Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-31 21:06 UTC
sacloud / sakumock
Mock suite for Sakura Cloud APIs
sacloud/sakumock holds a health index of 61 out of 100, placing it in the Moderate band. It scores highest on AI Readiness (87/100) and lowest on Community & Adoption (44/100). It was last updated 11 days ago. A single contributor accounts for most of its recent work.
61
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
61
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
さくらのクラウドOrganization
45 followers85 public repossince May 2016
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/sacloud/sakumock | v0.7.1 | - | 12 | 11 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
75
Development activity
65Moderate
How it's scored
| 28.8/36 | Push recency — last push 11 days ago |
| 8.3/36 | Commit cadence — 12/52 weeks with commits |
| 18/18 | Commit volume — 493 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 493 |
| human_commit_share | 0.93 |
| days_since_last_push | 11 |
| active_weeks_last_year | 12 |
Release discipline
90Excellent
How it's scored
| 27/27 | Ships releases — 41 releases published |
| 36/36 | Release recency — latest release 11 days ago |
| 27/27 | Release cadence — a release every ~4.9 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 41 |
| latest_release_tag | v0.7.1 |
| releases_from_tags | no |
| days_since_latest_release | 11 |
| mean_days_between_releases | 4.9 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
44
Popularity & adoption
16Critical
How it's scored
| 15.5/60 | Stars — 10 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 10 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
77Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | yes |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
63
Maintainer resilience (bus factor)
22Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0.2/22.5 | Commit distribution — top contributor authored 99% of commits |
| 2.7/13.5 | Contributor breadth — 2 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 4 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0.993 |
How it's scored
| 46.8/46.8 | Issue resolution — 100% of issues closed |
| 33.6/38.3 | PR acceptance — 129/147 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/4 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 129 |
| open_issues | 0 |
| closed_issues | 1 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 18 |
Ownership & stewardship
67Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 12/25 | Owner reach — 45 followers of sacloud |
| 25/25 | Track record — 85 public repos, account ~10 yr old |
Inputs used
| followers | 45 |
| owner_type | Organization |
| is_verified | — |
| owner_login | sacloud |
| public_repos | 85 |
| account_age_days | 3,715 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 11 days ago |
| 20/20 | Version history — 12 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/sacloud/sakumock |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 11 |
Engineering Quality
Are baseline engineering and documentation practices in place?
57
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 3 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
40At risk
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
64
Security posture
63Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 2.2/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/4 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 4 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 4/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8 |
| 5/5 | SAST — SAST tool is run on all commits |
| 4.5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 5.2/7.5 | Vulnerabilities — 3 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 18 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 0 |
| scorecard_aggregate | 6.3 |
Dependency advisories
66Moderate
How it's scored
| 9.5/35 | Direct dependencies free of known advisories — 1 affected: google.golang.org/grpc v1.81.1 (critical 9.1) |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 40/40 | No advisories left outstanding — no advisory has been public longer than 90 days |
Inputs used
| source | osv |
| advisories | 4 |
| affected_packages | 3 |
| assessed_packages | 73 |
| unassessed_packages | 0 |
| affected_by_severity | critical 1, unknown 2 |
| direct_affected_packages | 1 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 73 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
87
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — CLAUDE.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 93 of 93 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 33,831 |
Verify loop (build / test / typecheck)
87Excellent
How it's scored
| 18/18 | One-command bootstrap — Makefile, apigw/Makefile, apprun/Makefile, apprundedicated/Makefile, eventbus/Makefile, iam/Makefile, kms/Makefile, monitoringsuite/Makefile, objectstorage/Makefile, secretmanager/Makefile, simplemq/Makefile, simplenotification/Makefile, test/terraform/Makefile, workflows/Makefile |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 10/10 | Demonstrated agent practice — 69 of the last 100 commits agent-authored or agent-credited |
| 8/8 | Automated maintenance — 1 of the last 100 commits are automated dependency updates |
| 8/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | Makefile, apigw/Makefile, apprun/Makefile, apprundedicated/Makefile, eventbus/Makefile, iam/Makefile, kms/Makefile, monitoringsuite/Makefile, objectstorage/Makefile, secretmanager/Makefile, simplemq/Makefile, simplenotification/Makefile, test/terraform/Makefile, workflows/Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0.69 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.01 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/305 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 48,139 |
| source_files_sampled | 305 |
| oversized_source_files | 0 |
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — apigw/openapi/openapi.json, apprun/openapi/openapi.yaml, apprundedicated/openapi/openapi.json, eventbus/openapi/openapi.json, iam/openapi/openapi.json, kms/openapi/openapi.json, monitoringsuite/openapi/openapi.json, objectstorage/openapi/openapi.json, simplenotification/openapi/openapi.yaml, workflows/openapi/openapi.json |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | apigw/openapi/openapi.json, apprun/openapi/openapi.yaml, apprundedicated/openapi/openapi.json, eventbus/openapi/openapi.json, iam/openapi/openapi.json, kms/openapi/openapi.json, monitoringsuite/openapi/openapi.json, objectstorage/openapi/openapi.json, simplenotification/openapi/openapi.yaml, workflows/openapi/openapi.json |
Key facts
10GitHub stars
2contributors
493commits, last 12 months
11days since last push
41releases
1bus factor
0open issues
Gopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
OpenSSF Scorecard 6.3 / 10
6.3aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 3 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/4 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 4 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 8 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 8 |
| 10 | SAST | SAST tool is run on all commits |
| 9 | Security-Policy | security policy file detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 7 | Vulnerabilities | 3 existing vulnerabilities detected |
Direct dependencies 23
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/alecthomas/kong | v1.15.0 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2 | v1.42.0 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/credentials | v1.19.24 | go.mod |
| Go | github.com/aws/aws-sdk-go-v2/service/s3 | v1.103.3 | go.mod |
| Go | github.com/aws/smithy-go | v1.27.1 | go.mod |
| Go | github.com/coreos/go-oidc/v3 | v3.19.0 | go.mod |
| Go | github.com/golang-jwt/jwt/v5 | v5.3.1 | go.mod |
| Go | github.com/golang/snappy | v1.0.0 | go.mod |
| Go | github.com/google/uuid | v1.6.0 | go.mod |
| Go | github.com/sacloud/sacloud-sdk-go | v0.0.1-beta.2 | go.mod |
| Go | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | v0.69.0 | go.mod |
| Go | go.opentelemetry.io/otel | v1.44.0 | go.mod |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.44.0 | go.mod |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp | v1.44.0 | go.mod |
| Go | go.opentelemetry.io/otel/sdk | v1.44.0 | go.mod |
| Go | go.opentelemetry.io/otel/trace | v1.44.0 | go.mod |
| Go | go.opentelemetry.io/proto/otlp | v1.10.0 | go.mod |
| Go | golang.org/x/oauth2 | v0.36.0 | go.mod |
| Go | golang.org/x/time | v0.15.0 | go.mod |
| Go | google.golang.org/grpc | v1.81.1 | go.mod |
| Go | google.golang.org/protobuf | v1.36.11 | go.mod |
| Go | gopkg.in/yaml.v3 | v3.0.1 | go.mod |
| Go | modernc.org/sqlite | v1.48.1 | go.mod |
All dependencies 73
Full resolved dependency set from the GitHub dependency graph: 23 direct and 50 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/alecthomas/kong | v1.15.0 | direct |
| Go | github.com/aws/aws-sdk-go-v2 | v1.42.0 | direct |
| Go | github.com/aws/aws-sdk-go-v2/credentials | v1.19.24 | direct |
| Go | github.com/aws/aws-sdk-go-v2/service/s3 | v1.103.3 | direct |
| Go | github.com/aws/smithy-go | v1.27.1 | direct |
| Go | github.com/coreos/go-oidc/v3 | v3.19.0 | direct |
| Go | github.com/golang-jwt/jwt/v5 | v5.3.1 | direct |
| Go | github.com/golang/snappy | v1.0.0 | direct |
| Go | github.com/google/uuid | v1.6.0 | direct |
| Go | github.com/sacloud/sacloud-sdk-go | v0.0.1-beta.2 | direct |
| Go | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | v0.69.0 | direct |
| Go | go.opentelemetry.io/otel | v1.44.0 | direct |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.44.0 | direct |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp | v1.44.0 | direct |
| Go | go.opentelemetry.io/otel/sdk | v1.44.0 | direct |
| Go | go.opentelemetry.io/otel/trace | v1.44.0 | direct |
| Go | go.opentelemetry.io/proto/otlp | v1.10.0 | direct |
| Go | golang.org/x/oauth2 | v0.36.0 | direct |
| Go | golang.org/x/time | v0.15.0 | direct |
| Go | google.golang.org/grpc | v1.81.1 | direct |
| Go | google.golang.org/protobuf | v1.36.11 | direct |
| Go | gopkg.in/yaml.v3 | v3.0.1 | direct |
| Go | modernc.org/sqlite | v1.48.1 | direct |
| Go | github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream | v1.7.13 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/internal/configsources | v1.4.29 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 | v2.7.29 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/internal/v4a | v1.4.30 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding | v1.13.12 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/service/internal/checksum | v1.9.22 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/service/internal/presigned-url | v1.13.29 | indirect |
| Go | github.com/aws/aws-sdk-go-v2/service/internal/s3shared | v1.19.29 | indirect |
| Go | github.com/benbjohnson/clock | v1.3.5 | indirect |
| Go | github.com/cenkalti/backoff/v5 | v5.0.3 | indirect |
| Go | github.com/cespare/xxhash/v2 | v2.3.0 | indirect |
| Go | github.com/dlclark/regexp2 | v1.11.5 | indirect |
| Go | github.com/dustin/go-humanize | v1.0.1 | indirect |
| Go | github.com/fatih/color | v1.19.0 | indirect |
| Go | github.com/felixge/httpsnoop | v1.0.4 | indirect |
| Go | github.com/ghodss/yaml | v1.0.0 | indirect |
| Go | github.com/go-faster/errors | v0.7.1 | indirect |
| Go | github.com/go-faster/jx | v1.2.0 | indirect |
| Go | github.com/go-faster/yaml | v0.4.6 | indirect |
| Go | github.com/go-jose/go-jose/v4 | v4.1.4 | indirect |
| Go | github.com/go-logr/logr | v1.4.3 | indirect |
| Go | github.com/go-logr/stdr | v1.2.2 | indirect |
| Go | github.com/gofrs/flock | v0.13.0 | indirect |
| Go | github.com/grpc-ecosystem/grpc-gateway/v2 | v2.29.0 | indirect |
| Go | github.com/hashicorp/go-cleanhttp | v0.5.2 | indirect |
| Go | github.com/hashicorp/go-retryablehttp | v0.7.8 | indirect |
| Go | github.com/mattn/go-colorable | v0.1.14 | indirect |
| Go | github.com/mattn/go-isatty | v0.0.20 | indirect |
| Go | github.com/ncruces/go-strftime | v1.0.0 | indirect |
| Go | github.com/ogen-go/ogen | v1.20.3 | indirect |
| Go | github.com/remyoudompheng/bigfft | v0.0.0-20230129092748-24d4a6f8daec | indirect |
| Go | github.com/segmentio/asm | v1.2.1 | indirect |
| Go | github.com/shopspring/decimal | v1.4.0 | indirect |
| Go | go.opentelemetry.io/auto/sdk | v1.2.1 | indirect |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.44.0 | indirect |
| Go | go.opentelemetry.io/otel/metric | v1.44.0 | indirect |
| Go | go.uber.org/multierr | v1.11.0 | indirect |
| Go | go.uber.org/ratelimit | v0.3.1 | indirect |
| Go | go.uber.org/zap | v1.27.1 | indirect |
| Go | golang.org/x/exp | v0.0.0-20260112195511-716be5621a96 | indirect |
| Go | golang.org/x/net | v0.55.0 | indirect |
| Go | golang.org/x/sync | v0.20.0 | indirect |
| Go | golang.org/x/sys | v0.45.0 | indirect |
| Go | golang.org/x/text | v0.37.0 | indirect |
| Go | google.golang.org/genproto/googleapis/api | v0.0.0-20260526163538-3dc84a4a5aaa | indirect |
| Go | google.golang.org/genproto/googleapis/rpc | v0.0.0-20260526163538-3dc84a4a5aaa | indirect |
| Go | gopkg.in/yaml.v2 | v2.4.0 | indirect |
| Go | modernc.org/libc | v1.70.0 | indirect |
| Go | modernc.org/mathutil | v1.7.1 | indirect |
| Go | modernc.org/memory | v1.11.0 | indirect |
Dependency advisories 3
This repository publishes no package the index resolves, so its own dependency graph was assessed — 73 packages, which also include development and test pins that never ship: 3 carry known advisories, of which 1 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| google.golang.org/grpc | v1.81.1 | direct | critical | 2 | 1.82.1 |
| golang.org/x/net | v0.55.0 | indirect | unknown | 1 | 0.56.0 |
| golang.org/x/text | v0.37.0 | indirect | unknown | 1 | 0.39.0 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1436,
"has_wiki": false,
"homepage": null,
"languages": {
"Go": 1460234,
"HCL": 10591,
"Makefile": 10660,
"Dockerfile": 773
},
"pushed_at": "2026-07-20T13:24:05Z",
"created_at": "2026-03-30T07:43:25Z",
"owner_type": "Organization",
"updated_at": "2026-07-24T10:35:25Z",
"description": "Mock suite for Sakura Cloud APIs",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://manual.sakura.ad.jp/cloud/",
"name": "さくらのクラウド",
"type": "Organization",
"login": "sacloud",
"company": null,
"location": "Japan",
"followers": 45,
"avatar_url": "https://avatars.githubusercontent.com/u/19633502?v=4",
"created_at": "2016-05-29T11:22:46Z",
"is_verified": null,
"public_repos": 85,
"account_age_days": 3715
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2026-07-20T13:30:46Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-07-05T14:22:50Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-06-28T01:12:37Z"
},
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2026-06-20T13:43:08Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-06-20T11:07:11Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-06-14T14:22:43Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-06-12T15:48:47Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-06-06T08:03:03Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-06-06T07:46:35Z"
},
{
"tag": "simplenotification/v0.0.5",
"kind": "other",
"published_at": "2026-06-06T07:38:48Z"
},
{
"tag": "secretmanager/v0.1.0",
"kind": "other",
"published_at": "2026-06-06T07:38:23Z"
},
{
"tag": "kms/v0.1.0",
"kind": "other",
"published_at": "2026-06-06T07:38:15Z"
},
{
"tag": "simplemq/v0.1.0",
"kind": "other",
"published_at": "2026-06-06T07:38:14Z"
},
{
"tag": "core/v0.0.4",
"kind": "other",
"published_at": "2026-06-06T07:32:59Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-05-29T15:53:00Z"
},
{
"tag": "simplenotification/v0.0.4",
"kind": "other",
"published_at": "2026-05-29T15:37:50Z"
},
{
"tag": "secretmanager/v0.0.6",
"kind": "other",
"published_at": "2026-05-29T15:37:07Z"
},
{
"tag": "kms/v0.0.6",
"kind": "other",
"published_at": "2026-05-29T15:36:27Z"
},
{
"tag": "simplemq/v0.0.6",
"kind": "other",
"published_at": "2026-05-29T15:34:54Z"
},
{
"tag": "core/v0.0.3",
"kind": "other",
"published_at": "2026-05-29T15:34:30Z"
},
{
"tag": "simplenotification/v0.0.3",
"kind": "other",
"published_at": "2026-05-20T05:36:32Z"
},
{
"tag": "secretmanager/v0.0.5",
"kind": "other",
"published_at": "2026-05-20T05:36:07Z"
},
{
"tag": "kms/v0.0.5",
"kind": "other",
"published_at": "2026-05-20T05:35:48Z"
},
{
"tag": "simplemq/v0.0.5",
"kind": "other",
"published_at": "2026-05-20T05:33:50Z"
},
{
"tag": "simplemq/v0.0.4",
"kind": "other",
"published_at": "2026-05-02T09:03:04Z"
},
{
"tag": "kms/v0.0.4",
"kind": "other",
"published_at": "2026-05-02T08:58:22Z"
},
{
"tag": "secretmanager/v0.0.4",
"kind": "other",
"published_at": "2026-05-02T08:57:33Z"
},
{
"tag": "simplenotification/v0.0.2",
"kind": "other",
"published_at": "2026-05-02T08:52:42Z"
},
{
"tag": "core/v0.0.2",
"kind": "other",
"published_at": "2026-05-02T08:50:33Z"
},
{
"tag": "secretmanager/v0.0.3",
"kind": "other",
"published_at": "2026-05-01T14:39:08Z"
},
{
"tag": "kms/v0.0.3",
"kind": "other",
"published_at": "2026-05-01T14:38:14Z"
},
{
"tag": "simplemq/v0.0.3",
"kind": "other",
"published_at": "2026-05-01T14:34:03Z"
},
{
"tag": "simplenotification/v0.0.1",
"kind": "other",
"published_at": "2026-05-01T14:33:21Z"
},
{
"tag": "core/v0.0.1",
"kind": "other",
"published_at": "2026-05-01T14:27:54Z"
},
{
"tag": "v0.0.1",
"kind": "patch",
"published_at": "2026-05-01T13:41:47Z"
},
{
"tag": "simplemq/v0.0.2",
"kind": "other",
"published_at": "2026-04-04T08:32:49Z"
},
{
"tag": "kms/v0.0.2",
"kind": "other",
"published_at": "2026-04-04T08:31:34Z"
},
{
"tag": "secretmanager/v0.0.2",
"kind": "other",
"published_at": "2026-04-04T08:30:47Z"
},
{
"tag": "secretmanager/v0.0.1",
"kind": "other",
"published_at": "2026-04-04T08:00:42Z"
},
{
"tag": "kms/v0.0.1",
"kind": "other",
"published_at": "2026-04-04T07:59:47Z"
},
{
"tag": "simplemq/v0.0.1",
"kind": "other",
"published_at": "2026-04-04T07:58:58Z"
}
],
"recent_commits": [
{
"oid": "c4300f7a3fb74ae1799ddb358fdbfe26a6b7d950",
"body": "Release for v0.7.1",
"is_bot": false,
"headline": "Merge pull request #147 from sacloud/tagpr-from-v0.7.0",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-20T13:23:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d223d2e32d0d66252a80f4881af282a8cba27bcd",
"body": null,
"is_bot": true,
"headline": "[tagpr] update CHANGELOG.md",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-20T13:18:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fc8952a6ce74e7173cf0bc24698a324331d6b2d",
"body": null,
"is_bot": true,
"headline": "[tagpr] prepare for the next release",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-20T13:18:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13eb7878a031d14cabe147c7b52646a2d5e35f0c",
"body": "feat: fault injection",
"is_bot": false,
"headline": "Merge pull request #148 from sacloud/feat/fault-injection",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-20T13:18:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dae8489ca9c21a53aecf3c1ea7a999c0f9ee1bb8",
"body": "The client observes the injected RST before the server-side handler\ngoroutine returns, so reading spans or handler-side state right after\nhttp.Get is racy — on Windows the span had not ended yet. Wait for the\nhandler to finish via a channel before asserting.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(core): sync on handler completion in reset fault tests",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-20T09:43:33Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e110fc265f91062a3dddbccffd5e2d1d20f0991e",
"body": "Restrict injectable statuses to 200-599: a 1xx is an informational\nresponse, not a final one, so injecting it would leave the client\nwaiting instead of producing the intended error.\n\nInclude the discarded handler status in the dropped-connection reason\nfor reset:...:after faults (log and span status), so before- and\nafter-phase resets are distinguishable when debugging retries.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(core): address fault injection review feedback",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-20T09:36:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b266b33bc4ff8ed709099b07e2e5c0e659c1e519",
"body": "Tag the request's span with sakumock.fault.code / .phase (and\n.replaced_status for after-phase faults) so an injected fault is\ndistinguishable from a real error in traces. A reset sets the span\nstatus to error explicitly, since a dropped connection writes no HTTP\nstatus for otelhttp to record. The span comes from the request context,\nso this is a no-op when tracing is disabled.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(core): annotate spans for injected faults",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-20T09:33:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d6a904ceb2b51aa3e85e9542f0310878bab41128",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "docs: document fault injection",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-20T09:27:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "33c3da1d802b8bab4d6c6019b8c137fc29f2b12d",
"body": "Each service Config gains Fault []string (--fault / <SERVICE>_FAULT),\nparsed in NewHandler with the service's own error envelope and wrapped\noutermost in routeTable() — outside auth/rate-limit/validation, so an\ninjected fault behaves like an infrastructure failure. Mock-only\n/_sakumock/ inspection r\n[…]\nus\nforwarder test helper now takes a slice instead of a map keyed by\ncore.ServiceConfig.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat: wire fault injection into every service",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-20T09:27:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fd54df735377b97d4275d7b31d0df3782e8d03a8",
"body": "Add core.FaultInjector, a nil-safe middleware that probabilistically\ninjects HTTP faults from CODE:RATE[:PHASE] specs: an error status\n(100-599) or \"reset\" (abrupt TCP close via hijack + SetLinger(0)).\nA single roll per request against cumulative thresholds keeps each\nconfigured rate exact and mutua\n[…]\npped records a synthetic 499 so dropped\nconnections still appear in the per-request log.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(core): add fault injection primitive",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-20T09:27:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "35de9ed81a50812cfe60e33b02617c72877802ff",
"body": "Fix Windows compatibility issues",
"is_bot": false,
"headline": "Merge pull request #146 from sacloud/fix/windows-compat",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-07T08:16:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89eb79f0684b9a5718333c0a7a20d5387a2ac435",
"body": "…ix check\n\nversitygw rejects a sidecar path with strings.HasPrefix(sidecar, root),\nso the \"<dir>.meta\" sibling was misdetected as inside the root. Name\nthe sidecar \"meta-<dirname>\" next to the backend dir instead.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(objectstorage): keep the sidecar dir out of versitygw's root pref…",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-07T08:07:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0cd67997c4c9077f05cd6659e58a190613f85f41",
"body": "The child's stdout/stderr is only visible at debug level, so a startup\nfailure or unexpected exit gave no clue why. Keep the last 20 output\nlines and attach them to the startup error and the unexpected-exit log.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(objectstorage): include recent versitygw output in failure reports",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-07T08:04:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c02843e17d055d7b0151939e1593d970132013d9",
"body": "versitygw's default metadata store is xattrs, verified at startup, so\non NTFS it exited immediately with status 1. On Windows sakumock now\npre-creates a sidecar directory next to the backend dir (inside it,\nthe posix backend would list it as a bucket) and passes --sidecar.\nUnix keeps the xattr default.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(objectstorage): use versitygw sidecar metadata on Windows",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-07T07:59:14Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c7e3bc98aebee37b7cb58d09dfa09064ee5ed70b",
"body": "The genvalidate golden tests and the generated-code diff check compare\ncommitted bytes against LF output, so a CRLF checkout on Windows broke\nthem. No committed file currently has CRLF endings.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "chore: force LF checkout via .gitattributes",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-07T07:59:14Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "982084c153f7b5e2e5dfd5357af250b3dc4a19b6",
"body": "The objectstorage data plane is where the OS-specific code lives\n(process stop, versitygw.exe resolution, bucket directories on NTFS).\nversitygw ships Windows binaries as of v1.6.0; the release asset is\nfetched directly because mise's Windows support is still experimental.\nThe other data plane e2e j\n[…]\nnux-only: apprun needs Linux\ncontainers, which GitHub-hosted Windows runners cannot run.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "ci: run objectstorage data plane e2e on Windows",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-07T07:49:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b18c7f8da5a9f5de4a439d03b7a681310c3b7918",
"body": "The release ships Windows binaries, so build/vet/test must pass there.\nOne windows-latest leg is added; the full Go version matrix stays on\nLinux.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "ci: run unit tests on Windows",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-07T07:49:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "10d86eec563c370582375c5594f073bff1f24cb9",
"body": "…be created\n\nA data-plane mkdir failure (e.g. a bucket name the local filesystem\nrejects, such as a Windows reserved device name) was only logged at\nwarn level, leaving a control-plane bucket the data plane cannot serve.\nReturn the error, roll the bucket back from the store, and respond 500\nso the failure is visible to the client and a retry does not hit 409.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(objectstorage): fail bucket creation when the backend dir cannot …",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-07T07:27:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f8d12db86fb4b6e149f2ad19fc3349ac21462ef4",
"body": "cmd.Cancel sent SIGTERM unconditionally, which Process.Signal does not\nsupport on Windows, so every Close waited out the 5s WaitDelay before\nthe hard kill. Move the stop into build-tagged terminateProcess\n(SIGTERM on Unix, Kill on Windows). Also note that exec.LookPath\nresolves versitygw.exe via PATHEXT, so no binary-name change is needed.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(objectstorage): stop the data plane process portably",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-07T07:27:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dc4d38413137a0b8bc3b8a45bb9c9e8e5c10df72",
"body": "The exec hook hard-coded sh -c, which does not exist on Windows, so\nevery accepted message failed the hook there. Select the platform shell\n(sh -c on Unix, cmd /c on Windows) via build-tagged files.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(simplenotification): run --exec through cmd /c on Windows",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-07T07:26:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7f405cc5525b4acac77e5e3be7d0eb4a95666815",
"body": "Release for v0.7.0",
"is_bot": false,
"headline": "Merge pull request #129 from sacloud/tagpr-from-v0.6.0",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-05T14:18:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "217477ac9f670ddcc8074cf7454ad3385cac2801",
"body": null,
"is_bot": true,
"headline": "[tagpr] update CHANGELOG.md",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-04T13:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f96b70abed51ba08f6fdf0f69816bd5224ce5ab",
"body": null,
"is_bot": true,
"headline": "[tagpr] prepare for the next release",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-04T13:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "582e513a6210371b10d3bed15b0b808069b5c970",
"body": "feat: OpenTelemetry trace support",
"is_bot": false,
"headline": "Merge pull request #145 from sacloud/feature/otel-trace",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-04T13:02:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "495fec1df41a15df4df566735c44cdf44e4ea955",
"body": "Select otlptracegrpc when OTEL_EXPORTER_OTLP_(TRACES_)PROTOCOL=grpc,\nkeeping http/protobuf as the default. grpc was already transitively\nlinked by otlptracehttp, so this adds only ~0.3MB to the binary.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(core): support OTLP/gRPC trace export",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T12:53:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cb5d9464afa38a68034374391c9e2b1f6a50f9a2",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "docs: document OpenTelemetry tracing",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T12:43:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fef654e4e3d7b0f71c056e3cb95f4d498c8a95d9",
"body": "Each Command.Run calls core.SetupTracing and wraps its handler with\ncore.TraceHandler at the core.Serve call; the in-process data planes\n(monitoringsuite ingest, apprun/apprundedicated proxies, apigw gateway)\nwrap their http.Server handlers likewise. The external versitygw data\nplane is not instrumented.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat: wire OpenTelemetry tracing into every service",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T12:43:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1358f6e67ea000f95a94f5b1e9a307cfa34303d4",
"body": "Add SetupTracing/TraceHandler/TracingEnabled to core, configured solely\nvia the standard OTEL environment variables (no sakumock flags).\nTraceHandler instruments handlers with otelhttp server spans, honoring\ninbound W3C traceparent, and back-fills the http.route attribute from\nthe ServeMux pattern (\n[…]\nks\ngrpc/grpc-gateway (never executed) — accepted for correct standard\nenv-var semantics.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(core): add OpenTelemetry trace support",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T12:43:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4d203c17b6a51569add815b8f0eaf8fec35b62fc",
"body": "chore: drop what-only comments and fix two stale ones",
"is_bot": false,
"headline": "Merge pull request #144 from sacloud/chore/comment-cleanup",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-04T12:08:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bfd2f7de87d9f9763b9de4d829c0908d8338616",
"body": "Comments that merely restate the adjacent code drift on future edits;\nremove the handful that existed (unexported doc comments restating\ntheir identifier). Fix two that had already drifted: eventbus's\nvalidateSettings doc referenced a removed pcExists parameter, and\napigw's UpdateCertificate claimed\n[…]\nno sync was needed directly above the\nloop that syncs the denormalized certificate name.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "chore: drop what-only comments and fix two stale ones",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T12:01:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "92fa001e79c0b327b9eaa24c4f096ce179dd1fe4",
"body": "feat(apigw): enforce corsConfig on the data plane",
"is_bot": false,
"headline": "Merge pull request #143 from sacloud/feature/apigw-cors",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-04T11:50:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fa925d2290630425abe57c44a604b3e767bdfa8",
"body": "With preflightContinue, CORS preflights to an object-storage service\npreviously fell into the plain OPTIONS branch and got a bare 204. They\nare now forwarded (unsigned, as browsers send them) to the\nS3-compatible endpoint, whose bucket CORS configuration answers, and\nthe Access-Control/Vary headers \n[…]\nd — making the documented\n\"pass preflights to the upstream\" true on both proxying paths.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(apigw): honor preflightContinue for object-storage services",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T11:47:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e059c63375e8d84233fb0730265f5308a0a128b9",
"body": "Preflights are answered by the gateway before authentication (browsers\nsend them without credentials), honoring the configured origins,\nmethods, headers, maxAge, credentials (a wildcard origin is echoed back\nwhen credentials are on), privateNetwork, and preflightContinue. Actual\nresponses gain Acces\n[…]\nigin gets no CORS headers, leaving the\nblocking to the browser as the real gateway does.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(apigw): enforce corsConfig on the data plane",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T11:35:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1cba3064e30a4127b8fb20538bd75f7c80ee4552",
"body": "feat(apigw): serve object storage backends on the data plane",
"is_bot": false,
"headline": "Merge pull request #142 from sacloud/feature/apigw-s3-backend",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-04T11:29:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57cda66b06493bf2b3f79498afb335184902ab76",
"body": "…gths\n\nAn object-storage route created with an empty methods list now defaults\nto GET/HEAD/OPTIONS instead of being expanded to all methods by the\ngeneral route defaulting, and Content-Length is only set when the\nbackend reports a length (nil stays distinct from an empty object's 0).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(apigw): default object-storage route methods and keep unknown len…",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T11:16:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "56a08e89d936889602938f0c9a0da9ebb7fbbc9a",
"body": "…lane\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "docs(apigw): note the region requirement for the objectstorage data p…",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T11:13:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "14c69337ccb71dfa2e8f46dd486a381378058ad1",
"body": "A service with objectStorageConfig now serves objects from the\nconfigured S3-compatible endpoint (SigV4, path-style) instead of\nproxying to an HTTP upstream. The configuration is self-contained\n(endpoint, region, credentials), so any backend works: sakumock's own\nobjectstorage data plane, MinIO, or \n[…]\ne. Uses the aws-sdk-go-v2 S3\nclient already required by the objectstorage service tests.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(apigw): serve object storage backends on the data plane",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T11:03:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cb91f848fdaa2abbfac92e7e6f43b21e1614bbfd",
"body": "feat(apigw): apply request/response transformations on the data plane",
"is_bot": false,
"headline": "Merge pull request #141 from sacloud/feature/apigw-transform",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-04T11:02:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3348d3c3a1b072161d0cd2e52b92e50d970d35ea",
"body": "…ations\n\nReplace/add now check canonical header-map membership instead of\nGet() != \"\", so headers present with an empty value are handled per the\ndocumented semantics. replace.body uses pointer presence, making an\nexplicit empty-string replacement possible. A request-body read error\nforwards the byt\n[…]\nd with a consistent Content-Length, and the\nresponse JSON guard accounts for a nil body.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(apigw): correct header existence and body edge cases in transform…",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T09:45:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7a2485643e8cef7f84e25ab81f5075afa0cf2fe3",
"body": "Route transformations (stored since the control-plane phase) now take\neffect when proxying, following the real gateway's transformer\nsemantics: phases apply allow -> remove -> rename -> replace -> add ->\nappend, replace only touches existing keys, add only missing ones,\nappend accumulates, and respo\n[…]\nkeys address nested fields); non-JSON and\ncontent-encoded bodies pass through untouched.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(apigw): apply request/response transformations on the data plane",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T09:28:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a149712af55bb2b513dfef66bde322bfa4fa2be0",
"body": "feat(apigw): support the OIDC authorization code flow with sessions",
"is_bot": false,
"headline": "Merge pull request #140 from sacloud/feature/apigw-oidc-session",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-04T09:17:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92154f91bc0cbdf885c70e4c5ba6e073cc9d8c69",
"body": "The openid scope is now guaranteed even when custom scopes are set\n(without it the IdP returns no id_token), the redirect_uri preserves\nthe originally requested query string, and state/nonce/session IDs come\nfrom crypto/rand.Text, which cannot fail.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(apigw): always request the openid scope and keep the original query",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T09:15:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2f56172c15d21d15511abfe4bf845e12d6db6b7e",
"body": "Unauthenticated requests to a service whose OIDC configuration allows\nauthorizationCodeFlow are redirected to the IdP with the protected URL\nas redirect_uri; the callback validates state, exchanges the code\n(x/oauth2), verifies the ID token including the nonce, establishes an\nin-memory session bound\n[…]\nrect URI rules,\nso a real browser login (e.g. Google) works against the mock end to\nend.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(apigw): support the OIDC authorization code flow with sessions",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T09:07:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d8da096fc606b822f8cf6ecd3f51f19d450f32f2",
"body": "feat(apigw): validate OIDC Bearer tokens on the data plane",
"is_bot": false,
"headline": "Merge pull request #139 from sacloud/feature/apigw-oidc",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-04T09:01:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd40684f44009c7c809d190a0303e11a68b9f620",
"body": "…overy\n\nAn OIDC configuration allowing only authorizationCodeFlow no longer\naccepts Bearer tokens, the discovery request gets a 10s timeout so a\nstalled IdP fails fast (the provider's JWKS key set uses its own\nbackground context, so only discovery is bounded), and the\ncredentials-kept test now actually asserts the Authorization header\nreaches the upstream.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(apigw): gate Bearer auth on the accessToken method and bound disc…",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T08:53:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dc70cd1ce7ff10c3752831fc603da5d290e34e1b",
"body": "Services with authentication \"oidc\" now verify Bearer tokens against\nthe configured issuer via OpenID Connect discovery and JWKS (go-oidc),\nso any IdP works, including real ones. The token's aud must contain the\nclientId, or one of tokenAudiences when set; hideCredentials strips\nAuthorization before\n[…]\nem. The\nauthorizationCodeFlow method (browser login + session) arrives in a\nlater phase.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(apigw): validate OIDC Bearer tokens on the data plane",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T08:39:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "84bbc1873e377b22f565e0c2ae6b649c81d3493b",
"body": "feat(core): log the error reason on 4xx/5xx responses in every service",
"is_bot": false,
"headline": "Merge pull request #138 from sacloud/feature/log-error-reason",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-04T08:33:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ec003d2fd51030b932c5b98739efc4fc0769e5b",
"body": "Request logs previously showed only the status code; the rejection\nreason reached the client alone. core.ResponseRecorder captures a\nbounded prefix of error response bodies and core.RequestLogArgs emits\nit as the error attribute, replacing each service's duplicated\nresponseWriter wrapper.\n\napprun's \n[…]\n Debug to Info (the documented\nconvention), and apprundedicated's gains the status code.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(core): log the error reason on 4xx/5xx responses in every service",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T08:26:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "771429d8b762a278866a0f2bce35cf8dd3e53b3b",
"body": "feat(apigw): enforce data-plane authentication, group ACL, and IP restriction",
"is_bot": false,
"headline": "Merge pull request #137 from sacloud/feature/apigw-auth",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-04T08:21:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6b072f266ddb4c0dab92a0620e4a037cc379beb",
"body": "…ssage\n\nCompare fixed-length password digests so the comparison takes the same\ntime regardless of password length or user existence, send\nWWW-Authenticate on every basic-auth 401, and report undecodable JWTs\nas \"Bad token\" (ParseUnverified fails for more than JSON errors).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(apigw): harden basic-auth compare and generalize the bad-token me…",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T08:15:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "117a989ffbedee3adf66940a45fccc91156f38d4",
"body": "…/x/net-0.55.0\n\nbuild(deps): Bump golang.org/x/net from 0.54.0 to 0.55.0",
"is_bot": false,
"headline": "Merge pull request #135 from sacloud/dependabot/go_modules/golang.org…",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-04T08:10:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "631d6a9baa6ee7c6d13e29b0ae8f47ebfa320468",
"body": "The API reference states the user's IP restriction takes effect only\nwhen the route has no IP restriction configured; the route-level\nsetting disables the user-level one rather than stacking.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(apigw): user IP restriction only applies when the route has none",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T08:10:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "00bd94af8340e5bdb382e992692d083d7d1a7084",
"body": "…triction\n\nThe service's authentication scheme is verified before proxying:\nbasic (constant-time compare), hmac (draft-cavage signatures,\nhmac-sha1/256/384/512, 300s clock skew on Date), and jwt (credential\nresolved by the iss claim, signature verified with the credential's\nalgorithm only). Route au\n[…]\nves the consumer by them.\nOIDC-protected services return 401 until the OIDC phase lands.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(apigw): enforce data-plane authentication, group ACL, and IP res…",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T07:49:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a233b45fe7aad025234b111136beca7046b93b94",
"body": "feat(apigw): add the gateway data plane",
"is_bot": false,
"headline": "Merge pull request #136 from sacloud/feature/apigw-dataplane",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-04T07:43:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "688a7d7910c3fc560adcc2a0e2a33daa896897de",
"body": "readTimeout/writeTimeout now apply as per-operation deadlines on the\ndialed connection (nginx-style: the idle time between successive\nread/write operations), replacing ResponseHeaderTimeout which only\ncovered reads and left writeTimeout unused.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(apigw): honor the service writeTimeout on upstream connections",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T07:41:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "93298d2b28171bbaba5760c2973e83e7e28888d8",
"body": "HTTP hostnames compare case-insensitively, so RoutesByHost now uses\nEqualFold. Store listings sort by CreatedAt with the ID as tie-break;\ntimestamps can collide and map iteration is random, which made list and\nroute-precedence order nondeterministic.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(apigw): case-insensitive host matching and deterministic list order",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T07:30:43Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e7a8ffbd57aa6989cf1a0f771af80e621812d8ce",
"body": "A separate listener (default 127.0.0.1:28091, --enable-data-plane)\nmatches requests by Host header, path, and method against the\nconfigured routes and reverse proxies them to the owning service's\nupstream, reading the store directly so control-plane changes apply\nimmediately.\n\nKong-style semantics p\n[…]\nrt for bodyless requests.\nAuthentication plugs into the authorize seam in a later phase.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(apigw): add the gateway data plane",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T07:14:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "25e9d296b82c38e4279472e078005e281ae0bf40",
"body": "feat(apigw): add API Gateway mock service (control plane)",
"is_bot": false,
"headline": "Merge pull request #134 from sacloud/feature/apigw",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-04T07:06:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81a0670255dbf2c6f1b234b33095f021112f9f48",
"body": "Distinguish undecodable PEM from non-x509 content in the error message,\nand verify the cert/key pair matches via tls.X509KeyPair so a mismatch\nconfigured against the mock fails here instead of only on the real API.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(apigw): return debuggable certificate errors and validate key pairs",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T07:01:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bf8e2db7bce1e62d5120af1fd11fe8b2d586abca",
"body": "The generated schema already enforces subscription and subscription.id\nas required; the empty-string case is a spec gap, declared via\ncore.WithNonEmpty instead of a hand-written handler check.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "refactor(apigw): move subscription.id check into the validator overlay",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T06:49:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bf8b9dd8b56379b3d176d26fd727d0a4841c037d",
"body": "Other SAKURA Cloud APIs serialize resource IDs as JSON strings; the\napigw spec declares resourceId as int64, so the mock follows the spec.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "docs(apigw): note why Subscription.resourceId is a number",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T06:40:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "02344e6b0ea912507967c4d48d82515f00cc307c",
"body": "…ation\n\napigw was missing from the per-service --addr flags, so it listened on\nits fixed default port. Allocate all free ports while holding every\nlistener open, so the kernel cannot hand out the same port twice — the\nsequential open/close pattern caused a bind conflict in CI.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(test): register apigw in the terraform e2e and de-race port alloc…",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T06:35:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2c046035415982981a20d5cebe451dbfd6b44002",
"body": "Fill all HTTP methods when a route is created with an empty methods list\n(the spec allows all methods when unspecified), and surface\nstrconv.ParseInt failures from resource ID generation instead of\nsilently storing resourceId=0.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(apigw): apply spec defaults and error handling in store",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T06:35:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "97ecb4e8d110f6f7ba23e2acde5e0c0695248fc5",
"body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.54.0 to 0.55.0.\n- [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n dependency-version: 0.55.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): Bump golang.org/x/net from 0.54.0 to 0.55.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-04T06:25:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "563e97a32115d147580556fd16bf84ca347bc87c",
"body": "Implement all 49 management API operations (services, routes, route\nauthorization/transformations, users, groups, domains, certificates,\nplans, subscriptions, OIDC) with in-memory storage on port 18091.\n\nEach service gets an auto-issued routeHost (site-<id>.localhost) for the\ndata plane planned in a\n[…]\nom the OpenAPI spec, with WithNonEmpty overlays for\nrequired-but-no-minLength spec gaps.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(apigw): add API Gateway mock service (control plane)",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-04T06:16:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f967a1c27bb8dcffb03073b2d4ed2e1a6f62a370",
"body": "Declare no-minLength spec gaps via core.WithNonEmpty overrides",
"is_bot": false,
"headline": "Merge pull request #133 from sacloud/feature/nonempty-overlay",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-02T09:58:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cb49f174e609f4ad564f939421a196a73006986",
"body": "Keep empty-string guards for identifiers the spec gives no minLength",
"is_bot": false,
"headline": "Merge pull request #132 from sacloud/fix/empty-string-guards",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-02T09:55:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60c7c8932aa37b640aaece936f388f737070627e",
"body": "Replace the ~20 hand-written empty-string guards across nine services\nwith a per-service validate_overrides.go table applied through\ncore.WithNonEmpty, so each service's spec gaps are declared in one\nreviewable file instead of scattered handler checks. apprundedicated's\nimage/PEM/zone checks move to\n[…]\nnot be\nempty\" from the shared evaluator instead of the ad-hoc \"X is\nrequired\" variants).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "refactor: declare no-minLength spec gaps via core.WithNonEmpty overrides",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T09:43:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1b53d1a27de9da350026221a64fa01392d1234f5",
"body": "Add a construction option that overlays a MinLength-1 constraint onto\nstring fields addressed as dotted property paths per route. It captures\nthe recurring spec gap where a field is required but has no minLength\nwhile the real API rejects an empty string, replacing the hand-written\nper-handler guard\n[…]\ns, and an unresolvable route or path panics\nat construction so spec renames fail loudly.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(core): add WithNonEmpty overlay to BodyValidator",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T09:39:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "af42cdb49a4847896b2578a3c522ae361ce0ffa6",
"body": "…ngth\n\nExtend the convention established in #131 to the services wired in #128\nand #130: restore the explicit empty-string rejections for create-time\nidentifier fields whose spec schemas declare required but no minLength,\nso an explicit \"\" is not silently stored. Covered: kms Key.Name,\neventbus Comm\n[…]\nlookup 4xxes on \"\" (apprundedicated clusterID,\nmonitoringsuite notification_target_uid).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix: keep empty-string guards for identifiers the spec gives no minLe…",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T09:25:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e1dd09242538816daa28bb7de258555b05368af8",
"body": "Roll out generated spec-derived validation to the remaining four services",
"is_bot": false,
"headline": "Merge pull request #131 from sacloud/feature/spec-validation-mapped",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-02T09:21:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c4981958d9b4589c29fbbde5766bf9e20b83943",
"body": "…ngth\n\nRestore the explicit empty-string rejections for CommonServiceItem.Name\n(simplenotification), Vault.Name/KmsKeyID and Secret.Name\n(secretmanager), and cluster_id/dest_bucket/new_plan fields\n(objectstorage). The generated validation only enforces key presence for\nthese fields (their spec schem\n[…]\njects empty values — the same convention already applied to Message\nand message content.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix: keep empty-string guards for identifiers the spec gives no minLe…",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T09:17:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "392c911f72f6a514a6a756f3cbd39500c465de6e",
"body": "Also make the sakumock all ID-generator test send a spec-conformant\nCommonServiceItem body, since the simplenotification spec marks every\nfield required and the generated validation now enforces that.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "docs: mark all services wired with generated validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T08:14:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8cc6838e5768987b676efc229226b1b3646926dc",
"body": "Wire the generated bodySchemas table into the existing api() route\nhelper via core.BodyValidator. The mapping file bridges the spec's\nserver-URL structure onto the mock's route families: a /{site}/v2\nprefix for the site API (the spec models the site as a server variable)\nand explicit route overrides\n[…]\nnd conflict checks\n(bucket exists, account exists, contract mismatch) stay hand-written.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(objectstorage): enable generated spec-derived request validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T08:12:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b048fb006f723c5146b1070f3ebd2828f941f871",
"body": "Feed both specs (queue.yaml control plane, message.yaml data plane)\ninto one generated bodySchemas table and wire it through two\ncore.BodyValidator instances sharing the table but writing the 400 in\neach plane's own error envelope. Auth middleware stays outermost, so\nunauthenticated requests still g\n[…]\nth-parameter\nvalidators stay hand-written (path parameters are outside body\nvalidation).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(simplemq): enable generated spec-derived request validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T08:09:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d27c30452db0bed96ffe0fb1a1828903353709aa",
"body": "…ation\n\nWire the generated bodySchemas table into the route table via\ncore.BodyValidator (converting API routes to the shared route() helper;\n/_sakumock/ inspection routes stay unwrapped) and drop the hand-written\nchecks the spec covers: CommonServiceItem.Name required, Provider.Class\nenum, and the \n[…]\n. validate_mapping.json skips the routing/reorder spec path\nthe mock does not implement.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(simplenotification): enable generated spec-derived request valid…",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T08:06:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d325c8c3f75a01dc2a1036630b71c87af75036ff",
"body": "Wire the generated bodySchemas table into the route table via\ncore.BodyValidator (converting routeTable to the shared route() helper)\nand drop the hand-written Vault.Name/KmsKeyID and Secret.Name required\nchecks the spec covers. This is the first service using the generator's\n-mapping option: valida\n[…]\names the spec's {resource_id}\npath parameter to the {vault_resource_id} the mock serves.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(secretmanager): enable generated spec-derived request validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T08:03:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "32ba0ed85bda427596b869e49056a0bfb60141ac",
"body": "Roll out generated spec-derived validation to six services",
"is_bot": false,
"headline": "Merge pull request #130 from sacloud/feature/spec-validation-rollout",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-02T07:59:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1af7158f676929264f6c9ff7e1b612fb082fbe70",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "docs: update the list of services wired with generated validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T07:35:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5a0cfe6c601da4495a52357c6664b520f5130d0e",
"body": "Wire the generated bodySchemas table into the route table via\ncore.BodyValidator (converting routeTable to the shared route() helper)\nand shrink the hand-written validators to the domain rules the spec\ncannot express: reserved ports, reserved env keys, the valid cpu/memory\npair list, env key/value b\n[…]\nfics endpoint stays hand-validated (its spec schema is a oneOf,\ndegraded to permissive).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(apprun): enable generated spec-derived request validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T07:34:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6970c7f38f5270da40a11ee967b8a14f7d90a2bb",
"body": "Wire the generated bodySchemas table into the route table via\ncore.BodyValidator (converting routeTable to the shared route() helper)\nand shrink validate.go to the domain rules the spec cannot express:\nservice-class allow-lists, the reserved port range 5950-5959, min/max\ncross-field comparisons, at-\n[…]\nnd array bounds now come from the\ngenerated table; validate_test.go shrinks accordingly.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(apprundedicated): enable generated spec-derived request validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T07:32:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "64b5ae8faacee57706d161f3f7b0d8e5bcd3a1e0",
"body": "Wire the generated bodySchemas table into the route table via\ncore.BodyValidator (converting API routes to the shared route() helper;\n/_sakumock/ inspection routes stay unwrapped) and drop the hand-written\nName required and Provider.Class enum checks the spec covers. The\nSettings and Secret payloads\n[…]\nspec (degraded to\npermissive), so validateSettings and validateSecret stay hand-written.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(eventbus): enable generated spec-derived request validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T07:28:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e99292041ff8017cb12ef29f11df462b5a47d9b9",
"body": "Wire the generated bodySchemas table into the route table via\ncore.BodyValidator (converting routeTable to the shared route() helper)\nand drop the hand-written name/code required checks the spec covers\nacross api-keys, groups, SCIM, service principals, SSO profiles,\nfolders, projects, and users. The\n[…]\n. The form-urlencoded OAuth2\ntoken endpoint is skipped by the generator (non-JSON body).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(iam): enable generated spec-derived request validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T07:25:54Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "28c94bef5633bf2020585e25e178d536ba9b8718",
"body": "Wire the generated bodySchemas table into the route table via\ncore.BodyValidator (converting routeTable to the shared route() helper)\nand drop the hand-written checks the spec covers: workflow/revision\nName and Runbook required, and subscription PlanId required (the spec's\nminimum: 1 also rejects an explicit 0). Runbook content validation and\nrevision-ID checks stay hand-written.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(workflows): enable generated spec-derived request validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T07:23:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "02c014a730849e71d9c2ddcf2dcea02285d34aa4",
"body": "Wire the generated bodySchemas table into the route table via\ncore.BodyValidator (converting routeTable to the shared route() helper)\nand drop the hand-written checks the spec covers: Key.Name required,\nKeyOrigin enum, and encrypt Algo enum. The Status presence check and the\nPendingDays 7-14 range stay hand-written because the spec declares\nneither.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(kms): enable generated spec-derived request validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T07:20:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "15563754a05972aca946aa0a541bd102b8a57275",
"body": "Generate request-body validation from OpenAPI specs",
"is_bot": false,
"headline": "Merge pull request #128 from sacloud/feature/spec-generated-validation",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-07-02T07:15:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd7070fe447bf7d6b3734aadf068fc64161e2b6f",
"body": "… semantics\n\nAddress review feedback on schema compilation:\n\n- Compile keyword constraints (length, pattern, bounds, items) even when\n the schema omits type, as JSON Schema allows; each keyword group now\n applies to its own type or an untyped schema.\n- Merge allOf parts per AND semantics: items an\n[…]\n first type, so no\n spec-valid value is rejected while keyword constraints still apply.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix(genvalidate): compile untyped constraints and correct allOf merge…",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T06:39:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a5a6acd6ef90a38a04730c61b0434eb789bd3b0d",
"body": "Wire the generated bodySchemas table (validate_gen.go) into the route\ntable via core.BodyValidator and delete the hand-written required/length\nchecks it supersedes; referential and domain checks stay in handlers.\nNil checks for spec-nullable fields (log-measure rule storage IDs) are\nkept because an \n[…]\ngistered route\nso spec/route drift fails tests instead of silently disabling\nvalidation.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(monitoringsuite): enable generated spec-derived request validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T05:38:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b6ea6bca74d223e63a92315050c52d3e59b542ae",
"body": "Add core.BodySchema (constraint evaluator for decoded JSON bodies) and\ncore.BodyValidator (nil-safe per-route middleware, following the\nRateLimiter pattern), plus internal/genvalidate, a code generator that\ncompiles each service's OpenAPI spec into a validate_gen.go schema table.\n\nCodegen was chosen\n[…]\npaths. The generated-code\nCI job keeps generated files in sync with the committed specs.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat(core): add spec-derived request-body validation",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-07-02T05:38:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4f5c0fdc3b9165d503ae308c57007a1b69bfabe2",
"body": "Release for v0.6.0",
"is_bot": false,
"headline": "Merge pull request #120 from sacloud/tagpr-from-v0.5.2",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-06-28T01:07:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7178c46c11c1687c780442ed8f9b61d64d7cf01",
"body": null,
"is_bot": true,
"headline": "[tagpr] update CHANGELOG.md",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-28T00:27:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d5111bdb59d47c753331851ca996074b36b0753",
"body": null,
"is_bot": true,
"headline": "[tagpr] prepare for the next release",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-28T00:27:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b0f5faee10465e543f2ddec1a078e2145107b73",
"body": "docs: update READMEs to match implemented endpoints",
"is_bot": false,
"headline": "Merge pull request #127 from sacloud/fix/update-readme-endpoints",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-06-28T00:27:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d145c0130aabfeba3b875e731fa0872c9d79ce57",
"body": "- secretmanager: add vault API endpoints, fix path parameter name\n- simplenotification: add CRUD endpoints for destinations/groups/routings\n- monitoringsuite: add alert project histories to endpoint listing\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "docs: update READMEs to match implemented endpoints",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-06-28T00:07:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9fca28f8f23063b645eb90862d1a9f7c6ee7f1e3",
"body": "feat: add InspectionClient for mock-only endpoints",
"is_bot": false,
"headline": "Merge pull request #126 from sacloud/feat/inspection-client",
"author_name": "FUJIWARA Shunichiro",
"author_login": "fujiwara",
"committed_at": "2026-06-27T14:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56e7706f2c5cfbe8ecc3361fc5fc8f97bc6c638e",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "validate --data as JSON before sending inject-event",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-06-27T14:11:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d81432d2a4b2bda0092dd7099da366f4652c0c3a",
"body": "Cover the /_sakumock/ inspection API, Go InspectionClient, and the\nsakumock inspect CLI subcommand, with links to each service's README.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "docs: add Inspection section to README",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-06-27T14:03:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8381f3089b619cd398b01987d13a74b95be7b092",
"body": "Add `sakumock inspect <service> <action>` to call /_sakumock/ inspection\nendpoints from the command line. Address resolves as default → env → --addr.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "feat: add `sakumock inspect` CLI subcommand",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-06-27T14:00:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9672ebe5b682b9096c4a6ef3c525f337b41fd87d",
"body": "Prevents double-slash paths that trigger 301 redirects and break\nPOST methods.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "fix: trim trailing slash from baseURL in InspectionClient",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-06-27T13:45:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "71ffa67e6c6d2c41021ebb177e5a8e9506622bb5",
"body": "Replace raw HTTP calls and mirror types (delivery, deliveriesResp,\nsnMessage, inspectNotifications, postJSON) with InspectionClient\nmethods.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\nSigned-off-by: fujiwara <fujiwara.shunichiro@gmail.com>",
"is_bot": false,
"headline": "test: use InspectionClient in existing tests",
"author_name": "fujiwara",
"author_login": "fujiwara",
"committed_at": "2026-06-27T13:38:35Z",
"body_truncated": false,
"is_coding_agent": true
}
],
"releases_count": 41,
"commits_last_year": 493,
"latest_release_at": "2026-07-20T13:30:46Z",
"latest_release_tag": "v0.7.1",
"releases_from_tags": false,
"days_since_last_push": 11,
"active_weeks_last_year": 12,
"days_since_latest_release": 11,
"mean_days_between_releases": 4.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/sacloud/sakumock",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/sacloud/sakumock",
"is_deprecated": false,
"latest_version": "v0.7.1",
"repository_url": "https://github.com/sacloud/sakumock",
"versions_count": 12,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T13:23:48Z",
"latest_version_yanked": null,
"days_since_latest_publish": 11
}
]
},
"popularity": {
"forks": 0,
"stars": 10,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"apigw/Makefile",
"apprun/Makefile",
"apprundedicated/Makefile",
"eventbus/Makefile",
"iam/Makefile",
"kms/Makefile",
"monitoringsuite/Makefile",
"objectstorage/Makefile",
"secretmanager/Makefile",
"simplemq/Makefile",
"simplenotification/Makefile",
"test/terraform/Makefile",
"workflows/Makefile"
],
"api_schema_files": [
"apigw/openapi/openapi.json",
"apprun/openapi/openapi.yaml",
"apprundedicated/openapi/openapi.json",
"eventbus/openapi/openapi.json",
"iam/openapi/openapi.json",
"kms/openapi/openapi.json",
"monitoringsuite/openapi/openapi.json",
"objectstorage/openapi/openapi.json",
"simplenotification/openapi/openapi.yaml",
"workflows/openapi/openapi.json"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 48139,
"source_files_sampled": 305,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 33831
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "google.golang.org/grpc",
"direct": true,
"version": "v1.81.1",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 9.1,
"advisory_ids": [
"GHSA-hrxh-6v49-42gf",
"GO-2026-6061"
],
"fixed_version": "1.82.1",
"advisory_count": 2,
"oldest_advisory_days": 9
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.55.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5942"
],
"fixed_version": "0.56.0",
"advisory_count": 1,
"oldest_advisory_days": 17
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.37.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 17
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 2,
"critical": 1
},
"advisory_count": 4,
"affected_count": 3,
"assessed_count": 73,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/alecthomas/kong",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.15.0"
},
{
"name": "github.com/aws/aws-sdk-go-v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.42.0"
},
{
"name": "github.com/aws/aws-sdk-go-v2/credentials",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.19.24"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/s3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.103.3"
},
{
"name": "github.com/aws/smithy-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.27.1"
},
{
"name": "github.com/coreos/go-oidc/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.19.0"
},
{
"name": "github.com/golang-jwt/jwt/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.3.1"
},
{
"name": "github.com/golang/snappy",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/sacloud/sacloud-sdk-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.1-beta.2"
},
{
"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.69.0"
},
{
"name": "go.opentelemetry.io/otel",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/trace",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/proto/otlp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.0"
},
{
"name": "golang.org/x/oauth2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.36.0"
},
{
"name": "golang.org/x/time",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.15.0"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.81.1"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.36.11"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "modernc.org/sqlite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.48.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/alecthomas/kong",
"direct": true,
"version": "v1.15.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2",
"direct": true,
"version": "v1.42.0",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/credentials",
"direct": true,
"version": "v1.19.24",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/s3",
"direct": true,
"version": "v1.103.3",
"ecosystem": "go"
},
{
"name": "github.com/aws/smithy-go",
"direct": true,
"version": "v1.27.1",
"ecosystem": "go"
},
{
"name": "github.com/coreos/go-oidc/v3",
"direct": true,
"version": "v3.19.0",
"ecosystem": "go"
},
{
"name": "github.com/golang-jwt/jwt/v5",
"direct": true,
"version": "v5.3.1",
"ecosystem": "go"
},
{
"name": "github.com/golang/snappy",
"direct": true,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/sacloud/sacloud-sdk-go",
"direct": true,
"version": "v0.0.1-beta.2",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
"direct": true,
"version": "v0.69.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/proto/otlp",
"direct": true,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/oauth2",
"direct": true,
"version": "v0.36.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": true,
"version": "v0.15.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": true,
"version": "v1.81.1",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": true,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": true,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "modernc.org/sqlite",
"direct": true,
"version": "v1.48.1",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
"direct": false,
"version": "v1.7.13",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
"direct": false,
"version": "v1.4.29",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
"direct": false,
"version": "v2.7.29",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
"direct": false,
"version": "v1.4.30",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
"direct": false,
"version": "v1.13.12",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
"direct": false,
"version": "v1.9.22",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
"direct": false,
"version": "v1.13.29",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
"direct": false,
"version": "v1.19.29",
"ecosystem": "go"
},
{
"name": "github.com/benbjohnson/clock",
"direct": false,
"version": "v1.3.5",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v5",
"direct": false,
"version": "v5.0.3",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/dlclark/regexp2",
"direct": false,
"version": "v1.11.5",
"ecosystem": "go"
},
{
"name": "github.com/dustin/go-humanize",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/fatih/color",
"direct": false,
"version": "v1.19.0",
"ecosystem": "go"
},
{
"name": "github.com/felixge/httpsnoop",
"direct": false,
"version": "v1.0.4",
"ecosystem": "go"
},
{
"name": "github.com/ghodss/yaml",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/go-faster/errors",
"direct": false,
"version": "v0.7.1",
"ecosystem": "go"
},
{
"name": "github.com/go-faster/jx",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/go-faster/yaml",
"direct": false,
"version": "v0.4.6",
"ecosystem": "go"
},
{
"name": "github.com/go-jose/go-jose/v4",
"direct": false,
"version": "v4.1.4",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/stdr",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/gofrs/flock",
"direct": false,
"version": "v0.13.0",
"ecosystem": "go"
},
{
"name": "github.com/grpc-ecosystem/grpc-gateway/v2",
"direct": false,
"version": "v2.29.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-cleanhttp",
"direct": false,
"version": "v0.5.2",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-retryablehttp",
"direct": false,
"version": "v0.7.8",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.14",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/ncruces/go-strftime",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/ogen-go/ogen",
"direct": false,
"version": "v1.20.3",
"ecosystem": "go"
},
{
"name": "github.com/remyoudompheng/bigfft",
"direct": false,
"version": "v0.0.0-20230129092748-24d4a6f8daec",
"ecosystem": "go"
},
{
"name": "github.com/segmentio/asm",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/shopspring/decimal",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/auto/sdk",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/metric",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/multierr",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/ratelimit",
"direct": false,
"version": "v0.3.1",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap",
"direct": false,
"version": "v1.27.1",
"ecosystem": "go"
},
{
"name": "golang.org/x/exp",
"direct": false,
"version": "v0.0.0-20260112195511-716be5621a96",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.55.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.45.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.37.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/api",
"direct": false,
"version": "v0.0.0-20260526163538-3dc84a4a5aaa",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/rpc",
"direct": false,
"version": "v0.0.0-20260526163538-3dc84a4a5aaa",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "modernc.org/libc",
"direct": false,
"version": "v1.70.0",
"ecosystem": "go"
},
{
"name": "modernc.org/mathutil",
"direct": false,
"version": "v1.7.1",
"ecosystem": "go"
},
{
"name": "modernc.org/memory",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 73,
"direct_count": 23,
"indirect_count": 50
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 129,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 1,
"closed_unmerged_prs": 18
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "fujiwara",
"commits": 409,
"avatar_url": "https://avatars.githubusercontent.com/u/67804?v=4"
},
{
"type": "User",
"login": "yamamoto-febc",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/1644816?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.993
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"e2e.yml",
"release.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/4 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 8,
"reason": "dependency not pinned by hash detected -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 9,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 7,
"reason": "3 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "c4300f7a3fb74ae1799ddb358fdbfe26a6b7d950",
"ran_at": "2026-07-31T21:06:08Z",
"aggregate_score": 6.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-26T07:26:08Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-20T13:23:48Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/sacloud/sakumock",
"host": "github.com",
"name": "sakumock",
"owner": "sacloud"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"security": 64,
"vitality": 75,
"community": 44,
"governance": 63,
"engineering": 57
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 75,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"commits_last_year": 493,
"human_commit_share": 0.93,
"days_since_last_push": 11,
"active_weeks_last_year": 12
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 11 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "12/52 weeks with commits",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 12
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "493 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 493
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 41,
"latest_release_tag": "v0.7.1",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 4.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "41 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 41
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~4.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 4.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 44,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 16,
"inputs": {
"forks": 0,
"stars": 10,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "10 stars",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 10
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 63,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.993
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"merged_prs": 129,
"open_issues": 0,
"closed_issues": 1,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 18
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "129/147 decided PRs merged",
"points": 33.6,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 129,
"decided": 147
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/4 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"followers": 45,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "sacloud",
"public_repos": 85,
"account_age_days": 3715
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "45 followers of sacloud",
"points": 12,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 45,
"login": "sacloud"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "85 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 85
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/sacloud/sakumock"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 11
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 11 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 11
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "12 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 12
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 57,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 64,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 6.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/4 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "3 existing vulnerabilities detected",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 73 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 73
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 66,
"inputs": {
"source": "osv",
"advisories": 4,
"affected_packages": 3,
"assessed_packages": 73,
"unassessed_packages": 0,
"affected_by_severity": "critical 1, unknown 2",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: google.golang.org/grpc v1.81.1 (critical 9.1)",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "google.golang.org/grpc v1.81.1 (critical 9.1)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 73,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 7
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "excellent",
"name": "AI Readiness",
"value": 87,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 33831
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "93 of 93 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 93,
"sampled": 93
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 87,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"apigw/Makefile",
"apprun/Makefile",
"apprundedicated/Makefile",
"eventbus/Makefile",
"iam/Makefile",
"kms/Makefile",
"monitoringsuite/Makefile",
"objectstorage/Makefile",
"secretmanager/Makefile",
"simplemq/Makefile",
"simplenotification/Makefile",
"test/terraform/Makefile",
"workflows/Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.69,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.01
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, apigw/Makefile, apprun/Makefile, apprundedicated/Makefile, eventbus/Makefile, iam/Makefile, kms/Makefile, monitoringsuite/Makefile, objectstorage/Makefile, secretmanager/Makefile, simplemq/Makefile, simplenotification/Makefile, test/terraform/Makefile, workflows/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, apigw/Makefile, apprun/Makefile, apprundedicated/Makefile, eventbus/Makefile, iam/Makefile, kms/Makefile, monitoringsuite/Makefile, objectstorage/Makefile, secretmanager/Makefile, simplemq/Makefile, simplenotification/Makefile, test/terraform/Makefile, workflows/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "69 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 69,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "1 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 48139,
"source_files_sampled": 305,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/305 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 305,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": [
"apigw/openapi/openapi.json",
"apprun/openapi/openapi.yaml",
"apprundedicated/openapi/openapi.json",
"eventbus/openapi/openapi.json",
"iam/openapi/openapi.json",
"kms/openapi/openapi.json",
"monitoringsuite/openapi/openapi.json",
"objectstorage/openapi/openapi.json",
"simplenotification/openapi/openapi.yaml",
"workflows/openapi/openapi.json"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "apigw/openapi/openapi.json, apprun/openapi/openapi.yaml, apprundedicated/openapi/openapi.json, eventbus/openapi/openapi.json, iam/openapi/openapi.json, kms/openapi/openapi.json, monitoringsuite/openapi/openapi.json, objectstorage/openapi/openapi.json, simplenotification/openapi/openapi.yaml, workflows/openapi/openapi.json",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "apigw/openapi/openapi.json, apprun/openapi/openapi.yaml, apprundedicated/openapi/openapi.json, eventbus/openapi/openapi.json, iam/openapi/openapi.json, kms/openapi/openapi.json, monitoringsuite/openapi/openapi.json, objectstorage/openapi/openapi.json, simplenotification/openapi/openapi.yaml, workflows/openapi/openapi.json"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-31T21:06:27.362082Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sacloud/sakumock.svg",
"full_name": "sacloud/sakumock",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.