\nload on the list endpoint. Uses deterministic cache keys based on\nfilter parameters (parentID, level filters, search, pagination).\n\n- Cache TTL: 3 hours (same as individual departments)\n- Cache key: SHA256 hash of filter paramete\n[…]\nt with float64 type preservation\n\nAddresses Fred's feedback about ListDepartments lacking cache.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add Redis caching for ListDepartments endpoint",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-23T14:36:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "37befdaf5971b82601fe028c53b63b4838632de2",
          "body": "JSON deserialization converts BSON int32 to float64, causing nivel\nto be zero on cache hits. Added float64 case handling and test\nverification to prevent this blocking bug.\n\nAddresses Fred's review: nivel stored as int32 in BSON → JSON number\n→ float64 when deserialized back from Redis cache.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: handle float64 type for nivel field in cache round-trip",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-23T14:14:35Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b0e47fd46e5f36371620287bc10dd23c46ad12cf",
          "body": "- Add Redis nil check in InitDepartmentService with fallback\n- Add nil DataManager guard in GetDepartmentByID\n- Extend convertRawToDepartment to handle JSON-decoded types\n- Add cache hit test to validate caching behavior\n- Fix BSON/JSON round-trip type conversions for ObjectID and DateTime\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: address Copilot review feedback on department caching",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-23T14:13:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fe68247c87568cae3129881184a921bf630eb375",
          "body": "Adds skip condition when Redis is not available in test environment\nto prevent nil pointer dereference when creating DataManager.\n\nFixes test failures in CI where Redis may not be initialized.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: add Redis availability check in department handler tests",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-23T14:08:00Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cbccab993ef2a5c519125f4192bcdc994742f0f5",
          "body": "Implements Redis caching for department queries to reduce MongoDB load\nand improve response times. Department data is static organizational\nstructure that changes rarely, making it ideal for caching.\n\nChanges:\n- Integrate DataManager into DepartmentService for cache-aware reads\n- Add department coll\n[…]\n repeated department queries. This is part 1 of 2\n(part 2 is MongoDB resource increase).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add Redis caching to department service via DataManager",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-23T14:03:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "413dfe6c02ca1d0839db89e90c1994c4549e37f7",
          "body": "…eouts\n\nfix: add circuit breaker and retry logic for MongoDB connections",
          "is_bot": false,
          "headline": "Merge pull request #43 from prefeitura-rio/fix/mongodb-connection-tim…",
          "author_name": "Gabriel Gazola Damazio Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-20T18:37:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1deb3f1e6a79ccfc629f90847fcf49e081f70662",
          "body": "Replace time.After() with time.NewTimer() in select statements to prevent\ntimer leaks when context is canceled before backoff expires. Under high load\nwith many context cancellations, time.After() timers would accumulate until\nthey fire, wasting resources.\n\nApplied to both WithExponentialBackoff and WithExponentialBackoffValue functions.\n\nAddresses feedback from @fredzolio code review.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: prevent timer leak in retry backoff logic",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-20T18:32:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6c75f79582ff98cfc5fd2d5fdff891a51655fde3",
          "body": "- Add nil logger guard in both WithExponentialBackoff functions to prevent panics\n- Fix misleading \"will retry\" log on final attempt - only log when retries remain\n- Apply fixes to both the error-only and value-returning variants\n\nThis addresses Copilot feedback on production logging clarity and def\n[…]\now only appears when another retry\nwill actually occur, preventing confusion in production logs.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: improve retry logging and nil logger handling",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-20T18:08:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "40d0530b2885e9d6c33669af31adcc96f8b03532",
          "body": "- Add mutex protection for stateChanges slice access\n- Import sync package for mutex usage\n- Add sleep before checking state transitions to allow async callbacks to complete\n- Protect both write (in callback) and read (in verification) access\n\nFixes race condition detected by go test -race where async OnStateChange\ncallbacks were writing to stateChanges while test was reading it.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: resolve data race in circuit breaker test",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-20T17:59:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6eab3844d5765f2220d0660686c3c334ba919c23",
          "body": "Address all remaining Copilot review comments:\n\n1. **Remove unrelated files**: Deleted k6 docs and compiled binaries\n   that were accidentally included in the PR\n\n2. **Fix logger derivation**: Use logger.Unwrap() to get zap.Logger\n   from SafeLogger, ensuring consistent logging configuration between\n[…]\n prevent potential runtime\nissues while making tests properly enforce expected behavior.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: address additional Copilot code review feedback",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-20T17:52:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c99ce888f68d46ad0dbcf56532350a04c597da82",
          "body": "Implement all critical improvements suggested by Copilot review:\n\n1. **Nil logger handling**: Add guards in both circuit breaker and retry\n   to default to zap.NewNop() when nil is provided\n\n2. **Context cancellation fast-path**: Check ctx.Err() in Execute()\n   before consuming circuit breaker capac\n[…]\nnd prevent panics from\nnil loggers while making retry/circuit breaker logic more robust.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: address Copilot code review feedback",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-20T17:39:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4a45d4aafb8e906eef0f878c8fc2c0b041480298",
          "body": "Add test coverage for:\n- Circuit breaker state transitions (Closed -> Open -> Half-Open -> Closed)\n- Circuit breaker request counting and limits\n- Retry logic with exponential backoff\n- Context cancellation handling\n- Retryable vs non-retryable error detection\n\nThis improves overall test coverage to maintain quality standards.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: add comprehensive tests for circuit breaker and retry packages",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-20T17:33:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "daf3ac3258d9802555b14a726a6115b43166ac63",
          "body": "Add 10-minute timeout to golangci-lint GitHub Action to prevent\ntimeout errors in CI. This addresses the 'Timeout exceeded' error\nby explicitly passing the --timeout flag.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: add timeout to golangci-lint action",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-20T17:30:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4394dd7b0a636e538442bf50eaab5b4ec0dd5d7d",
          "body": "Implements circuit breaker pattern and exponential backoff retry logic\nto handle MongoDB connection timeouts and improve API resilience.\n\nChanges:\n- Add circuit breaker package with 3-state pattern (closed/half-open/open)\n- Add retry package with exponential backoff (3 retries, 100ms-5s)\n- Integrate\n[…]\n Reduced maxConns from 5000 to 2000\n- Added connection URI parameters for better pooling\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: add circuit breaker and retry logic for MongoDB connections",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-03-20T17:26:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f16e793b9ec76c427d1a59fe766cf7dc10d17068",
          "body": "…ng.org/x/crypto-0.45.0\n\nchore(deps): bump golang.org/x/crypto from 0.36.0 to 0.45.0",
          "is_bot": false,
          "headline": "Merge pull request #27 from prefeitura-rio/dependabot/go_modules/gola…",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-28T18:19:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5eb577ae40fd6cefd1a6a89b7366c23e988670f",
          "body": "…45.0",
          "is_bot": false,
          "headline": "Merge branch 'main' into dependabot/go_modules/golang.org/x/crypto-0.…",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T16:26:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74d8d4e31bb4479d5603bcf0a5b97a4595faff13",
          "body": "…er-name\n\nfix: correct GKE cluster name in release workflow",
          "is_bot": false,
          "headline": "Merge pull request #40 from prefeitura-rio/fix/release-workflow-clust…",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T15:43:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ede307e5dfd3b230b6ef750c30ae8ea3ced1eed",
          "body": "The release workflow was using the local kubectl context name\n'superapp-prod' instead of the actual GKE cluster name 'application'.\nThis caused the workflow to fail when trying to authenticate to GKE.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: correct GKE cluster name in release workflow",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T15:38:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5c0d7e997f754c9327b84e0c3fde7ba1dfe80d10",
          "body": "…rride\n\nfeat: use ArgoCD Application image override for production releases",
          "is_bot": false,
          "headline": "Merge pull request #39 from prefeitura-rio/feat/prod-argocd-image-ove…",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T15:28:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9fdc3bb83a8a7b9e10ac987f8d355565282c279",
          "body": "Replace Git-based image updates with ArgoCD Application Kustomize image\noverride for production releases, matching the staging deployment pattern.\n\nChanges:\n- Remove Git commit/push logic from release workflow\n- Update ArgoCD Application's spec.source.kustomize.images via kubectl patch\n- Wait for ro\n[…]\nPrerequisites:\n- Production ArgoCD Application configured with Kustomize image override ✅ (done)\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: use ArgoCD Application image override for production releases",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T15:22:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c1b90c97e5e8e6fea9f7eef2a45902ce204c93c9",
          "body": "…-update\n\nfix: wait for rollout spec image update instead of ArgoCD sync status",
          "is_bot": false,
          "headline": "Merge pull request #38 from prefeitura-rio/fix/wait-for-rollout-image…",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T15:11:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "daf69508e2944ca150bc79f0429b9e7e6d2834fc",
          "body": "ArgoCD can report \"Synced\" status before the rollout spec is actually\nupdated with the new image. This causes the workflow to fail when\nverifying the image.\n\nChanges:\n- Wait for rollout spec image to match expected image (not ArgoCD status)\n- Increase timeout to 60 attempts × 5s = 5 minutes\n- Check \n[…]\nArgoCD + Rollout yaml)\n\nThis directly checks what matters: the rollout having the correct image.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: wait for rollout spec image update instead of ArgoCD sync status",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T15:05:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "767d70ccac0ceb20e3d8c0a4fa257d9830ba8345",
          "body": "…-workflow\n\nfeat: use ArgoCD Application image override for staging deployments",
          "is_bot": false,
          "headline": "Merge pull request #37 from prefeitura-rio/feat/argocd-image-override…",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T14:59:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75ee5fafe95ad14a019b12b88721468f97929b18",
          "body": "Replace Git-based image updates with ArgoCD Application Kustomize image override.\nThis is cleaner and works with branch protection on main.\n\nChanges:\n- Update ArgoCD Application's spec.source.kustomize.images via kubectl patch\n- Wait for ArgoCD to sync the image override to the rollout\n- Verify roll\n[…]\nomize image override capability enabled.\n\nArchived staging branch as tag: archive/staging-branch\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: use ArgoCD Application image override for staging deployments",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T14:52:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "abd5b9d2abe95fb30a2545ef4dd259e01f4bc2e9",
          "body": "…yment\n\nfix: simplify blue-green deployment to match prod pattern",
          "is_bot": false,
          "headline": "Merge pull request #36 from prefeitura-rio/fix/proper-bluegreen-deplo…",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T14:36:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96c04715761c0ba9f8ab67afb4da2c0de20644b3",
          "body": "The deployment was overcomplicated with staging branch management.\nFollowing the prod deployment pattern: update k8s/staging/resources.yaml\non main, let ArgoCD sync, then test and promote.\n\nBlue-Green Flow:\n1. Update k8s/staging/resources.yaml with new image digest on main branch\n2. ArgoCD syncs and\n[…]\nyment works but with manual promotion\nafter E2E testing instead of automatic canary progression.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: simplify blue-green deployment to match prod pattern",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T13:46:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a5a07cfb5511167d2d66e799eae846b851b776d3",
          "body": "Automated image update from GitHub Actions deployment\nImage: ghcr.io/prefeitura-rio/app-rmi:25723821ba296ff289c62a3e65d4926d055b8c42@sha256:100ae55dd0972743008f89daf4ee8fb3e8660c386609955cadfea6e3f9f0f1c2\n\nCo-Authored-By: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(staging): update image to 25723821ba296ff289c62a3e65d4926d055b8c42",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-01-27T13:38:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25723821ba296ff289c62a3e65d4926d055b8c42",
          "body": "fix: update image in Git for ArgoCD sync instead of kubectl",
          "is_bot": false,
          "headline": "Merge pull request #34 from prefeitura-rio/fix/argocd-image-sync",
          "author_name": "Debuga",
          "author_login": "bot-rio",
          "committed_at": "2026-01-27T13:36:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95d05ce4cb4cf6440f328817c8d0fa41e2894d9e",
          "body": "The previous approach used kubectl to update the rollout image directly,\nbut ArgoCD would revert it back to what's in Git, preventing successful deployments.\n\nChanges:\n- Replace kubectl image update with Git commit to k8s/staging/resources.yaml\n- Use sed to update image in YAML file with commit hash\n[…]\nssue where deployments would complete but ArgoCD would\nroll back to the old image shortly after.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: update image in Git for ArgoCD sync instead of kubectl",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T13:26:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "244f11d31e874b34cb34543c10d5fa105033051e",
          "body": "fix: correct E2E health test to expect boolean status",
          "is_bot": false,
          "headline": "Merge pull request #32 from prefeitura-rio/fix/e2e-health-boolean",
          "author_name": "Debuga",
          "author_login": "bot-rio",
          "committed_at": "2026-01-27T13:15:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1074f7f656d2b3097ef1b459771ec08f9e4abf2b",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'main' into fix/e2e-health-boolean",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T13:10:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09bae53e0ae3c6d6683bf423f13083dea26e6cea",
          "body": "feat: add 0.1% tolerance to coverage check",
          "is_bot": false,
          "headline": "Merge pull request #33 from prefeitura-rio/feat/coverage-tolerance",
          "author_name": "Debuga",
          "author_login": "bot-rio",
          "committed_at": "2026-01-27T13:09:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97af30b79ae2a14af83998a41e7ba8354c891c5d",
          "body": "Allow coverage to decrease by up to 0.1% without failing the quality gate.\nThis accounts for random variation caused by race detection with the -race flag,\nwhich can cause slightly different test execution paths on each run.\n\nChanges:\n- Add TOLERANCE=0.1 variable to coverage comparison\n- Pass qualit\n[…]\nolerance in coverage comparison output\n- Update status emoji logic to mark within-tolerance as ✅\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add 0.1% tolerance to coverage check",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T13:05:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5349120062e98fb2f9f2c2eb134df027c294fda3",
          "body": "The health endpoint returns {\"status\": true} (boolean), not {\"status\": \"healthy\"} (string).\nThis was causing E2E tests to fail during staging deployments.\n\n🤖 Generated with [Claude Code](https://claude.ai/code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: correct E2E health test to expect boolean status",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T12:59:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e5d4583381e2d29b1c61d95405dffb24d0c101d5",
          "body": "feat: add retry logic to unit tests",
          "is_bot": false,
          "headline": "Merge pull request #31 from prefeitura-rio/feat/test-retry-logic",
          "author_name": "Gabriel Gazola Milan",
          "author_login": "gabriel-milan",
          "committed_at": "2026-01-27T12:43:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 12,
      "commits_last_year": 404,
      "latest_release_at": "2026-07-24T16:09:05Z",
      "latest_release_tag": "v0.2.5",
      "releases_from_tags": false,
      "days_since_last_push": 3,
      "active_weeks_last_year": 33,
      "days_since_latest_release": 3,
      "mean_days_between_releases": 21.4
    },
    "community": {
      "has_readme": true,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 12,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/prefeitura-rio/app-rmi",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/prefeitura-rio/app-rmi",
          "is_deprecated": false,
          "latest_version": "v0.2.5",
          "repository_url": "https://github.com/prefeitura-rio/app-rmi",
          "versions_count": 12,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-24T16:07:08Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 3
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 2,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 8
    },
    "ai_readiness": {
      "has_nix": true,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "justfile"
      ],
      "api_schema_files": [
        "docs/swagger.json",
        "docs/swagger.yaml"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 308076,
      "source_files_sampled": 192,
      "oversized_source_files": 3,
      "agent_instruction_files": [
        ".cursor/rules/the-commit-thing.mdc",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 11711
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "google.golang.org/grpc",
            "direct": true,
            "version": "v1.79.3",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-hrxh-6v49-42gf",
              "GO-2026-6061"
            ],
            "fixed_version": "1.82.1",
            "advisory_count": 2,
            "oldest_advisory_days": 5
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.46.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 10,
            "advisory_ids": [
              "GHSA-45gg-vh54-h5m9",
              "GHSA-5cgq-3rg8-m6cv",
              "GHSA-78mq-xcr3-xm33",
              "GHSA-89gr-r52h-f8rx",
              "GHSA-9m57-25v3-79x9",
              "GHSA-f5wc-c3c7-36mc",
              "GHSA-jppx-rxg9-jmrx",
              "GHSA-q4h4-gmj2-qvw2",
              "GHSA-qpw4-5x99-6vjp",
              "GHSA-rm3j-f69w-wqmq"
            ],
            "fixed_version": "0.52.0",
            "advisory_count": 27,
            "oldest_advisory_days": 66
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": true,
            "version": "v1.40.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-mh2q-q3fh-2475",
              "GO-2026-5506"
            ],
            "fixed_version": "1.41.0",
            "advisory_count": 2,
            "oldest_advisory_days": 110
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": true,
            "version": "v1.40.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7,
            "advisory_ids": [
              "GHSA-hfvc-g4fc-pqhx",
              "GO-2026-5426"
            ],
            "fixed_version": "1.43.0",
            "advisory_count": 2,
            "oldest_advisory_days": 109
          },
          {
            "name": "github.com/docker/docker",
            "direct": false,
            "version": "v28.5.1+incompatible",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-pxq6-2prw-chj9",
              "GHSA-rg2x-37c3-w2rh",
              "GHSA-vp62-88p7-qqf5",
              "GHSA-x744-4wpc-v9h2",
              "GHSA-x86f-5xw2-fm2r",
              "GO-2026-4883",
              "GO-2026-4887",
              "GO-2026-5617",
              "GO-2026-5668",
              "GO-2026-5746"
            ],
            "fixed_version": "29.3.1",
            "advisory_count": 10,
            "oldest_advisory_days": 122
          },
          {
            "name": "go.mongodb.org/mongo-driver",
            "direct": true,
            "version": "v1.14.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-cp6g-7hqx-qxhp",
              "GO-2026-5327"
            ],
            "fixed_version": "2.4.2",
            "advisory_count": 2,
            "oldest_advisory_days": 166
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.48.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-5cv4-jp36-h3mw",
              "GO-2026-4918",
              "GO-2026-5025",
              "GO-2026-5026",
              "GO-2026-5027",
              "GO-2026-5028",
              "GO-2026-5029",
              "GO-2026-5030",
              "GO-2026-5942"
            ],
            "fixed_version": "1.26.3",
            "advisory_count": 9,
            "oldest_advisory_days": 80
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5841"
            ],
            "fixed_version": "1.18.7",
            "advisory_count": 1,
            "oldest_advisory_days": 0
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.40.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5024"
            ],
            "fixed_version": "0.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 66
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.32.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 13
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 3,
          "unknown": 3,
          "critical": 2,
          "moderate": 2
        },
        "advisory_count": 57,
        "affected_count": 10,
        "assessed_count": 120,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 4
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/gin-gonic/gin",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.0"
        },
        {
          "name": "github.com/nyaruka/phonenumbers",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.2"
        },
        {
          "name": "github.com/swaggo/files",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.1"
        },
        {
          "name": "github.com/swaggo/gin-swagger",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/swaggo/swag",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.16.3"
        },
        {
          "name": "go.mongodb.org/mongo-driver",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.14.0"
        },
        {
          "name": "github.com/gin-contrib/cors",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.7.5"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/prometheus/client_golang",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.0"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go/modules/mongodb",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.40.0"
        },
        {
          "name": "github.com/testcontainers/testcontainers-go/modules/redis",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.40.0"
        },
        {
          "name": "go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.49.0"
        },
        {
          "name": "go.opentelemetry.io/otel",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.40.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.35.0"
        },
        {
          "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.35.0"
        },
        {
          "name": "go.opentelemetry.io/otel/sdk",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.40.0"
        },
        {
          "name": "go.opentelemetry.io/otel/trace",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.40.0"
        },
        {
          "name": "go.uber.org/zap",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.27.0"
        },
        {
          "name": "google.golang.org/grpc",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.79.3"
        },
        {
          "name": "github.com/redis/go-redis/v9",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v9.12.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/gin-contrib/cors",
            "direct": true,
            "version": "v1.7.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gin-gonic/gin",
            "direct": true,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nyaruka/phonenumbers",
            "direct": true,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": true,
            "version": "v1.19.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/redis/go-redis/v9",
            "direct": true,
            "version": "v9.12.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": true,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/swaggo/files",
            "direct": true,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/swaggo/gin-swagger",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/swaggo/swag",
            "direct": true,
            "version": "v1.16.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go/modules/mongodb",
            "direct": true,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go/modules/redis",
            "direct": true,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.mongodb.org/mongo-driver",
            "direct": true,
            "version": "v1.14.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo",
            "direct": true,
            "version": "v0.49.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": true,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": true,
            "version": "v1.35.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
            "direct": true,
            "version": "v1.35.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": true,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": true,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/zap",
            "direct": true,
            "version": "v1.27.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": true,
            "version": "v1.79.3",
            "ecosystem": "go"
          },
          {
            "name": "dario.cat/mergo",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-ansiterm",
            "direct": false,
            "version": "v0.0.0-20210617225240-d185dfc1b5a1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bytedance/sonic",
            "direct": false,
            "version": "v1.13.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/bytedance/sonic/loader",
            "direct": false,
            "version": "v0.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v4",
            "direct": false,
            "version": "v4.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cloudwego/base64x",
            "direct": false,
            "version": "v0.1.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs/pkg",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/log",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/platforms",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cpuguy83/dockercfg",
            "direct": false,
            "version": "v0.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dgryski/go-rendezvous",
            "direct": false,
            "version": "v0.0.0-20200823014737-9f7001d12a5f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/distribution/reference",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker",
            "direct": false,
            "version": "v28.5.1+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-connections",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-units",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ebitengine/purego",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gabriel-vasile/mimetype",
            "direct": false,
            "version": "v1.4.8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gin-contrib/sse",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "v1.2.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.19.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.19.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/spec",
            "direct": false,
            "version": "v0.20.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.19.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-playground/locales",
            "direct": false,
            "version": "v0.14.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-playground/universal-translator",
            "direct": false,
            "version": "v0.18.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-playground/validator/v10",
            "direct": false,
            "version": "v10.26.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/goccy/go-json",
            "direct": false,
            "version": "v0.10.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/snappy",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.26.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/josharian/intern",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/cpuid/v2",
            "direct": false,
            "version": "v2.2.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/kylebanks/depth",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/leodido/go-urn",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lufia/plan9stats",
            "direct": false,
            "version": "v0.0.0-20211012122336-39d0f177ccd0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/magiconair/properties",
            "direct": false,
            "version": "v1.8.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mailru/easyjson",
            "direct": false,
            "version": "v0.7.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mdelapenya/tlscert",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/docker-image-spec",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/go-archive",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/patternmatcher",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/sequential",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/user",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/userns",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/term",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/montanaflynn/stats",
            "direct": false,
            "version": "v0.0.0-20171201202039-1bf9dbcd8cbe",
            "ecosystem": "go"
          },
          {
            "name": "github.com/morikuni/aec",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml/v2",
            "direct": false,
            "version": "v2.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/power-devops/perfstat",
            "direct": false,
            "version": "v0.0.0-20210106213030-5aafc221ea8c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.48.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.12.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/puerkitobio/purell",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/puerkitobio/urlesc",
            "direct": false,
            "version": "v0.0.0-20170810143723-de5bf2ad4578",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shirou/gopsutil/v4",
            "direct": false,
            "version": "v4.25.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": false,
            "version": "v1.9.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/go-sysconf",
            "direct": false,
            "version": "v0.3.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/numcpus",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/twitchyliquid64/golang-asm",
            "direct": false,
            "version": "v0.15.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ugorji/go/codec",
            "direct": false,
            "version": "v1.2.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xdg-go/pbkdf2",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xdg-go/scram",
            "direct": false,
            "version": "v1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xdg-go/stringprep",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/youmark/pkcs8",
            "direct": false,
            "version": "v0.0.0-20240726163527-a2c0da244d78",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yusufpapurcu/wmi",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.49.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.40.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.5.0",
            "ecosystem": "go"
          },
          {
            "name": "go.uber.org/multierr",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/arch",
            "direct": false,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.48.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.19.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.32.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.39.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20251202230838-ff82c1b0f217",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20251202230838-ff82c1b0f217",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.10",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 120,
        "direct_count": 21,
        "indirect_count": 99
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 8,
        "merged_prs": 57,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "gabriel-milan",
          "commits": 336,
          "avatar_url": "https://avatars.githubusercontent.com/u/35741485?v=4"
        },
        {
          "type": "User",
          "login": "fredzolio",
          "commits": 25,
          "avatar_url": "https://avatars.githubusercontent.com/u/91195110?v=4"
        },
        {
          "type": "User",
          "login": "phrmendes",
          "commits": 10,
          "avatar_url": "https://avatars.githubusercontent.com/u/22376151?v=4"
        },
        {
          "type": "User",
          "login": "bot-rio",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/92796588?v=4"
        },
        {
          "type": "User",
          "login": "pedroboechat",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/52605466?v=4"
        },
        {
          "type": "User",
          "login": "Andre1999Lopes",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/57339312?v=4"
        },
        {
          "type": "User",
          "login": "chinchila",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/3947315?v=4"
        },
        {
          "type": "User",
          "login": "lucastavarex",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/81393330?v=4"
        }
      ],
      "contributors_sampled": 8,
      "top_contributor_share": 0.851
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build-container.yaml",
        "coverage-baseline.yaml",
        "deploy-staging.yaml",
        "pr-quality-gate.yaml",
        "release.yaml",
        "run-load-tests.yaml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 3,
            "reason": "Found 4/13 approved changesets -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 9 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 0,
            "reason": "license file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "34 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "e56639ccf5617361577278312535f5d82ae6aee4",
        "ran_at": "2026-07-27T19:03:30Z",
        "aggregate_score": 5.5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T16:32:34Z",
      "oldest_open_prs": [
        {
          "number": 48,
          "created_at": "2026-03-26T19:26:55Z",
          "last_comment_at": "2026-03-26T20:13:51Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 49,
          "created_at": "2026-04-08T21:37:31Z",
          "last_comment_at": "2026-04-08T21:39:58Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 52,
          "created_at": "2026-04-17T17:29:54Z",
          "last_comment_at": "2026-04-17T17:42:07Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 53,
          "created_at": "2026-04-24T20:54:07Z",
          "last_comment_at": "2026-04-24T20:58:27Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 57,
          "created_at": "2026-06-01T17:37:53Z",
          "last_comment_at": "2026-06-01T17:42:34Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 60,
          "created_at": "2026-06-20T08:59:15Z",
          "last_comment_at": "2026-06-20T09:03:32Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 61,
          "created_at": "2026-07-03T13:56:21Z",
          "last_comment_at": "2026-07-03T13:58:46Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 65,
          "created_at": "2026-07-21T19:17:55Z",
          "last_comment_at": "2026-07-21T21:00:16Z",
          "last_comment_author": "Andre1999Lopes"
        }
      ],
      "last_merged_pr_at": "2026-07-24T16:07:09Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/prefeitura-rio/app-rmi",
    "host": "github.com",
    "name": "app-rmi",
    "owner": "prefeitura-rio"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 60,
      "inputs": {
        "security": 53,
        "vitality": 92,
        "community": 12,
        "governance": 67,
        "engineering": 63
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 92,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 87,
            "inputs": {
              "commits_last_year": 404,
              "human_commit_share": 0.96,
              "days_since_last_push": 3,
              "active_weeks_last_year": 33
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "33/52 weeks with commits",
                "points": 22.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 33
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "404 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 404
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 12,
              "latest_release_tag": "v0.2.5",
              "releases_from_tags": false,
              "days_since_latest_release": 3,
              "mean_days_between_releases": 21.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "12 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~21.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 21.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 3,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 3 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 12,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 2,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "2 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": true,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "no license file detected",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "license_absent",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 67,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 33,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 8,
              "top_contributor_share": 0.851
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 85% of commits",
                "points": 3.4,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 85
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "8 contributors",
                "points": 10.8,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 9 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 79,
            "inputs": {
              "merged_prs": 57,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "57/58 decided PRs merged",
                "points": 37.6,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 57,
                      "decided": 58
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 4/13 approved changesets -- score normalized to 3",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "followers": 352,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "prefeitura-rio",
              "public_repos": 203,
              "account_age_days": 1742
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "352 followers of prefeitura-rio",
                "points": 18.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 352,
                      "login": "prefeitura-rio"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "203 public repos, account ~4 yr old",
                "points": 22.5,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 203
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 4
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/prefeitura-rio/app-rmi"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 3
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 3 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "12 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 63,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "6 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 53,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 55,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 5.5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 4/13 approved changesets -- score normalized to 3",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 9 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "34 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "at_risk",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 120 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 120
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 43,
            "inputs": {
              "source": "osv",
              "advisories": 57,
              "affected_packages": 10,
              "assessed_packages": 120,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 2, high 3, moderate 2, unknown 3",
              "direct_affected_packages": 4
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "4 affected: google.golang.org/grpc v1.79.3 (critical 9.1), go.opentelemetry.io/otel v1.40.0 (high 7.5), go.opentelemetry.io/otel/sdk v1.40.0 (high 7.0), +1 more",
                "points": 6.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 4,
                      "packages": "google.golang.org/grpc v1.79.3 (critical 9.1), go.opentelemetry.io/otel v1.40.0 (high 7.5), go.opentelemetry.io/otel/sdk v1.40.0 (high 7.0)"
                    }
                  },
                  {
                    "code": "advisories_affected_more",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "3 advisory-carrying package(s) unaddressed past 90 days; oldest published 166 days ago",
                "points": 26.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 3,
                      "oldest": 166
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 120,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 14
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 78,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.927,
              "agent_instruction_files": [
                ".cursor/rules/the-commit-thing.mdc",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 11711
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".cursor/rules/the-commit-thing.mdc, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".cursor/rules/the-commit-thing.mdc, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "89 of 96 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 89,
                      "sampled": 96
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 79,
            "inputs": {
              "has_nix": true,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "justfile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.4,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.03
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "justfile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "justfile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, Nix, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, Nix, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "40 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 40,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "3 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 3,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 308076,
              "source_files_sampled": 192,
              "oversized_source_files": 3
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "3/192 source files over 60KB",
                "points": 54.1,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 192,
                      "oversized": 3
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": false,
              "api_schema_files": [
                "docs/swagger.json",
                "docs/swagger.yaml"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "docs/swagger.json, docs/swagger.yaml",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "docs/swagger.json, docs/swagger.yaml"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [],
  "report_type": "repository",
  "generated_at": "2026-07-27T19:03:50.349720Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/prefeitura-rio/app-rmi.svg",
  "full_name": "prefeitura-rio/app-rmi",
  "license_state": "absent",
  "license_spdx": null
}